last executing test programs: 9m45.308982581s ago: executing program 4 (id=230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000080)=r7}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x24040084) 9m44.044388706s ago: executing program 4 (id=234): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x248028, &(0x7f0000000180)=ANY=[], 0x4, 0x26d, &(0x7f00000005c0)="$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") getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000009c0)={[{@debug}, {@nojournal_checksum}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7f800000}}, {@test_dummy_encryption}, {@nomblk_io_submit}], [{@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x63, 0x35, 0x32, 0x39, 0x38, 0x65, 0x61], 0x2d, [0xd, 0x36, 0x30, 0xc], 0x2d, [0x33, 0x35, 0x39, 0x61], 0x2d, [0x61, 0x64, 0x61, 0x35], 0x2d, [0x35, 0x62, 0x36, 0x35, 0x64, 0x63, 0x32, 0x62]}}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_lt}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@dont_appraise}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000540)='./bus\x00', 0xa40, 0x16e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x5, 0x0) 9m43.068573045s ago: executing program 4 (id=237): socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket(0x6, 0x0, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x1f2) fgetxattr(r5, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) 9m41.363399608s ago: executing program 4 (id=243): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() keyctl$set_reqkey_keyring(0xe, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x4000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f00000000c0)=0x8297, 0xfffffffffffffe91) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mprotect(&(0x7f0000056000/0x1000)=nil, 0x1000, 0x2) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) 9m40.295923929s ago: executing program 4 (id=246): statfs(&(0x7f0000000000)='./file1\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") 9m40.20429399s ago: executing program 4 (id=248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000070000002800000005"], 0x48) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed0744790000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0xfc, 0x0, 0xfffff030}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f00000003c0), 0x0, 0x0, 0x0, 0x7, r0}, 0x38) 9m40.20404767s ago: executing program 32 (id=248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000070000002800000005"], 0x48) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed0744790000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0xfc, 0x0, 0xfffff030}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f00000003c0), 0x0, 0x0, 0x0, 0x7, r0}, 0x38) 2m13.856059278s ago: executing program 1 (id=1323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='ext4_fallocate_exit\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0xfffffffffffffe2b, &(0x7f0000000180)}, 0x10) socket$inet6(0xa, 0x1, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff03", 0x2c}], 0x1) setsockopt(r7, 0x65, 0x1, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, 0x0, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xebd, 0x0, {0x0, 0x0, 0x0, r11, {0xffe0, 0xfff1}, {0x3}, {0x4, 0x8}}}, 0x24}}, 0x0) 2m12.242269359s ago: executing program 1 (id=1326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r8, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000440), r10) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@delchain={0x2c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}, {0xffff, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0xe7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4010) 2m11.244352029s ago: executing program 1 (id=1330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mlockall(0x7) prlimit64(0x0, 0x9, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/sync_on_suspend', 0x400, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r7, 0x0) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f00000001c0)=0xb9, 0x2) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0xfffe}, @sack_perm], 0x6) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 2m10.347271326s ago: executing program 1 (id=1341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff010000000000000000000000000001080004"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000006c0)={[{@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x6}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}, {@fmask={'fmask', 0x3d, 0x7}}, {@gid}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0xce34}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000500)={&(0x7f0000000240)={0x1d, r7}, 0x10, &(0x7f00000004c0)={&(0x7f00000002c0)={0x7, 0x31, 0x9, {r8, r9/1000+10000}, {0x77359400}, {0x3, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1}, 0x40, 0x3, 0x0, 0x0, "650652ad30c244c489d6cee37cc3f2c88e108af7ee3210fedec5998e983863f8b3e637fbdbf0ee0ebf1f408f59427984abbaf53c96bdfb0925505eda65f3cf6b"}}, 0x80}, 0x1, 0x0, 0x0, 0x20040040}, 0x4800) write$cgroup_pid(r5, &(0x7f0000000140), 0x1e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) clock_gettime(0x1, &(0x7f0000000080)) rmdir(&(0x7f0000000100)='./control\x00') 2m8.225760048s ago: executing program 1 (id=1336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6026e0000fc020000000000000000000000000000fe80000000000000000000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='f2fs_fallocate\x00', r4, 0x0, 0x9}, 0xfffffe7e) listen(0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r6, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x6}}], 0x1, 0x8094) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 2m7.624220039s ago: executing program 1 (id=1337): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(0xffffffffffffffff, 0x111, 0x3, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) 2m7.623992779s ago: executing program 33 (id=1337): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(0xffffffffffffffff, 0x111, 0x3, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) 25.021239144s ago: executing program 6 (id=1586): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) 24.747978829s ago: executing program 6 (id=1587): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x73}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(&(0x7f00000001c0), 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000f68f, 0x8, 0x9, 0x10001ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x203, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0x1, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x7, 0x81, 0x6, 0x6, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x800, 0xfffff801, 0x2b, 0xa, 0x0, 0x6, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x3ff, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x9, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0x50) syz_usb_connect$uac1(0x0, 0x98, &(0x7f0000000740)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109028600030109000702010209240323000303030b052405060109040100000102000009968095f1e9cecb8b04010101010200000724018008021009050109ff03ffc803072501410405000904020000010200000904020101010200000b24020106010b0100000007240101c0020009058209500005080f07250182fe070000000000000000"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x11, &(0x7f0000000180)=@string={0x11, 0x3, "5be53b6b34edd09e786ae12e1303f7"}}, {0x1c, &(0x7f00000004c0)=@string={0x1c, 0x3, "3eef7959e340e424949e622d73cbc006bd00d94e5e9fe39fc7a2"}}, {0x5d, &(0x7f0000000440)=@string={0x5d, 0x3, "8254e8c6149498e77bc23809858e7c692a5bc9028b6d60992ec930d911cef6576e356b21ceed6783006f72bc7f069c873503466d0a8ca01c04ababc048ce1da80d44e6cbfb4d80821b1afa2c9d517eed973e0aecc7526782e6912e"}}, {0xc3, &(0x7f0000000800)=@string={0xc3, 0x3, "1865b1d2aef972b7f0337e07c42becb8fae07397fecbe4ef34075bc45b598132dceb2ad0082cfc3f3a226b911437e5414d67b7ff9e53e49d2b304269ac9be3c4d887f4e2fc82eeb5c8a48152055a9058b048eab94718a2ba6cd70a5249a21df3bd2000939592f9facf1ea09b0000000000000000000000f900007148172e3a43ddc0d0fb84608ba3cfeaa0570ac850af2f1837c99b9d4a03548b6263261aedcde3305e90158f44ebb02d84cd3b585402f096aea1f7d31247a65805cb19bc874667"}}, {0x81, &(0x7f0000000500)=@string={0x81, 0x3, "d46fd392fe0ed752e675cce0f8d96bffb938f047f5758b6bb907bb1cc438c94f9022c8bdebed309e8d30e7b79e941c7f54a33cc7da62733b9b60a516f0c27272fb11da0caabbba0cedb52e1112f530441d92abb890c09618446579c68d14087143a5ff350bb1a3cbdb8cb80c6cd43cb292a6c45af14041833aa014dfe69a94"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x405}}]}) 24.067073293s ago: executing program 6 (id=1592): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 23.928131975s ago: executing program 6 (id=1594): keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f00000003c0)) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x3, 0xbc, 0x6, 0x1}) sendmsg$nl_route(r0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 22.6320819s ago: executing program 6 (id=1597): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x6d1c8b79a9711461, 0x0, 0xfffffffd, {0xa, 0x0, 0xb6}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[@rights={{0x1c, 0x1, 0x1, [r3, r3, 0xffffffffffffffff]}}], 0x20, 0x20000800}}], 0x2, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x4, 0xc0, 0x5, 0x14c, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r1, 0x0, 0x3ffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001700)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in=@local, 0x0, 0x32}, @in=@multicast2, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x7, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x4, 0x2, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}]}, 0x154}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x51f303, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@sb={'sb', 0x3d, 0x50cf}}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") sendfile(r5, r1, 0x0, 0x7ffff000) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 22.448261574s ago: executing program 6 (id=1599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 22.409492395s ago: executing program 34 (id=1599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.072384173s ago: executing program 3 (id=1648): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf250900000008000300", @ANYBLOB="0c0006"], 0x28}}, 0x4) 8.016116515s ago: executing program 3 (id=1650): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000010850000006d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x0, 0x0, 0x0) 8.015835594s ago: executing program 0 (id=1651): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20) 6.232262579s ago: executing program 0 (id=1652): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) 6.231990259s ago: executing program 2 (id=1653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) 6.231807829s ago: executing program 3 (id=1654): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2106, &(0x7f0000000180)={[{@grpid}, {@noinit_itable}, {@nouid32}, {@stripe={'stripe', 0x3d, 0x8}}, {@commit={'commit', 0x3d, 0x8000000000000001}}, {@grpid}]}, 0x4, 0x46b, &(0x7f00000009c0)="$eJzs289vFFUcAPDvTFt+IxXxBz/UKhobf2yhgHLwotHEgyYmXvBY20KQhRpaEyFE0Rg8GhITj8ajiX+BJ70Y9WTiVe+GhBguoqcxsztDd9fttsC2A93PJ9nueztv9r3vvHm7b+Z1AxhYY/mfJGJbRPweETua2fYCY82n69cuTP9z7cJ0Eln21l9Jo9zf1y5Ml0XL/bYWmfE0Iv00ib1d6p0/d/7UVL0+e7bITyycfm9i/tz5506enjoxe2L2zOTRo4cPHXzh+ckjfYnz3rytez6c27f7tbcvvzF97PI7P3+blPF3xNEnY702Ppllfa6uWttb0snwCnYYWsXGsGJ5N+TdNdIY/ztiKBY7b0e8+kmljQNWVVZYYvPFDFjHkqi6BUA1yi/6/Pq3fKzd7KN6V19qXgDlcV8vHs0tw5EWZUY6rm/7aSwijl3896v8EatzHwIAoM33+fzn2W7zvzQeaCl3T2xsrA2NFmspOyPivojYFRH3RzTKPhgRD3WrpMeCQOciyf/nP+mVW49uefn878Vibat9/lfO/mJ0qMhtb8R/JI2ozx5oHJOI8RjZePxkffZgjzp+eOW3z5fa1jr/yx95/eVcsGjHleGN7fvMTC1M3U7Mra5+HLFnuFv8yY2VgCQidkfEnlus4+TT3+xbatvy8fewknWmZWRfRzzV7P+L0RF/Kem9PjmxKT8fJvKz4EDXOn759dKbS9V/W/H3Qd7/W7qe/zfiH01a12vnb+bdm6P70h+fLXlNU7ul83/xhQ3F8wdTCwtnD0ZsSF5vNrr19cnFfct8WT6Pf3x/9/G/MxaPxN6IyE/ihyPikYh4tIjusYh4PCL29zgKP738xLu9jlD3+Df1eMf+yeOf6ej/0fYiHf2/mNgQna90Twyd+vG79ndcSfylvP8PN1LjxSuNz78ve8e1knbd7NkMAAAAd6s0IrZFktZupNO0Vmv+D/+u2JLW5+YXnjk+9/6ZmeZvBEZjJC3vdDXvB48k5f3P0Zb8ZEf+UHHf+IuhzY18bXquPlN18DDgtraO//KWb6359KffaMD614d1NOAuZfzD4DL+YXAZ/zC4uoz/zVW0A1h73b7/P6qgHcDa6xj/lv1ggLj+h8E1HFlSdRuAarR+//sggIExvzmW/5H8ekhkWZbdAc1YP4lI74hm9CeRrPIo2FZ1gDefqPqTCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD/+CwAA//9lEuuH") 6.231691479s ago: executing program 5 (id=1655): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) sync() 4.295712707s ago: executing program 0 (id=1656): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, 0x0) mount$cgroup2(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x20, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) 4.295443137s ago: executing program 2 (id=1657): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) pwritev(r0, 0x0, 0x0, 0xfb5f, 0x6) 4.295054147s ago: executing program 3 (id=1658): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) 4.294726577s ago: executing program 5 (id=1659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 4.228359798s ago: executing program 5 (id=1660): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0xd, 0x0, 0x0) 2.229245797s ago: executing program 0 (id=1661): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r4 = timerfd_create(0x8, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x90000004}) clock_adjtime(0x0, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2.229019377s ago: executing program 2 (id=1662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) 2.228758267s ago: executing program 3 (id=1663): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x524, &(0x7f0000000e00)="$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") setxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.228688617s ago: executing program 5 (id=1664): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xe0) 2.215809557s ago: executing program 5 (id=1665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.204160768s ago: executing program 2 (id=1666): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0xfffffdb1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000230c0000000800000009000000000000090300000000302e302e5f5f"], 0x0, 0x2c, 0x0, 0x0, 0x7f}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX, @ANYBLOB='C'], 0x48) 59.682909ms ago: executing program 0 (id=1667): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}]}) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000)='exfat\x00', 0x0, &(0x7f00000001c0)='discard') 59.475789ms ago: executing program 2 (id=1668): unshare(0x2040400) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) sendfile(r0, r0, &(0x7f00000002c0), 0x7f03) 59.159669ms ago: executing program 3 (id=1669): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket(0x2, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x2001}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = dup(0xffffffffffffffff) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$eJzs3M9rHGUYB/DHTdrUxPxQa7WC9MVe9DIkOXhRkCApSBeUthFaQZiajS4Zd0NmCayI0ZNXL/4BXsWjN0G86SUe/Bu85eLRgzrSnbY2djVotRPD53PZh33nC8+7s7zwLvvO/gsfv7O5UWYb+SBaD7wYra2IyV9SpGjFLR/Es89/8+1Tl69eu7jSbq9eSunCypWl51JKc+e+ev29z5/+ejDz2hdzX07F3sIb+z8u/7B3Zu/s/q9X3u6WqVumXn+Q8nS93x/k14tOWu+Wm1lKrxadvOykbq/sbB8Y3yj6W1vDlPfWZ6e3tjtlmfLeMG12hmnQT4PtYcrfyru9lGVZmp0O7sXaZz9VVRVRVSfiZFRVVT0Y09GKh2I25mI+FuLheCQejdPxWJyJx+OJODu6qum+AQAAAAAAAAAAAAAAAAAA4HgZd/5/5q7z/59EjDv/f67h5gEAAAAAAAAAAAAAAAAAAOCYuHz12sWVdnv1UkqnIoqPdtZ21urXenxlI7pRRCcWYz5+jtHp/1pdn4z26mIaWYgPi92b+d2dtYmD+aXR4wTuyl94ub26VOfTwfxUTN+ZX475OD0+v/yH/PlR/lQ8c/6OfBbz8f2b0Y8i1uNG9vf8+0spvfRK+3b+u7167usN3hcAAAD4N2XptrH79yz7s/E6f9jvAzf214tj9/eT8eRks3Mnohy+u5kXRWe78eJWR/U7uxFxRBr7x0UrIo5AG39RnDj0mpkGGvt0JuIe4hMHvkhH4nP+PxaHrRwT/+m6xP1x86ZPNd0HAAAAAAAAAAAAf8/9+Dth03MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAQAA//+siMjP") r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 58.953929ms ago: executing program 5 (id=1670): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fcntl$getown(r2, 0x9) ptrace$ARCH_SET_GS(0x1e, r3, 0x0, 0x1001) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x4e22, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x401, 0x5, 0x40000000, 0x8000000002, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x2}, 0x4000000, 0x4000000, 0x0, 0x0, 0x1}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x8}}]}, 0xc4}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x39b, @remote}, 0x1c) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x0, 0x1e0, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b65b0ff000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), 0x4) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xfdfdffff}}) 214.28µs ago: executing program 2 (id=1671): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, 0x0) mount$cgroup2(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x20, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) 0s ago: executing program 0 (id=1672): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) kernel console output (not intermixed with test programs): d=5042 comm="syz.1.1074" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 501.164773][ T24] audit: type=1400 audit(524768.666:3427): avc: denied { open } for pid=5042 comm="syz.1.1074" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 501.824812][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 501.825598][ T5052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 503.472779][ T5052] EXT4-fs (loop1): Unrecognized mount option "subj_type=" or missing value [ 503.895821][ T5051] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 504.053704][ T5041] bridge0: port 1(gretap0) entered disabled state [ 504.745522][ T24] audit: type=1400 audit(524772.043:3428): avc: denied { rename } for pid=5070 comm="syz.2.1078" name="file0" dev="tmpfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 504.813896][ T5073] EXT4-fs (loop5): dax option not supported [ 504.828048][ T5059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1076'. [ 505.532783][ T5082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 506.209931][ T5081] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5081 comm=syz.5.1079 [ 506.298592][ T5085] device veth0_vlan left promiscuous mode [ 506.304804][ T5085] device veth0_vlan entered promiscuous mode [ 506.312145][ T5085] device veth1_macvtap left promiscuous mode [ 506.319168][ T5085] device veth1_macvtap entered promiscuous mode [ 506.325950][ T5085] bridge0: port 1(gretap0) entered blocking state [ 506.332682][ T5085] bridge0: port 1(gretap0) entered forwarding state [ 506.456052][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 506.543254][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 506.555002][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 507.474915][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 507.484056][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 507.492643][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 507.501191][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 507.509594][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 507.561234][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 507.569805][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 507.676849][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 507.687429][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 507.695780][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 507.709376][ T5095] EXT4-fs (loop5): Ignoring removed orlov option [ 507.722590][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 509.849070][ T5095] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 509.918349][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 510.109004][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 510.117955][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 510.126404][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 510.135431][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 510.144094][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 510.152601][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 510.161384][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 510.504411][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 510.547124][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 510.590220][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 510.629479][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 510.668358][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 510.750014][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 510.760169][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 510.769329][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 510.778454][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 510.786984][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 510.795478][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 510.804123][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 511.110551][ T5123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1090'. [ 511.283650][ T5123] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5123 comm=syz.1.1090 [ 513.438652][ T5132] EXT4-fs (loop1): Ignoring removed bh option [ 513.444964][ T5132] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 513.949044][ T5122] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 514.061796][ T5122] netlink: 'syz.2.1088': attribute type 13 has an invalid length. [ 514.078554][ T5122] gretap0: refused to change device tx_queue_len [ 514.085933][ T5122] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 514.458278][ T5132] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue [ 516.576091][ T5172] EXT4-fs (loop5): dax option not supported [ 516.595521][ T5172] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1102'. [ 516.605467][ T5176] overlayfs: failed to clone lowerpath [ 516.617858][ T5176] overlayfs: failed to clone upperpath [ 516.834329][ T24] audit: type=1326 audit(524783.343:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 516.926337][ T24] audit: type=1326 audit(524783.343:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 516.996159][ T24] audit: type=1326 audit(524783.343:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 517.020175][ T53] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 517.027901][ T5182] cgroup: subsys name conflicts with all [ 517.101038][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 517.538816][ T24] audit: type=1326 audit(524783.343:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 517.596731][ T24] audit: type=1326 audit(524783.343:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 517.699872][ T24] audit: type=1326 audit(524783.343:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 517.723726][ T24] audit: type=1326 audit(524783.343:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 517.747725][ T24] audit: type=1326 audit(524783.343:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 517.786902][ T24] audit: type=1326 audit(524783.343:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 517.822097][ T24] audit: type=1326 audit(524783.343:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5170 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 517.846225][ T53] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.867741][ T53] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.978253][ T53] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 517.994097][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 518.015530][ T53] usb 6-1: SerialNumber: syz [ 518.245555][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 518.449300][ T53] usb 6-1: 0:2 : does not exist [ 518.459758][ T53] usb 6-1: USB disconnect, device number 2 [ 518.822784][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 520.130620][ T5211] exfat: Bad value for 'gid' [ 521.989078][ T5228] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.007376][ T5228] FAT-fs (loop3): unable to read boot sector [ 522.033726][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 522.053207][ T5241] device macsec0 entered promiscuous mode [ 522.095781][ T5241] overlayfs: workdir and upperdir must be separate subtrees [ 522.098146][ T5244] exfat: Deprecated parameter 'namecase' [ 522.138257][ T5244] exfat: Unknown parameter 'keep_last_dots' [ 526.409164][ T5278] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 526.515582][ T5286] exfat: Deprecated parameter 'namecase' [ 526.547238][ T5286] exfat: Unknown parameter 'keep_last_dots' [ 528.220322][ T5296] exfat: Deprecated parameter 'namecase' [ 528.230750][ T5296] exfat: Unknown parameter 'keep_last_dots' [ 528.426866][ T5305] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1135'. [ 528.475951][ T5305] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5305 comm=syz.5.1135 [ 529.321125][ T5321] 9pnet: Insufficient options for proto=fd [ 529.803005][ T5316] exfat: Deprecated parameter 'namecase' [ 529.809325][ T5316] exfat: Unknown parameter 'keep_last_dots' [ 531.275623][ T5337] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue [ 531.301694][ T5341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1142'. [ 534.998211][ T5373] exfat: Deprecated parameter 'namecase' [ 535.004248][ T5373] exfat: Unknown parameter 'keep_last_dots' [ 536.699935][ T5383] exfat: Deprecated parameter 'namecase' [ 536.712869][ T5383] exfat: Unknown parameter 'keep_last_dots' [ 538.275102][ T5399] proc: Unknown parameter '' [ 538.280446][ T24] kauditd_printk_skb: 71 callbacks suppressed [ 538.280475][ T24] audit: type=1400 audit(524803.407:3510): avc: denied { remount } for pid=5394 comm="syz.2.1156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 538.848900][ T24] audit: type=1400 audit(524803.697:3511): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 539.869853][ T5420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5420 comm=syz.1.1161 [ 541.070084][ T24] audit: type=1326 audit(524805.979:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 541.219590][ T24] audit: type=1326 audit(524805.979:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 541.285486][ T24] audit: type=1326 audit(524805.979:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 541.309148][ T24] audit: type=1326 audit(524805.979:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 543.569735][ T24] audit: type=1326 audit(524805.979:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 543.611934][ T5435] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1165'. [ 543.631916][ T5431] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 543.792406][ T5431] No source specified [ 543.808106][ T5431] netlink: 'syz.2.1163': attribute type 16 has an invalid length. [ 543.882433][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 544.239821][ T5435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1165'. [ 544.683345][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 545.083914][ T5435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1165'. [ 545.156723][ T24] audit: type=1326 audit(524805.979:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 545.191855][ T5440] exfat: Deprecated parameter 'namecase' [ 545.217967][ T5440] exfat: Unknown parameter 'keep_last_dots' [ 545.260945][ T24] audit: type=1326 audit(524805.979:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 545.648405][ T5453] EXT4-fs (loop5): Ignoring removed nobh option [ 545.663633][ T5453] EXT4-fs (loop5): Ignoring removed bh option [ 545.679149][ T24] audit: type=1326 audit(524805.979:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 545.708032][ T5453] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 546.881520][ T24] audit: type=1326 audit(524805.989:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 546.905284][ T24] audit: type=1326 audit(524805.989:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 546.952745][ T24] audit: type=1326 audit(524805.989:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 546.976999][ T24] audit: type=1326 audit(524805.989:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 547.175793][ T5461] F2FS-fs (loop1): fault_injection options not supported [ 547.184820][ T5461] F2FS-fs (loop1): invalid crc value [ 547.217439][ T5461] F2FS-fs (loop1): Found nat_bits in checkpoint [ 547.270103][ T5453] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,journal_dev=0x0000000000000002,errors=remount-ro,dioread_lock,data_err=ignore,jqfmt=vfsv1,data_err=ignore,grpquota,nobh,dioread_nolock,bh,i_version, [ 547.298582][ T5461] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 547.493907][ T5465] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 547.501233][ T5465] EXT4-fs (loop2): Ignoring removed bh option [ 547.509524][ T5465] EXT4-fs (loop2): Test dummy encryption mode enabled [ 547.516609][ T5465] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 547.532714][ T24] audit: type=1326 audit(524805.989:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 548.222303][ T24] audit: type=1326 audit(524805.989:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 548.345272][ T5465] EXT4-fs (loop2): 1 truncate cleaned up [ 548.351118][ T5465] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue [ 548.647548][ T24] audit: type=1326 audit(524805.989:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 548.689274][ T5453] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3342: comm syz.5.1170: Allocating blocks 497-513 which overlap fs metadata [ 548.704448][ T5453] EXT4-fs (loop5): Remounting filesystem read-only [ 549.059889][ T5492] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5492 comm=syz.1.1174 [ 549.376720][ T5489] exfat: Deprecated parameter 'utf8' [ 549.382073][ T5489] exfat: Deprecated parameter 'utf8' [ 549.398451][ T5489] exfat: Deprecated parameter 'utf8' [ 549.402356][ T5488] EXT4-fs (loop5): pa ffff888128d71c78: logic 128, phys. 385, len 8 [ 549.411971][ T5488] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 549.515479][ T5489] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 550.596691][ T5503] device veth1_macvtap entered promiscuous mode [ 550.689965][ T24] kauditd_printk_skb: 22 callbacks suppressed [ 550.690131][ T24] audit: type=1400 audit(524815.902:3549): avc: denied { getopt } for pid=5498 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 550.717487][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 550.852101][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 550.871467][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 550.884488][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 550.935448][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 550.943974][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 550.952532][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 550.961146][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 550.969831][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 550.977688][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 550.985598][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 551.068749][ T25] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 551.771255][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 552.027790][ T5513] netlink: 'syz.5.1181': attribute type 282 has an invalid length. [ 552.266971][ T5522] EXT4-fs (loop1): Test dummy encryption mode enabled [ 552.284081][ T5522] EXT4-fs (loop1): unsupported descriptor size 255 [ 555.314788][ T5556] EXT4-fs (loop1): Test dummy encryption mode enabled [ 555.355508][ T5556] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 555.377236][ T5561] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1190'. [ 555.424103][ T5561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5561 comm=syz.5.1190 [ 555.530931][ T5556] EXT4-fs error (device loop1): ext4_orphan_get:1421: comm syz.1.1191: bad orphan inode 131083 [ 555.544993][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 555.552390][ T5556] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue [ 556.957640][ T24] audit: type=1326 audit(524821.636:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 556.973110][ T348] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 557.003862][ T24] audit: type=1326 audit(524821.636:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 557.067984][ T24] audit: type=1326 audit(524821.646:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 557.129688][ T24] audit: type=1326 audit(524821.646:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 557.153800][ T24] audit: type=1326 audit(524821.646:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 557.193923][ T24] audit: type=1326 audit(524821.655:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 557.218096][ T24] audit: type=1326 audit(524821.777:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 557.699865][ T24] audit: type=1326 audit(524821.786:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 557.760044][ T348] usb 3-1: Using ep0 maxpacket: 16 [ 558.399428][ T348] usb 3-1: config 0 has no interfaces? [ 558.917658][ T348] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 558.927900][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.936398][ T348] usb 3-1: Product: syz [ 558.940762][ T348] usb 3-1: Manufacturer: syz [ 558.946995][ T348] usb 3-1: config 0 descriptor?? [ 558.948875][ T5591] Quota error (device loop5): find_tree_dqentry: Getting block too big (64 >= 6) [ 558.970722][ T5591] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 558.986053][ T348] usb 3-1: can't set config #0, error -71 [ 559.001190][ T5591] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.1200: Failed to acquire dquot type 0 [ 559.025945][ T348] usb 3-1: USB disconnect, device number 3 [ 559.153347][ T5591] EXT4-fs error (device loop5): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 559.240643][ T5591] EXT4-fs error (device loop5) in ext4_do_update_inode:5336: error 27 [ 559.306186][ T5591] EXT4-fs error (device loop5): ext4_dirty_inode:6143: inode #13: comm syz.5.1200: mark_inode_dirty error [ 559.438088][ T5591] EXT4-fs error (device loop5) in ext4_do_update_inode:5336: error 27 [ 559.448333][ T5591] EXT4-fs error (device loop5): __ext4_ext_dirty:182: inode #13: comm syz.5.1200: mark_inode_dirty error [ 559.461975][ T5591] EXT4-fs error (device loop5) in ext4_do_update_inode:5336: error 27 [ 559.470747][ T5591] EXT4-fs error (device loop5) in ext4_orphan_del:3292: error 27 [ 559.478753][ T5591] EXT4-fs error (device loop5) in ext4_do_update_inode:5336: error 27 [ 559.491854][ T5603] EXT4-fs (loop1): Ignoring removed nobh option [ 559.511533][ T5591] EXT4-fs error (device loop5): ext4_truncate:4390: inode #13: comm syz.5.1200: mark_inode_dirty error [ 559.569761][ T5603] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue [ 559.590040][ T5591] EXT4-fs error (device loop5) in ext4_orphan_cleanup:3108: error 27 [ 559.650514][ T5591] EXT4-fs (loop5): 1 truncate cleaned up [ 559.656511][ T5591] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 560.976872][ T5623] netlink: 'syz.3.1207': attribute type 4 has an invalid length. [ 561.232254][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 561.241597][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 563.754121][ T24] kauditd_printk_skb: 108 callbacks suppressed [ 563.754133][ T24] audit: type=1326 audit(524829.235:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.2.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 563.784976][ T5648] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 563.826748][ T5648] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 563.843939][ T5657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5657 comm=syz.1.1215 [ 563.856236][ T5648] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 563.871294][ T24] audit: type=1326 audit(524829.273:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.2.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 563.905108][ T24] audit: type=1326 audit(524829.329:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.2.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 563.937662][ T24] audit: type=1326 audit(524829.404:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.1.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 563.980053][ T24] audit: type=1326 audit(524829.404:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.1.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 564.003675][ T24] audit: type=1326 audit(524829.404:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.1.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 564.027099][ T24] audit: type=1326 audit(524829.404:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.1.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 564.050828][ T24] audit: type=1326 audit(524829.404:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.1.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 564.073375][ T5648] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 564.074506][ T24] audit: type=1326 audit(524829.404:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.1.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 564.136125][ T24] audit: type=1326 audit(524829.404:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.1.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 564.176967][ T5648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1213'. [ 564.387139][ T5670] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 564.398451][ T5670] exFAT-fs (loop2): unable to read boot sector [ 564.404741][ T5670] exFAT-fs (loop2): failed to read boot sector [ 564.410958][ T5670] exFAT-fs (loop2): failed to recognize exfat type [ 564.770995][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 564.863337][ T5675] EXT4-fs (loop1): Ignoring removed bh option [ 564.869951][ T5675] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 564.894832][ T5675] EXT4-fs (loop1): 1 truncate cleaned up [ 564.900833][ T5675] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,resgid=0x000000000000ee00,bh,noload,data_err=ignore,abort,,errors=continue [ 565.173892][ T5686] EXT4-fs (loop2): Unrecognized mount option "smackfstransmute=:'*." or missing value [ 565.373372][ T5693] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5693 comm=syz.5.1221 [ 566.183767][ T5700] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1222'. [ 566.192931][ T5700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 567.476781][ T5710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 567.610955][ T5711] device wireguard0 entered promiscuous mode [ 569.453526][ T5729] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 569.463319][ T24] kauditd_printk_skb: 121 callbacks suppressed [ 569.463331][ T24] audit: type=1326 audit(524834.576:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d0ab91550 code=0x7ffc0000 [ 570.035722][ T5751] fs-verity (loop1, inode 13): Unknown hash algorithm number: 3 [ 570.035981][ T24] audit: type=1326 audit(524834.623:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0d0ab91937 code=0x7ffc0000 [ 570.067452][ T24] audit: type=1326 audit(524834.623:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d0ab91550 code=0x7ffc0000 [ 570.091086][ T24] audit: type=1326 audit(524834.623:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d0ab927eb code=0x7ffc0000 [ 570.535135][ T24] audit: type=1326 audit(524834.623:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0d0ab9184a code=0x7ffc0000 [ 570.560458][ T24] audit: type=1326 audit(524834.623:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 571.187661][ T24] audit: type=1326 audit(524834.623:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 571.211545][ T24] audit: type=1326 audit(524834.623:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 571.605036][ T24] audit: type=1326 audit(524834.623:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 571.639935][ T24] audit: type=1326 audit(524834.623:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f0d0ab92be9 code=0x7ffc0000 [ 571.982845][ T5777] netlink: 'syz.0.1243': attribute type 12 has an invalid length. [ 572.278854][ T5781] EXT4-fs (loop5): Ignoring removed oldalloc option [ 572.313505][ T5781] EXT4-fs warning (device loop5): dx_probe:860: inode #2: comm syz.5.1245: dx entry: limit 1024 != root limit 124 [ 572.341390][ T5786] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 572.343385][ T5781] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.1245: Corrupt directory, running e2fsck is recommended [ 572.377824][ T5781] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 572.404553][ T5781] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.1245: corrupted in-inode xattr [ 572.417141][ T5781] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.1245: couldn't read orphan inode 15 (err -117) [ 572.467481][ T5781] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000003,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.auto_da_alloc,usrjquota=,grpid,delalloc,,,errors=continue [ 572.960044][ T5791] xt_socket: unknown flags 0x8 [ 573.231042][ T5793] EXT4-fs warning (device loop5): dx_probe:860: inode #2: comm syz.5.1245: dx entry: limit 1024 != root limit 124 [ 573.243265][ T5793] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.1245: Corrupt directory, running e2fsck is recommended [ 573.257755][ T5793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1245'. [ 574.424849][ T5799] exfat: Deprecated parameter 'namecase' [ 574.451288][ T5799] exfat: Unknown parameter 'keep_last_dots' [ 577.092464][ T5832] bridge0: port 3(gretap0) entered blocking state [ 577.099901][ T5832] bridge0: port 3(gretap0) entered disabled state [ 577.107208][ T5832] device gretap0 entered promiscuous mode [ 577.113244][ T5832] bridge0: port 3(gretap0) entered blocking state [ 577.119787][ T5832] bridge0: port 3(gretap0) entered forwarding state [ 578.725511][ T5837] EXT4-fs (loop5): Ignoring removed oldalloc option [ 578.765030][ T1615] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 578.845006][ T5837] EXT4-fs warning (device loop5): dx_probe:860: inode #2: comm syz.5.1260: dx entry: limit 1024 != root limit 124 [ 579.013764][ T5837] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.1260: Corrupt directory, running e2fsck is recommended [ 579.064329][ T1615] usb 3-1: Using ep0 maxpacket: 32 [ 579.102160][ T5837] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 579.119391][ T5837] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.1260: corrupted in-inode xattr [ 579.132169][ T5837] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.1260: couldn't read orphan inode 15 (err -117) [ 579.150355][ T5837] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000003,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.auto_da_alloc,usrjquota=,grpid,delalloc,,,errors=continue [ 579.236499][ T1615] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 579.248065][ T1615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.390799][ T5853] EXT4-fs warning (device loop5): dx_probe:860: inode #2: comm syz.5.1260: dx entry: limit 1024 != root limit 124 [ 579.403252][ T5853] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.1260: Corrupt directory, running e2fsck is recommended [ 579.430185][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1260'. [ 579.774479][ T1615] usb 3-1: config 0 descriptor?? [ 579.922128][ T1615] usb 3-1: can't set config #0, error -71 [ 579.949628][ T1615] usb 3-1: USB disconnect, device number 4 [ 579.962954][ T5857] FAT-fs (loop2): Unrecognized mount option "00000000000000000007ÿÿDkÊøË·9Ð8‰R‹MzÝá=ö)nÞÔä{.Y¨'@·ÿ›|ŸòmX"jr(HÍú”·ŠUαs@ŒTxb–¡IŸwÁŸª ‰ñ|?‚rÖý" or missing value [ 580.838183][ T5873] 9pnet: Insufficient options for proto=fd [ 581.181349][ T5881] exfat: Deprecated parameter 'namecase' [ 581.193393][ T5881] exfat: Unknown parameter 'keep_last_dots' [ 581.288857][ T5879] EXT4-fs (loop1): Ignoring removed nobh option [ 581.320298][ T5879] EXT4-fs (loop1): Ignoring removed bh option [ 581.327782][ T5879] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 581.694931][ T5891] overlayfs: failed to clone upperpath [ 582.241875][ T5900] EXT4-fs (loop5): Ignoring removed oldalloc option [ 582.257857][ T5900] EXT4-fs warning (device loop5): dx_probe:860: inode #2: comm syz.5.1273: dx entry: limit 1024 != root limit 124 [ 582.270280][ T5900] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.1273: Corrupt directory, running e2fsck is recommended [ 582.284113][ T5900] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 582.446420][ T5900] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.1273: corrupted in-inode xattr [ 582.478104][ T5900] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.1273: couldn't read orphan inode 15 (err -117) [ 582.491511][ T5900] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000003,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.auto_da_alloc,usrjquota=,grpid,delalloc,,,errors=continue [ 582.522667][ T5907] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 582.530027][ T5907] EXT4-fs (loop1): Ignoring removed bh option [ 582.537187][ T5907] EXT4-fs (loop1): Test dummy encryption mode enabled [ 582.544089][ T5907] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 583.244408][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 583.625570][ T5907] EXT4-fs (loop1): 1 truncate cleaned up [ 583.631455][ T5907] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue [ 584.405582][ T5925] EXT4-fs warning (device loop5): dx_probe:860: inode #2: comm syz.5.1273: dx entry: limit 1024 != root limit 124 [ 584.418191][ T5925] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.1273: Corrupt directory, running e2fsck is recommended [ 584.441766][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1273'. [ 585.267645][ T24] kauditd_printk_skb: 35 callbacks suppressed [ 585.267709][ T24] audit: type=1400 audit(524849.356:3842): avc: denied { connect } for pid=5914 comm="syz.0.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 587.045189][ T24] audit: type=1326 audit(524851.021:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 587.146599][ T24] audit: type=1326 audit(524851.049:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 587.171097][ T24] audit: type=1326 audit(524851.049:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 588.212454][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1286'. [ 588.228938][ T5958] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5958 comm=syz.1.1286 [ 589.101868][ T24] audit: type=1326 audit(524851.049:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 589.417504][ T5972] EXT4-fs (loop2): Ignoring removed bh option [ 589.429149][ T5972] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #3: block 2: comm syz.2.1289: lblock 2 mapped to illegal pblock 2 (length 1) [ 589.443540][ T5972] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 589.451694][ T5972] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #3: block 48: comm syz.2.1289: lblock 0 mapped to illegal pblock 48 (length 1) [ 589.466543][ T5972] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 589.475439][ T5972] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1289: Failed to acquire dquot type 0 [ 589.489033][ T5972] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 589.499443][ T5972] EXT4-fs error (device loop2): ext4_evict_inode:283: inode #11: comm syz.2.1289: mark_inode_dirty error [ 589.510875][ T5972] EXT4-fs warning (device loop2): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 589.521171][ T5972] EXT4-fs (loop2): 1 orphan inode deleted [ 589.527213][ T5972] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x0000000000000001,nodelalloc,inlinecrypt,,errors=continue [ 589.535333][ T24] audit: type=1326 audit(524851.049:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 589.552560][ T9] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 589.582117][ T9] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 589.602038][ T5972] syz.2.1289[5972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 589.602186][ T5972] syz.2.1289[5972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 589.634259][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 589.659062][ T24] audit: type=1326 audit(524851.124:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 589.686518][ T5978] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 589.699384][ T5978] EXT4-fs (loop1): Ignoring removed bh option [ 589.706125][ T5978] EXT4-fs (loop1): Test dummy encryption mode enabled [ 589.714330][ T5978] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 589.735650][ T5978] EXT4-fs (loop1): 1 truncate cleaned up [ 589.741408][ T5978] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue [ 589.877677][ T278] EXT4-fs error (device loop2): __ext4_get_inode_loc:4438: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 589.914490][ T278] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 589.925088][ T278] EXT4-fs error (device loop2): ext4_quota_off:6545: inode #3: comm syz-executor: mark_inode_dirty error [ 590.629084][ T5996] EXT4-fs (loop5): orphan cleanup on readonly fs [ 590.638821][ T5996] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1295: bg 0: block 248: padding at end of block bitmap is not set [ 590.655521][ T5996] __quota_error: 47 callbacks suppressed [ 590.655548][ T5996] Quota error (device loop5): write_blk: dquota write failed [ 590.668952][ T5996] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 590.679080][ T5996] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.1295: Failed to acquire dquot type 1 [ 590.758521][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1298'. [ 590.827053][ T6003] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6003 comm=syz.3.1298 [ 590.910800][ T5996] EXT4-fs (loop5): 1 truncate cleaned up [ 590.919656][ T5996] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 591.927542][ T6013] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0x0000000000000000" or missing value [ 593.547034][ T24] audit: type=1326 audit(524857.101:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.5.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8f560be9 code=0x7ffc0000 [ 593.571027][ T24] audit: type=1326 audit(524857.129:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.5.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8f560be9 code=0x7ffc0000 [ 593.606899][ T24] audit: type=1326 audit(524857.157:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.5.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e8f560be9 code=0x7ffc0000 [ 594.621102][ T6029] bridge0: port 4(vlan0) entered blocking state [ 594.627420][ T6029] bridge0: port 4(vlan0) entered disabled state [ 594.636619][ T6029] device vlan0 entered promiscuous mode [ 594.782552][ T24] audit: type=1326 audit(524857.157:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.5.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8f560be9 code=0x7ffc0000 [ 594.833016][ T24] audit: type=1326 audit(524857.157:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.5.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8f560be9 code=0x7ffc0000 [ 594.861419][ T24] audit: type=1326 audit(524857.157:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.5.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e8f560be9 code=0x7ffc0000 [ 594.940345][ T6023] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 595.063216][ T24] audit: type=1326 audit(524857.157:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.5.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8f560be9 code=0x7ffc0000 [ 595.757717][ T24] audit: type=1326 audit(524857.157:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.5.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8f560be9 code=0x7ffc0000 [ 595.825603][ T6043] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1303'. [ 596.952407][ T6064] No source specified [ 596.956987][ T6064] netlink: 'syz.0.1311': attribute type 16 has an invalid length. [ 596.976016][ T6064] device macsec0 left promiscuous mode [ 596.984129][ T6064] device gretap1 left promiscuous mode [ 597.345255][ T348] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 597.547997][ T6071] EXT4-fs (loop2): Test dummy encryption mode enabled [ 597.555842][ T6071] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 597.563725][ T6071] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 597.625560][ T6071] EXT4-fs (loop2): 1 truncate cleaned up [ 597.698446][ T6071] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,sb=0x0000000000000fff,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 597.751576][ T348] usb 6-1: not running at top speed; connect to a high speed hub [ 597.759460][ T348] usb 6-1: too many configurations: 242, using maximum allowed: 8 [ 597.956915][ T25] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 597.986707][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 597.996100][ T25] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 598.105706][ T6071] incfs: Error accessing: ./bus. [ 598.110921][ T6071] incfs: mount failed -2 [ 598.189872][ T348] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 598.197476][ T348] usb 6-1: can't read configurations, error -61 [ 598.382270][ T348] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 598.531926][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 598.735096][ T348] usb 6-1: not running at top speed; connect to a high speed hub [ 598.745221][ T348] usb 6-1: too many configurations: 242, using maximum allowed: 8 [ 598.884813][ T348] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 598.902518][ T348] usb 6-1: can't read configurations, error -61 [ 598.914183][ T24] kauditd_printk_skb: 68 callbacks suppressed [ 598.914195][ T24] audit: type=1326 audit(524862.124:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.3.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 598.964910][ T348] usb usb6-port1: attempt power cycle [ 599.019813][ T24] audit: type=1326 audit(524862.124:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.3.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 599.043565][ T24] audit: type=1326 audit(524862.124:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.3.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 599.067010][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 599.079984][ T24] audit: type=1326 audit(524862.124:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.3.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 599.103832][ T24] audit: type=1326 audit(524862.124:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.3.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 599.127318][ T24] audit: type=1326 audit(524862.124:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.3.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 599.152829][ T24] audit: type=1326 audit(524862.124:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.3.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 599.177138][ T24] audit: type=1326 audit(524862.124:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.3.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 599.201166][ T24] audit: type=1326 audit(524862.124:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.3.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 599.345189][ T24] audit: type=1326 audit(524862.124:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.3.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 599.439318][ T6089] EXT4-fs (loop2): Ignoring removed bh option [ 599.451369][ T6089] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 599.513335][ T6089] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue [ 601.999507][ T6128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1326'. [ 602.078393][ T6128] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6128 comm=syz.1.1326 [ 602.230866][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 602.275054][ T6131] device vlan0 left promiscuous mode [ 602.280978][ T6131] bridge0: port 4(vlan0) entered disabled state [ 602.288070][ T6131] device gretap0 left promiscuous mode [ 602.294172][ T6131] bridge0: port 3(gretap0) entered disabled state [ 602.301625][ T6131] device bridge_slave_1 left promiscuous mode [ 602.307980][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.316054][ T6131] device bridge_slave_0 left promiscuous mode [ 602.324055][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.669447][ T6151] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1341'. [ 603.687662][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1341'. [ 603.703734][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1341'. [ 603.734344][ T6153] exfat: Deprecated parameter 'namecase' [ 603.811003][ T6153] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 606.456372][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.464407][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.536785][ T6171] device bridge_slave_0 entered promiscuous mode [ 606.553417][ T6171] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.556955][ T6178] exfat: Deprecated parameter 'utf8' [ 606.576921][ T6178] exfat: Deprecated parameter 'utf8' [ 606.582555][ T6178] exfat: Deprecated parameter 'namecase' [ 606.695182][ T6178] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 606.703781][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.756403][ T6171] device bridge_slave_1 entered promiscuous mode [ 606.769693][ T1614] tipc: Disabling bearer [ 606.776903][ T1614] tipc: Left network mode [ 608.177404][ T6189] __quota_error: 82 callbacks suppressed [ 608.177416][ T6189] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 608.196464][ T6189] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 608.234181][ T6189] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1343: Failed to acquire dquot type 0 [ 608.360014][ T6189] EXT4-fs error (device loop2): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 608.397606][ T6189] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 608.410348][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 608.431704][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 608.439465][ T6189] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #13: comm syz.2.1343: mark_inode_dirty error [ 608.455178][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 608.466084][ T6193] EXT4-fs (loop5): Ignoring removed oldalloc option [ 608.479077][ T6189] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 608.488165][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 608.496632][ T6193] EXT4-fs warning (device loop5): dx_probe:860: inode #2: comm syz.5.1344: dx entry: limit 1024 != root limit 124 [ 608.506444][ T6189] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #13: comm syz.2.1343: mark_inode_dirty error [ 608.517398][ T6193] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.1344: Corrupt directory, running e2fsck is recommended [ 608.527931][ T1554] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.533551][ T6193] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 608.540106][ T1554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.548656][ T6193] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.1344: corrupted in-inode xattr [ 608.568169][ T6193] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.1344: couldn't read orphan inode 15 (err -117) [ 608.577854][ T6189] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 608.580446][ T6193] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000003,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.auto_da_alloc,usrjquota=,grpid,delalloc,,,errors=continue [ 608.612841][ T6189] EXT4-fs error (device loop2) in ext4_orphan_del:3292: error 27 [ 608.643319][ T6189] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 608.658677][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 608.688565][ T6189] EXT4-fs error (device loop2): ext4_truncate:4390: inode #13: comm syz.2.1343: mark_inode_dirty error [ 608.702150][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 608.731356][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 608.805582][ T6197] EXT4-fs warning (device loop5): dx_probe:860: inode #2: comm syz.5.1344: dx entry: limit 1024 != root limit 124 [ 608.817961][ T6197] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.1344: Corrupt directory, running e2fsck is recommended [ 608.968097][ T6189] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3108: error 27 [ 608.973511][ T1554] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.978372][ T6189] EXT4-fs (loop2): 1 truncate cleaned up [ 608.983936][ T1554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.991543][ T6189] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 609.006881][ T24] audit: type=1326 audit(524872.574:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 609.034315][ T24] audit: type=1326 audit(524872.593:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 609.167458][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 609.179629][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 609.191030][ T24] audit: type=1326 audit(524872.602:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 609.215136][ T24] audit: type=1326 audit(524872.602:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 609.240530][ T24] audit: type=1326 audit(524872.602:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 609.718750][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1346'. [ 609.735193][ T24] audit: type=1326 audit(524872.602:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 609.759999][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 609.788116][ T6171] device veth0_vlan entered promiscuous mode [ 609.795395][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 609.803233][ T24] audit: type=1326 audit(524872.602:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 609.803738][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 609.868012][ T24] audit: type=1326 audit(524872.602:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.0.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 609.943694][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 609.962986][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.045324][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 610.078319][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 610.090369][ T1614] bridge0: port 3(gretap0) entered disabled state [ 610.098335][ T1614] device gretap0 left promiscuous mode [ 610.104644][ T1614] bridge0: port 3(gretap0) entered disabled state [ 610.115237][ T6171] device veth1_macvtap entered promiscuous mode [ 610.128345][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 610.141960][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 610.150643][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 610.173583][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 610.182873][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 610.254758][ T6223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1349'. [ 610.622999][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 611.451276][ T1614] device bridge_slave_1 left promiscuous mode [ 611.534331][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.584362][ T1614] device bridge_slave_0 left promiscuous mode [ 611.595921][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.618397][ T1614] device veth1_macvtap left promiscuous mode [ 611.667758][ T1614] device veth0_vlan left promiscuous mode [ 612.266858][ T6235] netlink: 'syz.3.1361': attribute type 12 has an invalid length. [ 612.853113][ T6256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1356'. [ 612.867186][ T6256] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6256 comm=syz.2.1356 [ 613.721971][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 613.730938][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1357'. [ 614.205125][ T6263] EXT4-fs (loop5): Test dummy encryption mode enabled [ 614.226578][ T6263] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue [ 614.392890][ T6275] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 614.401856][ T6275] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 614.635274][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 614.643206][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 614.684854][ T25] ip6_tunnel: K xmit: Local address not yet configured! [ 614.692363][ T25] ip6_tunnel: K xmit: Local address not yet configured! [ 614.706813][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 615.241362][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 615.262881][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 616.655063][ T6292] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 616.893978][ T6304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1369'. [ 616.985423][ T6304] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6304 comm=syz.0.1369 [ 618.298171][ T6309] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 618.331212][ T6309] EXT4-fs (loop6): Ignoring removed bh option [ 618.354114][ T6309] EXT4-fs (loop6): Test dummy encryption mode enabled [ 618.363634][ T6309] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 618.461839][ T6309] EXT4-fs (loop6): 1 truncate cleaned up [ 618.474828][ T6309] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue [ 619.079263][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 619.385101][ T6327] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 619.403492][ T6327] FAT-fs (loop1): unable to read boot sector [ 619.410973][ T6327] xt_bpf: check failed: parse error [ 620.129093][ T6338] exfat: Deprecated parameter 'utf8' [ 620.138115][ T6338] exfat: Deprecated parameter 'utf8' [ 620.144171][ T6338] exfat: Deprecated parameter 'namecase' [ 620.323175][ T6338] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 620.875410][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 622.047879][ T6349] overlayfs: missing 'lowerdir' [ 622.211624][ T6352] netlink: 'syz.6.1380': attribute type 12 has an invalid length. [ 622.778276][ T24] kauditd_printk_skb: 68 callbacks suppressed [ 622.778304][ T24] audit: type=1326 audit(524886.412:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.6.1380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0dfc55be9 code=0x0 [ 623.180161][ T6365] fuse: Bad value for 'user_id' [ 626.656516][ T24] audit: type=1400 audit(524890.079:4141): avc: denied { map } for pid=6381 comm="syz.2.1387" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 626.698053][ T6383] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 627.636154][ T6383] EXT4-fs (loop2): 1 truncate cleaned up [ 627.717354][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 627.724588][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 627.734783][ T6383] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue [ 628.212504][ T6391] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 628.220049][ T6391] EXT4-fs (loop6): Ignoring removed bh option [ 628.226400][ T6391] EXT4-fs (loop6): Test dummy encryption mode enabled [ 628.244807][ T6391] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 628.288115][ T6391] EXT4-fs (loop6): 1 truncate cleaned up [ 628.316488][ T6391] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue [ 628.561637][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 628.716352][ T25] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 629.676203][ T6405] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 629.692215][ T6405] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 629.790482][ T6405] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 630.520881][ T6418] netlink: 'syz.2.1392': attribute type 5 has an invalid length. [ 630.531074][ T6418] exFAT-fs (loop2): hint_cluster is invalid (17) [ 630.845844][ T24] audit: type=1400 audit(524893.998:4142): avc: denied { relabelfrom } for pid=6419 comm="syz.0.1396" name="NETLINK" dev="sockfs" ino=32347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 630.870638][ T6420] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 630.907858][ T24] audit: type=1400 audit(524894.054:4143): avc: denied { relabelto } for pid=6419 comm="syz.0.1396" name="NETLINK" dev="sockfs" ino=32347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0" [ 631.665712][ T24] audit: type=1400 audit(524894.297:4144): avc: denied { bind } for pid=6422 comm="syz.5.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 631.869514][ T6429] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 632.723364][ T24] audit: type=1326 audit(524895.345:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 633.396251][ T24] audit: type=1326 audit(524895.354:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 633.420866][ T24] audit: type=1326 audit(524895.382:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 633.458954][ T24] audit: type=1326 audit(524895.382:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdb6c47bc23 code=0x7ffc0000 [ 633.572309][ T24] audit: type=1326 audit(524895.410:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdb6c47a69f code=0x7ffc0000 [ 633.606851][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1403'. [ 633.616994][ T6451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6451 comm=syz.6.1403 [ 633.631341][ T24] audit: type=1326 audit(524895.429:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdb6c47bc77 code=0x7ffc0000 [ 633.679461][ T24] audit: type=1326 audit(524895.438:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb6c47a550 code=0x7ffc0000 [ 635.382153][ T6473] No source specified [ 635.390796][ T6473] netlink: 'syz.0.1406': attribute type 16 has an invalid length. [ 635.469095][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 635.708365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 635.742980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 635.906282][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 636.542137][ T6483] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 636.562623][ T6483] EXT4-fs (loop5): Ignoring removed bh option [ 636.568954][ T6483] EXT4-fs (loop5): Test dummy encryption mode enabled [ 636.590883][ T6483] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 636.591502][ T377] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 636.693261][ T6491] overlayfs: failed to clone upperpath [ 636.731667][ T6483] EXT4-fs (loop5): 1 truncate cleaned up [ 636.743908][ T6483] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue [ 636.986017][ T377] usb 3-1: Using ep0 maxpacket: 8 [ 637.135863][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.158102][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.178919][ T377] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 637.205123][ T377] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 637.307944][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.362761][ T377] usb 3-1: config 0 descriptor?? [ 638.134022][ T377] sony 0003:1345:3008.0002: hiddev96,hidraw0: USB HID v80.04 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 638.146256][ T377] sony 0003:1345:3008.0002: failed to claim input [ 638.372125][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 638.372138][ T24] audit: type=1326 audit(524901.032:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 638.462100][ T24] audit: type=1326 audit(524901.032:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 638.486047][ T24] audit: type=1326 audit(524901.032:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 639.410455][ T24] audit: type=1326 audit(524901.032:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 639.920719][ T25] usb 3-1: USB disconnect, device number 5 [ 640.578100][ T24] audit: type=1326 audit(524901.032:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 640.631825][ T24] audit: type=1326 audit(524901.032:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 640.892419][ T6524] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1417'. [ 641.082593][ T24] audit: type=1326 audit(524901.032:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 641.144728][ T24] audit: type=1326 audit(524901.032:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 641.213162][ T24] audit: type=1326 audit(524901.032:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 641.277619][ T24] audit: type=1326 audit(524901.032:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.2.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2ff5fbe9 code=0x7ffc0000 [ 641.411246][ T6536] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 641.660235][ T6540] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,block_validity,errors=remount-ro, [ 642.153157][ T295] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 642.182693][ T295] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 643.979184][ T6562] fido_id[6562]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 645.080612][ T295] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 645.238683][ T295] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 645.331300][ T295] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 645.436798][ T295] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 645.458472][ T6591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1434'. [ 645.472501][ T6591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6591 comm=syz.3.1434 [ 645.506564][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 645.541374][ T6586] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 645.815705][ T408] udevd[408]: incorrect ext4 checksum on /dev/loop2 [ 645.882227][ T6594] fido_id[6594]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 648.476480][ T6603] EXT4-fs warning (device loop5): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 648.503533][ T6603] EXT4-fs (loop5): mount failed [ 648.979787][ T6620] overlayfs: failed to clone upperpath [ 650.277003][ T6633] EXT4-fs (loop5): Ignoring removed oldalloc option [ 650.309279][ T6633] EXT4-fs warning (device loop5): dx_probe:860: inode #2: comm syz.5.1445: dx entry: limit 1024 != root limit 124 [ 650.326379][ T6633] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.1445: Corrupt directory, running e2fsck is recommended [ 650.340360][ T6633] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 650.348809][ T6633] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.1445: corrupted in-inode xattr [ 650.370275][ T6633] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.1445: couldn't read orphan inode 15 (err -117) [ 650.937296][ T6633] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000003,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.auto_da_alloc,usrjquota=,grpid,delalloc,,,errors=continue [ 651.446258][ T6648] input: syz1 as /devices/virtual/input/input8 [ 651.454448][ T6654] EXT4-fs warning (device loop5): dx_probe:860: inode #2: comm syz.5.1445: dx entry: limit 1024 != root limit 124 [ 651.466582][ T6654] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.1445: Corrupt directory, running e2fsck is recommended [ 651.833891][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 651.833902][ T24] audit: type=1400 audit(524913.623:4178): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=1089 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 652.177484][ T24] audit: type=1400 audit(524913.623:4179): avc: denied { open } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1089 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 652.200902][ T24] audit: type=1400 audit(524913.623:4180): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1089 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 652.464244][ T6666] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1449'. [ 652.478128][ T6666] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6666 comm=syz.5.1449 [ 653.168410][ T6669] bridge: RTM_NEWNEIGH with invalid ether address [ 653.179517][ T6669] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1452'. [ 654.119603][ T6675] netlink: 'syz.5.1454': attribute type 27 has an invalid length. [ 654.159521][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.166747][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.552278][ T6681] device syz_tun left promiscuous mode [ 654.552821][ T6671] EXT4-fs error (device loop6): ext4_ext_check_inode:500: inode #3: comm syz.6.1453: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 654.572997][ T6681] device bridge0 left promiscuous mode [ 654.576542][ T6671] EXT4-fs error (device loop6): ext4_quota_enable:6450: comm syz.6.1453: Bad quota inode: 3, type: 0 [ 654.689992][ T6671] EXT4-fs warning (device loop6): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 654.719292][ T6681] bridge0: port 3(vlan0) entered blocking state [ 654.726186][ T6681] bridge0: port 3(vlan0) entered forwarding state [ 654.731236][ T6671] EXT4-fs (loop6): mount failed [ 654.969815][ T6681] device veth1_macvtap left promiscuous mode [ 655.032719][ T6681] device veth1_macvtap entered promiscuous mode [ 655.039591][ T6681] device bridge0 entered promiscuous mode [ 655.046136][ T6681] device syz_tun entered promiscuous mode [ 655.056993][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): macsec2: link becomes ready [ 655.067469][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.084730][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 655.104289][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 655.123703][ T1554] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.130850][ T1554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.139016][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 655.148834][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 655.161829][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 655.170974][ T1554] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.178277][ T1554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.186339][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 655.195493][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 655.205075][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 655.213734][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 655.222412][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 655.231124][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 655.239859][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 655.248424][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 655.257198][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 655.265540][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 655.274431][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 655.283168][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 655.298635][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 655.318209][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 655.326916][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 655.336422][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 655.344877][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 655.353429][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 655.362025][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 655.380762][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 655.414436][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 655.436804][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 655.447665][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 655.455989][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 655.819740][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 655.930334][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 655.946711][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 655.954530][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 655.962518][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 655.970140][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 655.978097][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 656.015866][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 656.023635][ T1554] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 656.283887][ T6704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 656.563678][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.571074][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.607701][ T377] ip6_tunnel: K xmit: Local address not yet configured! [ 656.615499][ T377] ip6_tunnel: K xmit: Local address not yet configured! [ 656.635381][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 656.827804][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 656.977467][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 657.600438][ T24] audit: type=1326 audit(524919.029:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.6.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 657.652494][ T24] audit: type=1326 audit(524919.057:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.6.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 657.677011][ T24] audit: type=1326 audit(524919.057:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.6.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 657.700913][ T24] audit: type=1326 audit(524919.057:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.6.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 657.835091][ T6726] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 657.852426][ T6726] EXT4-fs (loop6): invalid journal inode [ 657.858687][ T24] audit: type=1326 audit(524919.057:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.6.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 658.224583][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1467'. [ 658.241518][ T24] audit: type=1326 audit(524919.057:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.6.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 658.292312][ T24] audit: type=1326 audit(524919.057:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.6.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 658.342063][ T24] audit: type=1326 audit(524919.057:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.6.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 659.206494][ T6748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1104 sclass=netlink_route_socket pid=6748 comm=syz.3.1470 [ 659.279921][ T24] audit: type=1326 audit(524919.057:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.6.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 659.430047][ T24] audit: type=1326 audit(524919.057:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.6.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 659.846975][ T6757] futex_wake_op: syz.5.1475 tries to shift op by 32; fix this program [ 659.948822][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1471'. [ 659.967803][ T6764] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 660.729970][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 661.126039][ T6770] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 661.157480][ T6770] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 661.173834][ T6770] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 661.265388][ T6776] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 661.281398][ T6774] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 662.144461][ T6790] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1480'. [ 662.682044][ T6793] xt_bpf: check failed: parse error [ 664.160738][ T6805] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 664.204387][ T6805] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 664.534211][ T6805] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 664.681754][ T6812] EXT4-fs (loop5): Test dummy encryption mode enabled [ 664.745651][ T6812] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1483: inode #1: comm syz.5.1483: iget: illegal inode # [ 664.759884][ T6812] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1483: error while reading EA inode 1 err=-117 [ 664.774362][ T6812] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1483: inode #1: comm syz.5.1483: iget: illegal inode # [ 664.788601][ T6812] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1483: error while reading EA inode 1 err=-117 [ 664.803076][ T6812] EXT4-fs (loop5): 1 orphan inode deleted [ 664.808859][ T6812] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue [ 666.064520][ T295] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 666.482156][ T6829] syz.5.1490 (6829): attempted to duplicate a private mapping with mremap. This is not supported. [ 666.588430][ T295] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 666.600638][ T295] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.612249][ T295] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 666.625529][ T295] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 666.640480][ T6832] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 666.650861][ T6832] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 666.752313][ T6835] overlayfs: failed to clone upperpath [ 666.932493][ T295] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 666.943112][ T6832] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.1492: corrupted in-inode xattr [ 666.966429][ T295] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 666.984102][ T6832] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.1492: couldn't read orphan inode 15 (err -117) [ 666.997971][ T24] kauditd_printk_skb: 72 callbacks suppressed [ 666.997984][ T24] audit: type=1326 audit(524927.875:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 667.028362][ T6832] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,,errors=continue [ 667.037376][ T295] usb 7-1: Product: syz [ 667.044350][ T295] usb 7-1: Manufacturer: syz [ 667.072813][ T24] audit: type=1326 audit(524927.875:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 667.147700][ T24] audit: type=1326 audit(524927.875:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 667.157176][ T295] cdc_wdm 7-1:1.0: skipping garbage [ 667.176548][ T295] cdc_wdm 7-1:1.0: skipping garbage [ 667.181864][ T295] cdc_wdm 7-1:1.0: skipping garbage [ 667.187729][ T295] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 667.208454][ T24] audit: type=1326 audit(524927.875:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 667.236008][ T24] audit: type=1326 audit(524927.875:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 667.565170][ T24] audit: type=1326 audit(524927.903:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 667.614757][ T295] usb 7-1: USB disconnect, device number 2 [ 667.666484][ T24] audit: type=1326 audit(524927.903:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 667.713886][ T24] audit: type=1326 audit(524927.903:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 667.813574][ T24] audit: type=1400 audit(524928.408:4271): avc: denied { link } for pid=6831 comm="syz.5.1492" name="file1" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 668.186306][ T24] audit: type=1400 audit(524928.446:4272): avc: denied { setattr } for pid=6831 comm="syz.5.1492" name="#44" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 668.402692][ T6860] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1498: Failed to acquire dquot type 0 [ 668.420510][ T6860] EXT4-fs error (device loop2): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 668.437943][ T6860] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 668.819380][ T6860] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #13: comm syz.2.1498: mark_inode_dirty error [ 668.832797][ T6860] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 668.846697][ T6860] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #13: comm syz.2.1498: mark_inode_dirty error [ 668.886634][ T6860] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 668.895539][ T6860] EXT4-fs error (device loop2) in ext4_orphan_del:3292: error 27 [ 668.904064][ T6860] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 668.968900][ T6860] EXT4-fs error (device loop2): ext4_truncate:4390: inode #13: comm syz.2.1498: mark_inode_dirty error [ 669.015124][ T6860] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3108: error 27 [ 669.023977][ T6860] EXT4-fs (loop2): 1 truncate cleaned up [ 669.030284][ T6860] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 669.420627][ T6874] fuse: Unknown parameter 'r!UñäAÆ÷0000-00000000000010000tˆ­ï°º¼d' [ 669.453423][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 673.184502][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 673.184515][ T24] audit: type=1400 audit(524933.637:4275): avc: denied { write } for pid=6877 comm="syz.3.1503" path="socket:[33163]" dev="sockfs" ino=33163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 674.474323][ T6913] netlink: 'syz.0.1511': attribute type 5 has an invalid length. [ 675.254113][ T6925] No source specified [ 675.258802][ T6925] netlink: 'syz.0.1513': attribute type 16 has an invalid length. [ 675.302220][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 675.642768][ T6921] EXT4-fs error (device loop6): ext4_orphan_get:1395: inode #15: comm syz.6.1514: casefold flag without casefold feature [ 675.900597][ T6921] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.1514: couldn't read orphan inode 15 (err -117) [ 675.921510][ T6921] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue [ 676.124550][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 678.454907][ T6945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1519'. [ 678.464082][ T6945] netem: change failed [ 679.552569][ T6958] syz.0.1521[6958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 679.552614][ T6958] syz.0.1521[6958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 680.032993][ T6966] EXT4-fs (loop6): Test dummy encryption mode enabled [ 680.058660][ T6966] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 680.088182][ T6966] EXT4-fs (loop6): 1 truncate cleaned up [ 680.094160][ T6966] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 680.292736][ T6966] EXT4-fs error (device loop6): ext4_generic_delete_entry:2683: inode #2: block 13: comm syz.6.1524: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 680.321539][ T6966] EXT4-fs error (device loop6) in ext4_delete_entry:2741: Corrupt filesystem [ 680.445352][ T6972] syz.6.1524[6972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 680.445420][ T6972] syz.6.1524[6972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 680.458803][ T6972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 681.084907][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 682.094935][ T6982] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 682.125111][ T6982] EXT4-fs (loop5): orphan cleanup on readonly fs [ 682.136184][ T6982] EXT4-fs error (device loop5): __ext4_iget:5008: inode #11: block 8: comm syz.5.1526: invalid block [ 682.207452][ T6982] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.1526: couldn't read orphan inode 11 (err -117) [ 682.274186][ T6982] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 682.384858][ T6990] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 682.396124][ T6990] exFAT-fs (loop6): unable to read boot sector [ 682.402437][ T6990] exFAT-fs (loop6): failed to read boot sector [ 682.408657][ T6990] exFAT-fs (loop6): failed to recognize exfat type [ 684.748334][ T24] audit: type=1326 audit(524943.674:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6995 comm="syz.6.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 685.031966][ T24] audit: type=1326 audit(524943.674:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6995 comm="syz.6.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 685.093090][ T7002] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 685.885041][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 686.069156][ T24] audit: type=1326 audit(524943.674:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6995 comm="syz.6.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 686.107589][ T24] audit: type=1326 audit(524943.674:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6995 comm="syz.6.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 686.131087][ T24] audit: type=1326 audit(524943.674:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6995 comm="syz.6.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 687.185389][ T24] audit: type=1326 audit(524943.674:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6995 comm="syz.6.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 687.398768][ T7013] device veth0_vlan left promiscuous mode [ 687.405506][ T7013] device veth0_vlan entered promiscuous mode [ 687.412578][ T7013] device veth1_macvtap left promiscuous mode [ 687.419530][ T7013] device veth1_macvtap entered promiscuous mode [ 687.426382][ T7013] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 687.433580][ T7013] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 687.446157][ T24] audit: type=1326 audit(524943.674:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6995 comm="syz.6.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 687.488503][ T24] audit: type=1326 audit(524943.674:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6995 comm="syz.6.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 687.504359][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 687.531700][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 687.580944][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 688.204147][ T7024] overlayfs: failed to clone upperpath [ 688.215037][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.222232][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.723564][ T24] audit: type=1326 audit(524943.674:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6995 comm="syz.6.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 688.748139][ T24] audit: type=1326 audit(524943.674:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6995 comm="syz.6.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dfc55be9 code=0x7ffc0000 [ 688.803583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 688.812805][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 688.822021][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.829233][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.837596][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 688.888472][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 688.897192][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 688.906614][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 688.915111][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 688.928819][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 688.941000][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 689.063213][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 689.493687][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 689.606393][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 689.615164][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 689.631456][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 689.642125][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 689.650996][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 689.981378][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 689.989673][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 689.998162][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 690.006557][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 690.049495][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 690.063666][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 690.498942][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 690.498955][ T24] audit: type=1326 audit(524949.855:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.3.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 690.533740][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 690.546861][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 690.554717][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 690.562509][ T24] audit: type=1326 audit(524949.892:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.3.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 690.562784][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 690.610339][ T24] audit: type=1326 audit(524949.892:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.3.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdb6c47bc23 code=0x7ffc0000 [ 690.643753][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 690.677903][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 690.690963][ T24] audit: type=1326 audit(524949.892:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.3.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdb6c47a69f code=0x7ffc0000 [ 690.714652][ T24] audit: type=1326 audit(524949.892:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.3.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdb6c47bc77 code=0x7ffc0000 [ 691.380080][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 691.388915][ T24] audit: type=1326 audit(524949.892:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.3.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb6c47a550 code=0x7ffc0000 [ 691.425217][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 691.445285][ T24] audit: type=1326 audit(524949.892:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.3.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdb6c47a84a code=0x7ffc0000 [ 691.498289][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 691.508629][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 691.538014][ T24] audit: type=1326 audit(524949.892:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.3.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 691.588352][ T24] audit: type=1326 audit(524949.892:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.3.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 691.722146][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 691.824483][ T297] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 691.850267][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 692.374345][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 692.467870][ T297] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 692.829400][ T24] audit: type=1326 audit(524949.901:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.3.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 692.943434][ T1615] ip6_tunnel: K xmit: Local address not yet configured! [ 692.951916][ T1615] ip6_tunnel: K xmit: Local address not yet configured! [ 692.972792][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 693.293499][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 693.615006][ T7076] EXT4-fs (loop5): Test dummy encryption mode enabled [ 693.626289][ T7076] EXT4-fs (loop5): Test dummy encryption mode enabled [ 693.652446][ T7076] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,acl,stripe=0x0000000000000009,norecovery,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue [ 693.909712][ T7086] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 695.197963][ T7099] EXT4-fs (loop2): Ignoring removed bh option [ 695.211247][ T7099] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 695.429535][ T7099] EXT4-fs (loop2): 1 truncate cleaned up [ 695.447688][ T7099] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,lazytime,bh,noload,data_err=ignore,noblock_validity,,errors=continue [ 695.523204][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.530493][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.057361][ T7118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63248 sclass=netlink_route_socket pid=7118 comm=syz.6.1559 [ 697.163599][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 697.163606][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 697.300884][ T7120] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 697.312173][ T7120] EXT4-fs (loop5): 1 truncate cleaned up [ 697.319459][ T7120] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue [ 697.393310][ T24] kauditd_printk_skb: 88 callbacks suppressed [ 697.393584][ T24] audit: type=1326 audit(524956.243:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 697.591109][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 698.162884][ T24] audit: type=1326 audit(524956.243:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c47bbe9 code=0x7ffc0000 [ 698.243802][ T24] audit: type=1400 audit(524956.468:4404): avc: denied { create } for pid=7119 comm="syz.5.1561" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 698.796789][ T7136] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 699.491967][ T7143] xt_socket: unknown flags 0x8 [ 699.568935][ T5203] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 700.360246][ T5203] usb 3-1: Using ep0 maxpacket: 32 [ 700.488538][ T5203] usb 3-1: config 1 has an invalid interface number: 137 but max is 0 [ 700.500399][ T5203] usb 3-1: config 1 has no interface number 0 [ 700.514366][ T5203] usb 3-1: config 1 interface 137 has no altsetting 0 [ 700.557323][ T7160] bridge0: port 3(gretap0) entered disabled state [ 700.564415][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.571615][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.587949][ T7160] device gretap0 left promiscuous mode [ 700.602901][ T7160] bridge0: port 3(gretap0) entered disabled state [ 700.610449][ T7160] device bridge_slave_1 left promiscuous mode [ 700.667597][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.360774][ T7160] device bridge_slave_0 left promiscuous mode [ 702.272646][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.382060][ T5203] usb 3-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 702.391187][ T5203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.399401][ T5203] usb 3-1: Product: syz [ 702.462652][ T5203] usb 3-1: Manufacturer: syz [ 702.519562][ T5203] usb 3-1: SerialNumber: syz [ 703.189872][ T7175] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 703.201178][ T7175] exFAT-fs (loop5): unable to read boot sector [ 703.207774][ T7175] exFAT-fs (loop5): failed to read boot sector [ 703.214573][ T7175] exFAT-fs (loop5): failed to recognize exfat type [ 704.668840][ T5203] pl2303 3-1:1.137: required endpoints missing [ 704.738422][ T5203] usb 3-1: USB disconnect, device number 6 [ 706.400472][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 707.768980][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 709.362680][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 709.828793][ T7242] device macsec0 entered promiscuous mode [ 709.845195][ T7247] overlayfs: failed to clone upperpath [ 709.942591][ T24] audit: type=1326 audit(524968.048:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 709.990993][ T24] audit: type=1326 audit(524968.048:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 710.038797][ T24] audit: type=1326 audit(524968.067:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 710.145412][ T24] audit: type=1326 audit(524968.067:4408): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 710.173995][ T24] audit: type=1326 audit(524968.067:4409): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 710.200983][ T24] audit: type=1326 audit(524968.076:4410): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 710.833678][ T7263] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7263 comm=syz.0.1595 [ 710.862575][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1595'. [ 710.982728][ T7264] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 711.253713][ T24] audit: type=1326 audit(524968.076:4411): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 711.328555][ T24] audit: type=1326 audit(524968.076:4412): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 711.467517][ T24] audit: type=1326 audit(524968.076:4413): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 711.520992][ T24] audit: type=1326 audit(524968.076:4414): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa2eebe9 code=0x7ffc0000 [ 712.589275][ T1614] device bridge_slave_1 left promiscuous mode [ 712.595968][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.603729][ T1614] device bridge_slave_0 left promiscuous mode [ 712.609860][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.617920][ T1614] device veth1_macvtap left promiscuous mode [ 712.623976][ T1614] device veth0_vlan left promiscuous mode [ 712.847371][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1607'. [ 713.338752][ T7303] netlink: 'syz.0.1608': attribute type 5 has an invalid length. [ 715.986181][ T24] kauditd_printk_skb: 155 callbacks suppressed [ 715.986193][ T24] audit: type=1400 audit(524973.698:4567): avc: denied { execmem } for pid=7320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 716.013033][ T24] audit: type=1400 audit(524973.698:4568): avc: denied { prog_load } for pid=7321 comm="syz.2.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 716.033128][ T24] audit: type=1400 audit(524973.707:4569): avc: denied { read write } for pid=278 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 716.058193][ T24] audit: type=1400 audit(524973.707:4570): avc: denied { create } for pid=7326 comm="syz.0.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 716.084177][ T24] audit: type=1400 audit(524973.707:4571): avc: denied { prog_load } for pid=7323 comm="syz.5.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 716.104407][ T24] audit: type=1400 audit(524973.707:4572): avc: denied { prog_load } for pid=7323 comm="syz.5.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 716.128737][ T24] audit: type=1400 audit(524973.726:4573): avc: denied { create } for pid=7323 comm="syz.5.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 716.160913][ T24] audit: type=1400 audit(524973.726:4574): avc: denied { map_create } for pid=7323 comm="syz.5.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 716.191344][ T24] audit: type=1400 audit(524973.726:4575): avc: denied { prog_load } for pid=7323 comm="syz.5.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 716.214176][ T24] audit: type=1400 audit(524973.726:4576): avc: denied { map_create } for pid=7323 comm="syz.5.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 717.114239][ T7339] ip6t_rpfilter: unknown options [ 717.347350][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 722.532966][ T24] kauditd_printk_skb: 122 callbacks suppressed [ 722.532979][ T24] audit: type=1400 audit(524979.825:4699): avc: denied { execmem } for pid=7379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 722.578714][ T24] audit: type=1400 audit(524979.825:4700): avc: denied { create } for pid=7380 comm="syz.2.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 722.599651][ T24] audit: type=1400 audit(524979.834:4701): avc: denied { create } for pid=7385 comm="syz.0.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 722.621714][ T24] audit: type=1400 audit(524979.834:4702): avc: denied { read write } for pid=278 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 722.668705][ T24] audit: type=1400 audit(524979.844:4703): avc: denied { create } for pid=7383 comm="syz.5.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 722.688704][ T24] audit: type=1400 audit(524979.844:4704): avc: denied { create } for pid=7381 comm="syz.3.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 722.708684][ T24] audit: type=1400 audit(524979.844:4705): avc: denied { create } for pid=7381 comm="syz.3.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 722.728673][ T24] audit: type=1400 audit(524979.844:4706): avc: denied { create } for pid=7381 comm="syz.3.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 722.748458][ T24] audit: type=1400 audit(524979.844:4707): avc: denied { create } for pid=7381 comm="syz.3.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 722.768645][ T24] audit: type=1400 audit(524979.844:4708): avc: denied { create } for pid=7383 comm="syz.5.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 724.189364][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 728.294573][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 729.701673][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 729.701685][ T24] audit: type=1400 audit(524986.522:4757): avc: denied { execmem } for pid=7427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 729.730466][ T24] audit: type=1400 audit(524986.522:4758): avc: denied { prog_load } for pid=7428 comm="syz.0.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 729.769859][ T24] audit: type=1400 audit(524986.522:4759): avc: denied { prog_load } for pid=7428 comm="syz.0.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 729.801948][ T24] audit: type=1400 audit(524986.522:4760): avc: denied { prog_load } for pid=7428 comm="syz.0.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 729.823327][ T24] audit: type=1400 audit(524986.522:4761): avc: denied { prog_load } for pid=7428 comm="syz.0.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 729.842412][ T24] audit: type=1400 audit(524986.532:4762): avc: denied { map_create } for pid=7432 comm="syz.5.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 729.861356][ T24] audit: type=1400 audit(524986.532:4763): avc: denied { prog_load } for pid=7432 comm="syz.5.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 729.880332][ T24] audit: type=1400 audit(524986.541:4764): avc: denied { read write } for pid=1468 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 729.904545][ T24] audit: type=1400 audit(524986.541:4765): avc: denied { prog_load } for pid=7436 comm="syz.5.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 729.923511][ T24] audit: type=1400 audit(524986.550:4766): avc: denied { read write } for pid=7430 comm="syz.2.1657" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 731.932786][ T25] ip6_tunnel: K xmit: Local address not yet configured! [ 731.951627][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 731.960725][ T25] ip6_tunnel: K xmit: Local address not yet configured! [ 731.967791][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 732.185936][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 732.250118][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 732.257287][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 734.213185][ T1614] tipc: Disabling bearer [ 734.228021][ T1614] tipc: Left network mode [ 734.933157][ T1614] device veth1_macvtap left promiscuous mode [ 734.939395][ T1614] device veth0_vlan left promiscuous mode [ 735.185429][ T1614] ================================================================== [ 735.193868][ T1614] BUG: KASAN: use-after-free in fib_flush+0x77/0x120 [ 735.200554][ T1614] Read of size 8 at addr ffff8881261ac000 by task kworker/u4:7/1614 [ 735.208999][ T1614] [ 735.211424][ T1614] CPU: 0 PID: 1614 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 735.219044][ T1614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 735.229443][ T1614] Workqueue: netns cleanup_net [ 735.234559][ T1614] Call Trace: [ 735.237842][ T1614] __dump_stack+0x21/0x24 [ 735.242156][ T1614] dump_stack_lvl+0x169/0x1d8 [ 735.246855][ T1614] ? show_regs_print_info+0x18/0x18 [ 735.252100][ T1614] ? thaw_kernel_threads+0x220/0x220 [ 735.257466][ T1614] print_address_description+0x7f/0x2c0 [ 735.263002][ T1614] ? fib_flush+0x77/0x120 [ 735.267474][ T1614] kasan_report+0xe2/0x130 [ 735.272113][ T1614] ? fib_flush+0x77/0x120 [ 735.276535][ T1614] __asan_report_load8_noabort+0x14/0x20 [ 735.282154][ T1614] fib_flush+0x77/0x120 [ 735.286381][ T1614] __remove_nexthop_fib+0xab/0x260 [ 735.291563][ T1614] ? blocking_notifier_call_chain+0xff/0x140 [ 735.297557][ T1614] remove_nexthop+0x75/0x4d0 [ 735.302220][ T1614] remove_nexthop_from_groups+0x193/0xe40 [ 735.307953][ T1614] ? __remove_nexthop_fib+0x24a/0x260 [ 735.313418][ T1614] ? blocking_notifier_call_chain+0xff/0x140 [ 735.319409][ T1614] remove_nexthop+0x38a/0x4d0 [ 735.324083][ T1614] nexthop_net_exit+0x3a/0xa0 [ 735.328750][ T1614] cleanup_net+0x586/0xb70 [ 735.333352][ T1614] ? __switch_to_asm+0x34/0x60 [ 735.338108][ T1614] ? __schedule+0xb4f/0x1310 [ 735.342695][ T1614] ? ops_init+0x4a0/0x4a0 [ 735.347139][ T1614] ? read_word_at_a_time+0x12/0x20 [ 735.352346][ T1614] ? strscpy+0x9b/0x290 [ 735.356604][ T1614] process_one_work+0x6e1/0xba0 [ 735.361461][ T1614] worker_thread+0xa6a/0x13b0 [ 735.366139][ T1614] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 735.371678][ T1614] kthread+0x346/0x3d0 [ 735.375738][ T1614] ? worker_clr_flags+0x190/0x190 [ 735.380926][ T1614] ? kthread_blkcg+0xd0/0xd0 [ 735.385519][ T1614] ret_from_fork+0x1f/0x30 [ 735.389926][ T1614] [ 735.392245][ T1614] Allocated by task 278: [ 735.396537][ T1614] __kasan_kmalloc+0xda/0x110 [ 735.401203][ T1614] kmem_cache_alloc_trace+0x184/0x2e0 [ 735.406772][ T1614] fib_net_init+0xe0/0x2c0 [ 735.411265][ T1614] ops_init+0x1ba/0x4a0 [ 735.415414][ T1614] setup_net+0x36d/0xb50 [ 735.419654][ T1614] copy_net_ns+0x314/0x520 [ 735.424168][ T1614] create_new_namespaces+0x3a2/0x650 [ 735.429496][ T1614] unshare_nsproxy_namespaces+0x120/0x170 [ 735.435498][ T1614] ksys_unshare+0x4ac/0x7d0 [ 735.440169][ T1614] __x64_sys_unshare+0x38/0x40 [ 735.444923][ T1614] do_syscall_64+0x31/0x40 [ 735.449339][ T1614] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 735.455365][ T1614] [ 735.457785][ T1614] Freed by task 1614: [ 735.461757][ T1614] kasan_set_track+0x4a/0x70 [ 735.466336][ T1614] kasan_set_free_info+0x23/0x40 [ 735.471258][ T1614] ____kasan_slab_free+0x125/0x160 [ 735.476450][ T1614] __kasan_slab_free+0x11/0x20 [ 735.481290][ T1614] slab_free_freelist_hook+0xc5/0x190 [ 735.486651][ T1614] kfree+0xc0/0x270 [ 735.490459][ T1614] ip_fib_net_exit+0x32f/0x350 [ 735.495208][ T1614] fib_net_exit+0x6c/0x80 [ 735.499526][ T1614] cleanup_net+0x586/0xb70 [ 735.504133][ T1614] process_one_work+0x6e1/0xba0 [ 735.509257][ T1614] worker_thread+0xa6a/0x13b0 [ 735.513923][ T1614] kthread+0x346/0x3d0 [ 735.519000][ T1614] ret_from_fork+0x1f/0x30 [ 735.523468][ T1614] [ 735.525800][ T1614] The buggy address belongs to the object at ffff8881261ac000 [ 735.525800][ T1614] which belongs to the cache kmalloc-2k of size 2048 [ 735.540465][ T1614] The buggy address is located 0 bytes inside of [ 735.540465][ T1614] 2048-byte region [ffff8881261ac000, ffff8881261ac800) [ 735.553645][ T1614] The buggy address belongs to the page: [ 735.559290][ T1614] page:ffffea0004986a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1261a8 [ 735.569705][ T1614] head:ffffea0004986a00 order:3 compound_mapcount:0 compound_pincount:0 [ 735.578027][ T1614] flags: 0x4000000000010200(slab|head) [ 735.583581][ T1614] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042d80 [ 735.592345][ T1614] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 735.601220][ T1614] page dumped because: kasan: bad access detected [ 735.607631][ T1614] page_owner tracks the page as allocated [ 735.613574][ T1614] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 278, ts 48367500253, free_ts 0 [ 735.631915][ T1614] prep_new_page+0x179/0x180 [ 735.636594][ T1614] get_page_from_freelist+0x2235/0x23d0 [ 735.642133][ T1614] __alloc_pages_nodemask+0x268/0x5f0 [ 735.647591][ T1614] new_slab+0x84/0x3f0 [ 735.651735][ T1614] ___slab_alloc+0x2a6/0x450 [ 735.656324][ T1614] __slab_alloc+0x63/0xa0 [ 735.660650][ T1614] __kmalloc+0x201/0x330 [ 735.664934][ T1614] sk_prot_alloc+0xb2/0x340 [ 735.669611][ T1614] sk_alloc+0x38/0x4e0 [ 735.673830][ T1614] __netlink_kernel_create+0x186/0x940 [ 735.679301][ T1614] audit_net_init+0xf1/0x210 [ 735.684053][ T1614] ops_init+0x1ba/0x4a0 [ 735.688206][ T1614] setup_net+0x36d/0xb50 [ 735.692446][ T1614] copy_net_ns+0x314/0x520 [ 735.696937][ T1614] create_new_namespaces+0x3a2/0x650 [ 735.702246][ T1614] unshare_nsproxy_namespaces+0x120/0x170 [ 735.707967][ T1614] page_owner free stack trace missing [ 735.713372][ T1614] [ 735.715711][ T1614] Memory state around the buggy address: [ 735.721357][ T1614] ffff8881261abf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 735.729632][ T1614] ffff8881261abf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 735.738048][ T1614] >ffff8881261ac000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 735.746190][ T1614] ^ [ 735.750264][ T1614] ffff8881261ac080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 735.758336][ T1614] ffff8881261ac100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 735.766855][ T1614] ================================================================== [ 735.775004][ T1614] Disabling lock debugging due to kernel taint [ 735.782940][ T1614] general protection fault, probably for non-canonical address 0xfd90650a6a882aa8: 0000 [#1] PREEMPT SMP KASAN [ 735.785047][ T24] kauditd_printk_skb: 47 callbacks suppressed [ 735.785058][ T24] audit: type=1400 audit(524993.217:4814): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 735.794666][ T1614] KASAN: maybe wild-memory-access in range [0xec83485354415540-0xec83485354415547] [ 735.794682][ T1614] CPU: 0 PID: 1614 Comm: kworker/u4:7 Tainted: G B syzkaller #0 [ 735.794688][ T1614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 735.794703][ T1614] Workqueue: netns cleanup_net [ 735.820956][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 735.822409][ T1614] RIP: 0010:fib_table_flush+0x31a/0x1330 [ 735.869408][ T1614] Code: 38 c1 0f 8c 71 ff ff ff 48 89 df e8 00 46 bf fd e9 64 ff ff ff 4c 89 6c 24 38 48 89 44 24 20 48 8d 58 05 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 99 0d 00 00 0f b6 1b 31 ff 89 de e8 0d [ 735.869417][ T1614] RSP: 0018:ffffc9000100f840 EFLAGS: 00010a03 [ 735.869430][ T1614] RAX: 1d90690a6a882aa8 RBX: ec83485354415546 RCX: ffff88812c373b40 [ 73Jan 7 01:49:53 5.869446][ T1614] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 735.904512][ T24] audit: type=1400 audit(524993.320:4815): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 735.913602][ T1614] RBP: ffffc9000100f9c0 R08: 0000000000000004 R09: 0000000000000003 [ 735.913611][ T1614] R10: fffffbfff0d8ee48 R11: 1ffffffff0d8ee48 R12: dffffc0000000000 [ 735.913619][ T1614] R13: 0000000000000001 R14: ffffffff83d97de0 R15: ffff8881261c2000 [ 735.913628][ T1614] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 735.913636][ T1614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 735.913643][ T1614] CR2: 000056130ffe1b98 CR3: 000000010d0d0000 CR4: 00000000003506b0 [ 735.913656][ T1614] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 735.913663][ T1614] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 735.913667][ T1614] Call Trace: [ 735.913687][ T1614] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 735.913708][ T1614] ? devinet_sysctl_forward+0x8/0x6d0 [ 736.014804][ T1614] ? fib_flush+0x77/0x120 [ 736.014817][ T1614] ? preempt_schedule_thunk+0x16/0x18 [ 736.014839][ T1614] ? __node_free_rcu+0x80/0x80 [ 736.025710][ T24] audit: type=1400 audit(524993.442:4816): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 736.029371][ T1614] ? check_panic_on_warn+0x6c/0xb0 [ 736.056207][ T1614] ? fib_flush+0x77/0x120 [ 736.056219][ T1614] ? end_report+0x5e/0xc0 [ 736.056229][ T1614] ? fib_flush+0x77/0x120 [ 736.056248][ T1614] fib_flush+0xb5/0x120 [ 736.066412][ T24] audit: type=1400 audit(524993.479:4817): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 736.069255][ T1614] __remove_nexthop_fib+0xab/0x260 [ 736.069268][ T1614] ? blocking_notifier_call_chain+0xff/0x140 [ 736.069279][ T1614] remove_nexthop+0x75/0x4d0 [ 736.069291][ T1614] remove_nexthop_from_groups+0x193/0xe40 [ 736.069303][ T1614] ? __remove_nexthop_fib+0x24a/0x260 [ 736.069320][ T1614] ? blocking_notifier_call_chain+0xff/0x140 [ 736.128556][ T1614] remove_nexthop+0x38a/0x4d0 [ 736.128570][ T1614] nexthop_net_exit+0x3a/0xa0 [ 736.128581][ T1614] cleanup_net+0x586/0xb70 [ 736.128591][ T1614] ? __switch_to_asm+0x34/0x60 [ 736.128602][ T1614] ? __schedule+0xb4f/0x1310 [ 736.128611][ T1614] ? ops_init+0x4a0/0x4a0 [ 736.128622][ T1614] ? read_word_at_a_time+0x12/0x20 [ 736.128631][ T1614] ? strscpy+0x9b/0x290 [ 736.128641][ T1614] process_one_work+0x6e1/0xba0 [ 736.128659][ T1614] worker_thread+0xa6a/0x13b0 [ 736.175446][ T1614] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 736.180905][ T1614] kthread+0x346/0x3d0 [ 736.184975][ T1614] ? worker_clr_flags+0x190/0x190 [ 736.190088][ T1614] ? kthread_blkcg+0xd0/0xd0 [ 736.194668][ T1614] ret_from_fork+0x1f/0x30 [ 736.199067][ T1614] Modules linked in: [ 736.203038][ T1614] ---[ end trace b4708488138dc8a5 ]--- [ 736.208970][ T1614] RIP: 0010:fib_table_flush+0x31a/0x1330 [ 736.214694][ T1614] Code: 38 c1 0f 8c 71 ff ff ff 48 89 df e8 00 46 bf fd e9 64 ff ff ff 4c 89 6c 24 38 48 89 44 24 20 48 8d 58 05 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 99 0d 00 00 0f b6 1b 31 ff 89 de e8 0d [ 736.234466][ T1614] RSP: 0018:ffffc9000100f840 EFLAGS: 00010a03 [ 736.240793][ T1614] RAX: 1d90690a6a882aa8 RBX: ec83485354415546 RCX: ffff88812c373b40 [ 736.248786][ T1614] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 736.256822][ T1614] RBP: ffffc9000100f9c0 R08: 0000000000000004 R09: 0000000000000003 [ 736.264875][ T1614] R10: fffffbfff0d8ee48 R11: 1ffffffff0d8ee48 R12: dffffc0000000000 [ 736.272872][ T1614] R13: 0000000000000001 R14: ffffffff83d97de0 R15: ffff8881261c2000 [ 736.280869][ T1614] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 736.289884][ T1614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.296658][ T1614] CR2: 000056130ffe1b98 CR3: 000000010d0d0000 CR4: 00000000003506b0 [ 736.304660][ T1614] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 736.312650][ T1614] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 736.320707][ T1614] Kernel panic - not syncing: Fatal exception [ 736.327358][ T1614] Kernel Offset: disabled [ 736.331675][ T1614] Rebooting in 86400 seconds..