last executing test programs: 2m38.701546034s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 2m38.614839059s ago: executing program 0 (id=6): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}, 0x40000110) 2m37.170140914s ago: executing program 0 (id=41): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000810000000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x0) 2m37.145057035s ago: executing program 32 (id=41): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000810000000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x0) 1m2.269775432s ago: executing program 2 (id=4095): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000d80)) read$hidraw(r0, 0x0, 0x49) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 1m1.657042948s ago: executing program 2 (id=4112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 1m1.29043921s ago: executing program 2 (id=4123): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m1.174488557s ago: executing program 2 (id=4128): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) symlink(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='./control\x00') 1m0.799385849s ago: executing program 2 (id=4140): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)='E', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x2, 0x40088c4) 1m0.371653824s ago: executing program 2 (id=4145): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b0000000800000006000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000800218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 1m0.350876975s ago: executing program 33 (id=4145): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b0000000800000006000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000800218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 10.852587784s ago: executing program 4 (id=6193): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)="fc390ba5fdfff584e2e171cf84f8da3f0fd274eb018180cce455d53b0f631c38bf3dad3405fbce51fca9a41ae36dc4f2bf5212f361cfdda83fb76f792e0dd48e229cdf69ca939730a54fa7bfeab57f28") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000040007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x56, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.741267641s ago: executing program 4 (id=6197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 10.666124496s ago: executing program 4 (id=6198): syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9b, &(0x7f0000000000)=ANY=[@ANYBLOB="9b03abe98397850d9289638d7120310994176d76ee8005e3bf5de76d569d98cc3ce7d4419c84da5f7e420900d136a14f65099da81db6c35a3e0c7fb9fe03b0fa265df2be125facefe74e0e21bb6a1889f400fb206292c4d96927f019fba2ad2987739c5e0d59351755863603e11b1131e4eb02f883ddbe"]}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 7.645148002s ago: executing program 4 (id=6318): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 7.623002253s ago: executing program 4 (id=6321): socket$inet6(0xa, 0x2, 0x0) socket(0x1, 0xa, 0x0) memfd_create(0x0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 7.50451344s ago: executing program 4 (id=6326): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x60260, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x4}, 0x100020, 0x2, 0x0, 0x9, 0x5, 0x3, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.50424703s ago: executing program 34 (id=6326): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x60260, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x4}, 0x100020, 0x2, 0x0, 0x9, 0x5, 0x3, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.903224816s ago: executing program 6 (id=6353): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x8}]}) 6.638463991s ago: executing program 6 (id=6355): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = eventfd(0x800a6) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) r2 = dup(r1) read$eventfd(r2, &(0x7f0000000100), 0x8) 6.554528026s ago: executing program 6 (id=6356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 6.47781257s ago: executing program 6 (id=6358): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 6.436975243s ago: executing program 6 (id=6361): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mount$tmpfs(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 6.175256248s ago: executing program 6 (id=6363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0) 6.136998411s ago: executing program 35 (id=6363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0) 1.137017783s ago: executing program 8 (id=6548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = getpid() getpriority(0x0, r2) 1.120124935s ago: executing program 8 (id=6550): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f00000000c0)=0x50000000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40002000}) shutdown(r1, 0x0) 1.067909858s ago: executing program 7 (id=6552): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r0 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r0, 0x400, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x166160000}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 1.067631888s ago: executing program 8 (id=6553): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x5300, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0xf00}) 914.917907ms ago: executing program 8 (id=6554): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) accept4(r0, 0x0, 0x0, 0x0) 793.682954ms ago: executing program 3 (id=6560): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 766.660785ms ago: executing program 3 (id=6563): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xbffffff4, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}, 0x1c) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 747.933946ms ago: executing program 3 (id=6565): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20001e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4fa, &(0x7f0000000a40)="$eJzs3U1vW1kZAOD3Ol9OJjPJDLMABEwZBgqq6iTuTDSaBQwrhNBIiC5BakPiRlHsOIqd0oQu0v+ARCVWsOQHsO6KPRsEOzZlgcRHBGoqsTC61zepk8aNaT4cxc9TXd17zrX9nlP3nmO/rn0CGFjXImInIkYj4m5ETOX1Sb7Fp+0tvd2z3YeLe7sPF5NotW7/M4n0T1oXHfdJvZE/ZjEifvS9iJ8mL8dtbG2vLlSrlY12cXymWVufaWxt31ypLSxXlitr5fL83Pzsx7c+Kp9ZX9+rjeZHX376h51v/Txt1mRe09mPs9Tu+shBnNRwRPzgPIL1wVDen9F+N4TXUoiIdyLi/ez6n4qh7NkEAK6yVmsqWlOdZQDgqitkObCkUMpzAZNRKJRK7RzeuzFRqNYbzRv36ptrS+1c2XSMFO6tVCuzea5wOkaStDyXHb8ol4+Ub0XE2xHxi7HxrFxarFeX+vnCBwAG2BtH5v//jLXnfwDgiiv2uwEAwIUz/wPA4DH/A8DgMf8DwOAx/wPA4DH/A8DgMf8DwED54WefpVtrL//966X7W5ur9fs3lyqN1VJtc7G0WN9YLy3X68vZb/bUTnq8ar2+PvdhbD6Y/vZ6oznT2Nq+U6tvrjXvZL/rfacyciG9AgBe5e33nvw5iYidT8azLTrWcjBXw9VW6HcDgL4Z6ncDgL6x2hcMrlO8x5cegCvimCV6DylGxPjRylar1Tq/JgHn7PoX5P9hUHXk//0vYBgw8v8wuOT/YXC1Wkmva/5HrzcEAC43OX6gy+f/7+T73+YfDvxk6egtHp9nqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBy21//t5SvBT4ZhUKpFPFmREzHSHJvpVqZjYi3IuJPYyNjaXmuz20GAE6r8LckX//r+tQHk0fPjibPx7J9RPzsV7d/+WCh2dz4Y1r/r4P65uO8vtyP9gMAJ9mfp7N9xxv5Z7sPF/e3i2zP378bEcV2/L3d0dg7iD8cw9m+GCMRMfHvJC+3JR25i9PYeRQRnz+u/0lMZjmQ9sqnR+Onsd+80PiFQ/EL2bn2Pv27+NwZtAUGzZN0/Pn0uOuvENey/fHXfzEboU4vH//Sh1rcy8bAF/H3x7+hLuPftV5jfPj777ePxl8+9yjii8ORjbt7Q9ERPzmIn3SJ/0GP8f/ypa+83+1c69cR1yOPf6j/yaFYM83a+kxja/vmSm1hubJcWSuX5+fmZz++9VF5JstRz3SfDf7xyY23up1L+z/RJX7xhP5/vcf+/+a/d3/81VfE/+bXjotfiHdfET+dE7/RY/yFid8Vu51L4y916f9Jz/+NHuM//ev2S8uGAwD909jaXl2oVisbF3mw/0LiQoM6uAIH6b+aS9CMYw++c1GxRuP/uler9Vqxuo0YZ5F1Ay6Dg4s+Ip73uzEAAAAAAAAAAAAAAMCxevo+0NDpvrHU7z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdf0vAAD//7kvzPc=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x7}, {0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x10000}]}) 631.648443ms ago: executing program 3 (id=6569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) 574.311916ms ago: executing program 3 (id=6570): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x3, 0xffffff81, 0x10, 0xc, 0x2, 0x7, 0x40, 0x200, 0x8, 0x9, 0x6, 0x5, 0x0, 0x8, 0xa, 0x6, 0x200, 0x1, 0x3, 0xcc37, 0x5, 0xb5, 0x649f, 0x4, 0x0, 0x4, 0xfb1, 0x72a4, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0x7, 0xc3a0, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x5, 0xfffffffd, 0x5, 0x80, 0xe, 0x2, 0x7, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x3, 0x101, 0xfff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x9, 0x80020003, 0x2, 0x3, 0x5, 0x101, 0x1, 0xfffffffc, 0x6, 0xfffffffb, 0x200, 0x1, 0x7309, 0x6, 0x3, 0x100, 0x2, 0x7, 0x6d0, 0x224, 0x7ff, 0x0, 0x6, 0x7, 0xfffff001, 0x6, 0x7ed8, 0x3, 0xffff, 0x0, 0x0, 0x249, 0x5, 0x2fbf, 0x2, 0x8000, 0x7, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x3, 0x4f, 0xffffffff, 0x8, 0x1, 0x119203c5, 0xd0, 0x7, 0x80000001, 0x3226, 0x8, 0x523c79f9, 0x4, 0xc64c, 0xffffff6d, 0x5, 0x6, 0x6, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xe, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x84, 0x0, 0x1, 0x5, 0x2, 0x29dc, 0x0, 0x2d5, 0x7, 0xfffffffa, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0x2, 0x4002, 0x2, 0x4, 0xfff, 0x5, 0x1, 0x3, 0x4003, 0x80, 0x7a5b054a, 0x8, 0xffffff80, 0x4b1, 0xfff, 0x3, 0xb, 0x8, 0x3, 0x4, 0x2, 0x6, 0xf, 0x2, 0x7, 0x1, 0x77, 0x20009, 0x274d, 0x6, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0xffffffc0, 0x200, 0x7, 0x3c, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x5, 0x7ff, 0x6, 0x31e1, 0x4, 0x4, 0x705, 0x7ff, 0x1e, 0x3, 0xe49, 0x56, 0x9, 0x1, 0x6, 0x2, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x7fff, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0xed, 0x7fff, 0x1000, 0xcbe, 0x7ff, 0x6, 0x8, 0xb, 0xff, 0x5, 0x1, 0x7, 0x9, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x2, 0xeffe, 0xe74, 0xfffffffa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3a40da20, 0x9, 0x6, 0x4, 0x8000, 0x7fffffff, 0x2, 0x1, 0x7fff, 0x86, 0x10000, 0x2, 0x40, 0x2, 0x99d, 0x6, 0xffffff92, 0xe9c, 0x3ff, 0xfffffffe, 0x10001, 0xa, 0xfffff000, 0x7f, 0x4, 0x0, 0x81, 0x6f0, 0x18e, 0x8, 0x4, 0x3, 0x4, 0x2, 0xffffffff, 0x0, 0x80000000, 0x3, 0x9, 0xfffc, 0x2, 0xd, 0x3, 0x5, 0x1, 0x4, 0x8, 0x7, 0x2, 0xd92e, 0x7fffffff, 0x3, 0x90, 0xc0, 0x5b, 0x1, 0xe6, 0x40, 0x5, 0x1000, 0x3, 0x10, 0x0, 0x5, 0x6, 0x6, 0x100, 0xf3, 0x1, 0xa92, 0x0, 0x6, 0x7, 0x0, 0x8, 0x8, 0x10000, 0x3, 0x3, 0x0, 0xa, 0x5, 0x1, 0xee7e, 0x800, 0xd1, 0x8002, 0x1, 0x4, 0x5, 0x4, 0xffffff89, 0x7, 0xfffffff3, 0x2, 0xffffffff, 0x9, 0x5, 0x2, 0x101, 0x7fffffff, 0xfffff001, 0x64, 0x4, 0xffffffff, 0x5, 0x9, 0x1, 0x0, 0xb3e, 0x8, 0xf3, 0x401, 0x401, 0x9, 0x8, 0x2, 0xb, 0x0, 0x0, 0x9, 0xffffffff, 0x25c, 0x7, 0x5, 0x0, 0x9, 0xfffffff9, 0x3, 0xe2, 0x8, 0x1, 0x8, 0x9, 0x0, 0x9, 0x2, 0x1, 0x9, 0x80, 0x5, 0xd3c3, 0x5, 0x2, 0x1, 0x472a8800, 0xc, 0xfffffff0, 0xfffffff8, 0x9, 0x8, 0xfffffffc, 0x9, 0x5, 0x9, 0x5, 0x6, 0x6, 0x7, 0x87f, 0x59, 0x4fedcacd, 0x1, 0x4, 0x9df4, 0x2, 0x7, 0x5, 0xfff, 0x3828, 0x0, 0x1, 0x7, 0x401, 0x7f, 0x4, 0x7, 0x2120, 0xfffffffa, 0x80, 0x3, 0xdbff, 0x52b6, 0xfffffffa, 0x49, 0x70, 0x0, 0xe1, 0x401, 0xa, 0x101, 0x3ff, 0x101, 0x0, 0x7ffe, 0x80000000, 0x81, 0xfffffff7, 0x3, 0x1, 0x7514, 0x7, 0x3, 0x1, 0x4, 0x2, 0x9, 0x4, 0x10000, 0x3ff, 0x0, 0x100, 0x7ef2, 0x0, 0x1, 0xe, 0xd, 0x4, 0x6, 0x8, 0x4, 0x10001, 0x6, 0x400, 0x436, 0x3, 0x202, 0x0, 0x0, 0x0, 0xbc, 0xa8, 0x0, 0x6, 0x7, 0x1, 0x81, 0x3, 0x2, 0x3, 0x4, 0x4, 0x2445c87b, 0x6, 0xd, 0x9, 0x2, 0x10, 0x4, 0x7, 0x57, 0x5, 0xd, 0x1000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x8, 0x3, 0x7b2, 0x400, {0x1, 0x2, 0x8, 0x624, 0x0, 0xfffffff8}, {0x9, 0x2, 0x7, 0x7ff, 0xff01, 0x4}, 0x6, 0x4, 0x923}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 547.597638ms ago: executing program 5 (id=6571): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x5, 0x7, 0x7d070d06}, 0x10) 529.933189ms ago: executing program 3 (id=6572): io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000009c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) 523.024749ms ago: executing program 5 (id=6573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x40000000004, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x80000000, 0x0, 0x33}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 346.68255ms ago: executing program 1 (id=6579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000540)='asymmetric\x00', 0x0, &(0x7f0000000580)="10", 0x1, r2) 336.84148ms ago: executing program 5 (id=6580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab000000000000f30005000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0xc000) 328.520001ms ago: executing program 1 (id=6581): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 301.203562ms ago: executing program 5 (id=6582): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 267.124964ms ago: executing program 5 (id=6583): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x14105, 0x2f, 0xfffffbff, 0x7, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x8, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000240), &(0x7f0000001b40)=""/4105}, 0x20) 266.183924ms ago: executing program 1 (id=6584): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 216.202397ms ago: executing program 7 (id=6585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=ANY=[@ANYBLOB="020300000a"], 0x50}, 0x1, 0x7}, 0x0) 215.756307ms ago: executing program 7 (id=6586): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 214.431547ms ago: executing program 1 (id=6587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd, 0xbff, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2, 0x1, 0x1, {0x2}}) io_uring_enter(r1, 0x3516, 0x7acd, 0x0, 0x0, 0x0) 195.598089ms ago: executing program 7 (id=6588): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) rmdir(&(0x7f00000000c0)='./file1/file4\x00') 176.908739ms ago: executing program 7 (id=6589): io_setup(0xdda8, &(0x7f0000000040)=0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000007c0)='kfree\x00', r2}, 0x18) r3 = eventfd2(0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0xc48, r1, &(0x7f0000000080)="08eca742812fd30e72", 0x9, 0x7, 0x0, 0x3, r3}]) 167.01524ms ago: executing program 1 (id=6590): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000000)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0xee01, 0x0) 152.581121ms ago: executing program 5 (id=6591): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x4fe, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "2f2ddb"}, 0xe) 103.965294ms ago: executing program 8 (id=6592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3], 0x50) 48.734987ms ago: executing program 8 (id=6593): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r2}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0xb4, &(0x7f00000008c0)=ANY=[], 0x0) 13.372699ms ago: executing program 7 (id=6594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c617374"], 0x104}}, 0x40000) 0s ago: executing program 1 (id=6595): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) kernel console output (not intermixed with test programs): netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.154170][T14206] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.162972][T14206] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.171815][T14206] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.182136][T14345] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 131.194694][ T29] audit: type=1326 audit(2000033323.467:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14344 comm="syz.3.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3192d1cde9 code=0x7ffc0000 [ 131.218257][ T29] audit: type=1326 audit(2000033323.467:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14344 comm="syz.3.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3192d1cde9 code=0x7ffc0000 [ 131.316011][T14358] loop3: detected capacity change from 0 to 1024 [ 131.342237][T14358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.410919][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.427959][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4212'. [ 131.438675][T14377] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4212'. [ 131.813881][T14433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4235'. [ 131.855394][T14440] loop5: detected capacity change from 0 to 512 [ 131.862333][T14440] EXT4-fs: Ignoring removed orlov option [ 131.871234][T14440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.883907][T14440] ext4 filesystem being mounted at /934/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.914155][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.937208][T14446] bridge_slave_0: left allmulticast mode [ 131.943037][T14446] bridge_slave_0: left promiscuous mode [ 131.948760][T14446] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.957444][T14446] bridge_slave_1: left allmulticast mode [ 131.963187][T14446] bridge_slave_1: left promiscuous mode [ 131.968878][T14446] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.979829][T14446] bond0: (slave bond_slave_0): Releasing backup interface [ 131.989241][T14446] bond0: (slave bond_slave_1): Releasing backup interface [ 132.006527][T14446] team0: Port device team_slave_0 removed [ 132.022781][T14446] team0: Port device team_slave_1 removed [ 132.036413][T14446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.044014][T14446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.053808][T14446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.061598][T14446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.146734][T14468] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4249'. [ 132.200140][T14473] vhci_hcd: invalid port number 0 [ 132.329239][T14489] bridge_slave_0: left allmulticast mode [ 132.334954][T14489] bridge_slave_0: left promiscuous mode [ 132.340746][T14489] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.351394][T14489] bridge_slave_1: left allmulticast mode [ 132.357065][T14489] bridge_slave_1: left promiscuous mode [ 132.362952][T14489] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.392540][T14489] team0: Port device team_slave_0 removed [ 132.406495][T14489] team0: Port device team_slave_1 removed [ 132.413588][T14489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.421133][T14489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.431883][T14489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.456422][T14489] team0: Port device geneve1 removed [ 132.465030][T14491] tipc: Started in network mode [ 132.470053][T14491] tipc: Node identity ac14140f, cluster identity 4711 [ 132.478045][T14491] tipc: New replicast peer: 10.1.1.2 [ 132.483630][T14491] tipc: Enabled bearer , priority 10 [ 132.530813][T14502] 9pnet_fd: Insufficient options for proto=fd [ 132.623680][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 132.623696][ T29] audit: type=1326 audit(2000033324.887:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.4.4277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0305ecde9 code=0x0 [ 132.712934][T14533] netlink: 'syz.1.4281': attribute type 15 has an invalid length. [ 132.749131][ T29] audit: type=1326 audit(2000033325.007:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 132.772761][ T29] audit: type=1326 audit(2000033325.007:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 132.796386][ T29] audit: type=1326 audit(2000033325.007:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 132.819927][ T29] audit: type=1326 audit(2000033325.007:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 132.843499][ T29] audit: type=1326 audit(2000033325.007:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 132.867836][ T29] audit: type=1326 audit(2000033325.097:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 132.891501][ T29] audit: type=1326 audit(2000033325.097:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 132.915140][ T29] audit: type=1326 audit(2000033325.097:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 132.938834][ T29] audit: type=1326 audit(2000033325.097:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 132.971752][T14545] loop6: detected capacity change from 0 to 128 [ 132.981359][T14545] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 133.050544][T14556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=14556 comm=syz.5.4293 [ 133.165559][T14563] SELinux: syz.6.4295 (14563) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 133.460325][T14590] loop3: detected capacity change from 0 to 128 [ 133.467506][T14590] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 133.480228][ T3382] tipc: Node number set to 2886997007 [ 133.535155][T14599] loop4: detected capacity change from 0 to 1024 [ 134.195273][T14635] loop3: detected capacity change from 0 to 128 [ 134.204868][T14635] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.226023][T14635] ext4 filesystem being mounted at /882/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.240720][T14643] all: renamed from bridge_slave_0 (while UP) [ 134.284459][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.320903][T14650] loop5: detected capacity change from 0 to 512 [ 134.351269][T14650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 134.366168][T14650] ext4 filesystem being mounted at /961/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.392082][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 134.412200][T14665] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4340'. [ 134.421324][T14665] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4340'. [ 134.430839][T14665] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4340'. [ 134.440354][T14665] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4340'. [ 134.449476][T14665] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4340'. [ 134.537227][T14682] SELinux: security policydb version 17 (MLS) not backwards compatible [ 134.545999][T14682] SELinux: failed to load policy [ 134.618764][T14688] loop3: detected capacity change from 0 to 512 [ 134.631157][T14688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 134.644689][T14688] ext4 filesystem being mounted at /888/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.669296][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 134.812656][T14706] loop6: detected capacity change from 0 to 256 [ 134.826518][T14706] FAT-fs (loop6): codepage cp1251 not found [ 134.967875][T14720] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14720 comm=syz.6.4362 [ 135.142836][T14745] loop6: detected capacity change from 0 to 512 [ 135.161973][T14745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.174636][T14745] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.200351][T14206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.662326][T14761] loop6: detected capacity change from 0 to 512 [ 135.670360][T14761] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4382: bg 0: block 35: padding at end of block bitmap is not set [ 135.689838][T14761] EXT4-fs (loop6): Remounting filesystem read-only [ 135.701693][T14761] EXT4-fs (loop6): 1 truncate cleaned up [ 135.713819][T14761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.731736][T14761] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 135.739012][T14761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.797749][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4384'. [ 135.837369][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4386'. [ 135.906655][T14784] tipc: Enabling of bearer rejected, already enabled [ 135.934025][T14788] loop4: detected capacity change from 0 to 1024 [ 136.084338][T14804] loop4: detected capacity change from 0 to 2048 [ 136.140996][T14804] loop4: p1 < > p4 [ 136.146162][T14804] loop4: p4 size 8388608 extends beyond EOD, truncated [ 136.161440][T14816] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4407'. [ 136.859837][T14856] SELinux: security_context_str_to_sid ({ÿ) failed with errno=-22 [ 136.949425][T14859] syz_tun: left allmulticast mode [ 137.004642][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4428'. [ 137.121845][T14878] ALSA: seq fatal error: cannot create timer (-22) [ 137.298345][T14909] loop6: detected capacity change from 0 to 1024 [ 137.307241][T14913] netlink: 'syz.3.4449': attribute type 3 has an invalid length. [ 137.325717][T14909] EXT4-fs: Ignoring removed oldalloc option [ 137.336230][T14909] EXT4-fs: Ignoring removed bh option [ 137.351688][T14909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.436718][T14206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.479755][T14932] netlink: 'syz.6.4455': attribute type 6 has an invalid length. [ 137.505138][T14935] loop3: detected capacity change from 0 to 512 [ 137.518672][T14935] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 137.557298][T14935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4457'. [ 137.591357][T14939] random: crng reseeded on system resumption [ 137.669566][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 137.669581][ T29] audit: type=1400 audit(2000033329.927:4168): avc: denied { ioctl } for pid=14950 comm="syz.1.4465" path="socket:[37837]" dev="sockfs" ino=37837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 137.701520][ T29] audit: type=1326 audit(2000033329.927:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14938 comm="syz.6.4459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb4752cde9 code=0x0 [ 137.741107][ T29] audit: type=1326 audit(2000033330.007:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14955 comm="syz.4.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0305ecde9 code=0x7ffc0000 [ 137.764712][ T29] audit: type=1326 audit(2000033330.007:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14955 comm="syz.4.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0305ecde9 code=0x7ffc0000 [ 137.794356][ T29] audit: type=1326 audit(2000033330.007:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14955 comm="syz.4.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0305ecde9 code=0x7ffc0000 [ 137.817994][ T29] audit: type=1326 audit(2000033330.007:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14955 comm="syz.4.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0305ecde9 code=0x7ffc0000 [ 137.841601][ T29] audit: type=1326 audit(2000033330.007:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14955 comm="syz.4.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0305ecde9 code=0x7ffc0000 [ 137.865182][ T29] audit: type=1326 audit(2000033330.047:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14955 comm="syz.4.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0305ecde9 code=0x7ffc0000 [ 137.888800][ T29] audit: type=1326 audit(2000033330.047:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14955 comm="syz.4.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0305ecde9 code=0x7ffc0000 [ 137.912562][ T29] audit: type=1326 audit(2000033330.047:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14955 comm="syz.4.4467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0305ecde9 code=0x7ffc0000 [ 137.946497][T14961] xt_TPROXY: Can be used only with -p tcp or -p udp [ 138.096274][T14982] loop3: detected capacity change from 0 to 512 [ 138.118682][T14982] EXT4-fs: quotafile must be on filesystem root [ 138.304347][T15006] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 138.317591][T15006] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 138.489214][T15027] SELinux: security_context_str_to_sid (") failed with errno=-22 [ 138.783988][T15041] sch_tbf: burst 25 is lower than device lo mtu (65550) ! [ 139.000497][T15051] netlink: 'syz.1.4514': attribute type 12 has an invalid length. [ 139.036081][T15053] netlink: 'syz.5.4516': attribute type 1 has an invalid length. [ 139.081350][T15053] bond0: entered promiscuous mode [ 139.108352][T15053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.148087][T15065] futex_wake_op: syz.1.4519 tries to shift op by -1; fix this program [ 139.160285][T15059] veth3: entered promiscuous mode [ 139.203692][T15059] bond0: (slave veth3): making interface the new active one [ 139.242643][T15059] bond0: (slave veth3): Enslaving as an active interface with an up link [ 139.379759][T15013] syz.3.4494 (15013) used greatest stack depth: 7360 bytes left [ 140.384573][T15156] bridge0: port 3(vlan2) entered blocking state [ 140.390984][T15156] bridge0: port 3(vlan2) entered disabled state [ 140.417975][T15156] vlan2: entered allmulticast mode [ 140.429574][T15156] vlan2: left allmulticast mode [ 140.452450][T15160] bridge0: port 1(macsec1) entered blocking state [ 140.458941][T15160] bridge0: port 1(macsec1) entered disabled state [ 140.484523][T15160] macsec1: entered allmulticast mode [ 140.489933][T15160] bridge0: entered allmulticast mode [ 140.511185][T15160] macsec1: left allmulticast mode [ 140.516331][T15160] bridge0: left allmulticast mode [ 140.656147][T15180] geneve0: entered allmulticast mode [ 140.676690][T15121] syz.5.4544 (15121) used greatest stack depth: 6376 bytes left [ 140.737054][T15187] loop5: detected capacity change from 0 to 512 [ 140.752546][T15187] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4575: bg 0: block 35: padding at end of block bitmap is not set [ 140.771926][T15187] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 140.781798][T15187] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4575: invalid indirect mapped block 4294967295 (level 1) [ 140.796236][T15187] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4575: invalid indirect mapped block 4294967295 (level 2) [ 140.814153][T15200] netlink: 'syz.1.4581': attribute type 10 has an invalid length. [ 140.819496][T15187] EXT4-fs (loop5): 1 truncate cleaned up [ 140.828150][T15187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.830371][T15200] team0: Device hsr_slave_0 failed to register rx_handler [ 140.890195][T15206] __nla_validate_parse: 1 callbacks suppressed [ 140.890212][T15206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4584'. [ 140.981173][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.025966][T15216] loop5: detected capacity change from 0 to 164 [ 141.070278][T15216] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 141.103341][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'. [ 141.187343][T15227] SELinux: security_context_str_to_sid () failed with errno=-22 [ 141.244852][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4598'. [ 141.384313][T15261] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 141.425261][T15261] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 141.474984][T15265] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4612'. [ 141.654253][T15280] bridge0: port 1(macsec1) entered blocking state [ 141.660797][T15280] bridge0: port 1(macsec1) entered disabled state [ 141.667546][T15280] macsec1: entered allmulticast mode [ 141.672912][T15280] bridge0: entered allmulticast mode [ 141.679190][T15280] macsec1: left allmulticast mode [ 141.684306][T15280] bridge0: left allmulticast mode [ 142.237314][T15306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4631'. [ 142.246459][T15306] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4631'. [ 142.388976][T15337] sctp: [Deprecated]: syz.1.4645 (pid 15337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.388976][T15337] Use struct sctp_sack_info instead [ 142.511907][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4653'. [ 142.537792][T15358] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 142.546603][T15358] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 142.712725][T15381] loop5: detected capacity change from 0 to 512 [ 142.742389][T15381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.770047][T15381] ext4 filesystem being mounted at /1020/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.798348][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.036949][T15412] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.337306][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 143.337321][ T29] audit: type=1326 audit(2000033335.597:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.6.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4752cde9 code=0x7ffc0000 [ 143.367465][ T29] audit: type=1326 audit(2000033335.597:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.6.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4752cde9 code=0x7ffc0000 [ 143.391113][ T29] audit: type=1326 audit(2000033335.597:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.6.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb4752cde9 code=0x7ffc0000 [ 143.414707][ T29] audit: type=1326 audit(2000033335.597:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.6.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4752cde9 code=0x7ffc0000 [ 143.438407][ T29] audit: type=1326 audit(2000033335.597:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.6.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4752cde9 code=0x7ffc0000 [ 143.445013][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4699'. [ 143.462063][ T29] audit: type=1326 audit(2000033335.597:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.6.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb4752cde9 code=0x7ffc0000 [ 143.494566][ T29] audit: type=1326 audit(2000033335.597:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.6.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4752cde9 code=0x7ffc0000 [ 143.518094][ T29] audit: type=1326 audit(2000033335.597:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.6.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb4752cde9 code=0x7ffc0000 [ 143.541711][ T29] audit: type=1326 audit(2000033335.637:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.6.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4752cde9 code=0x7ffc0000 [ 143.565347][ T29] audit: type=1326 audit(2000033335.637:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.6.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4752cde9 code=0x7ffc0000 [ 143.755158][T15488] loop4: detected capacity change from 0 to 256 [ 143.761970][T15488] /dev/loop4: Can't open blockdev [ 143.911309][T15512] vlan2: entered promiscuous mode [ 143.916443][T15512] vlan2: entered allmulticast mode [ 144.131738][T15543] loop3: detected capacity change from 0 to 2048 [ 144.141658][T15543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.221491][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.322167][T15570] loop3: detected capacity change from 0 to 512 [ 144.322845][T15571] bridge0: port 3(macsec1) entered blocking state [ 144.335163][T15571] bridge0: port 3(macsec1) entered disabled state [ 144.343284][T15571] macsec1: entered allmulticast mode [ 144.348705][T15571] bridge0: entered allmulticast mode [ 144.354713][T15571] macsec1: left allmulticast mode [ 144.359958][T15571] bridge0: left allmulticast mode [ 144.369162][T15573] pimreg: entered allmulticast mode [ 144.378961][T15573] pimreg: left allmulticast mode [ 144.670046][T15585] Falling back ldisc for ttyS3. [ 144.772825][T15598] loop4: detected capacity change from 0 to 128 [ 145.153257][T15625] loop6: detected capacity change from 0 to 2048 [ 145.170841][T15625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.236581][T14206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.318704][T15645] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 145.326944][T15645] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 145.370416][T15650] bridge0: entered promiscuous mode [ 145.376347][T15650] bridge0: port 1(macsec1) entered blocking state [ 145.382978][T15650] bridge0: port 1(macsec1) entered disabled state [ 145.389788][T15650] macsec1: entered allmulticast mode [ 145.395121][T15650] bridge0: entered allmulticast mode [ 145.401058][T15650] macsec1: left allmulticast mode [ 145.406126][T15650] bridge0: left allmulticast mode [ 145.412041][T15650] bridge0: left promiscuous mode [ 145.833552][T15695] netlink: 'syz.5.4804': attribute type 7 has an invalid length. [ 145.966112][T15711] pim6reg: entered allmulticast mode [ 145.978982][T15711] pim6reg: left allmulticast mode [ 146.080136][T15720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.107935][T15720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.164303][T15725] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 146.864213][T15768] loop5: detected capacity change from 0 to 128 [ 146.872351][T15768] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.884659][T15768] ext4 filesystem being mounted at /1052/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.930508][ T3576] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.033799][T15780] loop5: detected capacity change from 0 to 128 [ 147.613703][T15791] loop6: detected capacity change from 0 to 1764 [ 147.641986][T15793] loop6: detected capacity change from 0 to 128 [ 147.648714][T15793] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 147.667273][T15793] syz.6.4848: attempt to access beyond end of device [ 147.667273][T15793] loop6: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 147.681111][T15793] syz.6.4848: attempt to access beyond end of device [ 147.681111][T15793] loop6: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 148.085443][T15840] __nla_validate_parse: 5 callbacks suppressed [ 148.085512][T15840] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4871'. [ 148.100915][T15840] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4871'. [ 148.110163][T15840] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4871'. [ 148.253161][T15868] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 148.261573][T15868] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 148.330008][T15876] loop4: detected capacity change from 0 to 2048 [ 148.584261][T15898] loop6: detected capacity change from 0 to 128 [ 148.594383][T15898] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.608904][T15898] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.672133][T14206] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.257739][ T29] kauditd_printk_skb: 958 callbacks suppressed [ 149.257774][ T29] audit: type=1326 audit(2000033341.517:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.1.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 149.299636][ T29] audit: type=1326 audit(2000033341.547:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.1.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 149.323223][ T29] audit: type=1326 audit(2000033341.547:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.1.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 149.346754][ T29] audit: type=1326 audit(2000033341.547:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.1.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 149.370406][ T29] audit: type=1326 audit(2000033341.547:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.1.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 149.394179][ T29] audit: type=1326 audit(2000033341.547:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.1.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 149.418335][ T29] audit: type=1326 audit(2000033341.547:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.1.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 149.441937][ T29] audit: type=1326 audit(2000033341.547:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.1.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 149.465571][ T29] audit: type=1326 audit(2000033341.547:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.1.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 149.489195][ T29] audit: type=1326 audit(2000033341.557:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.1.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 149.576520][T15949] loop4: detected capacity change from 0 to 2048 [ 149.610000][T15955] random: crng reseeded on system resumption [ 149.753269][T15984] loop4: detected capacity change from 0 to 512 [ 149.761707][T15984] SELinux: Context system_u:object_r:devicekit_disk_exec_t:s0 is not valid (left unmapped). [ 149.936534][T16017] loop6: detected capacity change from 0 to 512 [ 149.943366][T16017] EXT4-fs: Ignoring removed orlov option [ 149.945237][T16019] netlink: 'syz.4.4949': attribute type 6 has an invalid length. [ 149.972488][T16017] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.985664][T16017] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.011522][T14206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.247489][T16047] loop6: detected capacity change from 0 to 512 [ 150.254583][T16047] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.263672][T16047] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 150.276026][T16049] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 150.329765][T16057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4966'. [ 150.339167][T16057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4966'. [ 150.524674][T16079] x_tables: unsorted underflow at hook 3 [ 150.763747][T16109] xt_hashlimit: max too large, truncated to 1048576 [ 150.849512][T16119] netlink: 'syz.1.4993': attribute type 30 has an invalid length. [ 150.963269][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4998'. [ 150.976258][T16130] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 150.992262][T16132] pim6reg: entered allmulticast mode [ 150.998560][T16132] pim6reg: left allmulticast mode [ 151.012290][T16136] SELinux: security_context_str_to_sid () failed with errno=-22 [ 151.058464][T16142] netlink: 129 bytes leftover after parsing attributes in process `syz.6.5004'. [ 151.067812][T16142] netlink: 129 bytes leftover after parsing attributes in process `syz.6.5004'. [ 151.214820][T16167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.227974][T16167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.780616][T16217] netlink: 'syz.4.5038': attribute type 1 has an invalid length. [ 151.788477][T16217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5038'. [ 151.799008][T16213] loop5: detected capacity change from 0 to 2048 [ 151.817073][T16213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.846832][T16222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5040'. [ 151.865043][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.172367][T16277] bridge0: port 1(batadv1) entered blocking state [ 152.179002][T16277] bridge0: port 1(batadv1) entered disabled state [ 152.185803][T16277] batadv1: entered allmulticast mode [ 152.191792][T16277] batadv1: entered promiscuous mode [ 152.203311][T16278] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.212179][T16278] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.220998][T16278] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.229861][T16278] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.239925][T16278] vxlan1: entered promiscuous mode [ 152.342616][ T3374] Process accounting resumed [ 152.362198][T16289] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.679436][ T50] batman_adv: batadv1: IGMP Querier appeared [ 152.685513][ T50] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 153.377443][T16374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.389718][T16374] bond1 (unregistering): Released all slaves [ 153.511466][T16386] netlink: '+}[@': attribute type 3 has an invalid length. [ 153.602239][T16398] atomic_op ffff8881027d8d28 conn xmit_atomic 0000000000000000 [ 153.632096][T16404] loop5: detected capacity change from 0 to 512 [ 153.638866][T16404] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.652922][T16404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.665817][T16404] ext4 filesystem being mounted at /1120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.699095][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.735595][T16419] __nla_validate_parse: 3 callbacks suppressed [ 153.735664][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5130'. [ 153.750912][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5130'. [ 153.760155][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5130'. [ 153.816574][T16429] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5135'. [ 153.825064][T16431] netlink: 'syz.6.5136': attribute type 3 has an invalid length. [ 153.825696][T16429] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5135'. [ 153.908718][T16444] block device autoloading is deprecated and will be removed. [ 153.916401][T16444] +}[@: attempt to access beyond end of device [ 153.916401][T16444] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 154.098283][T16460] netlink: 'syz.5.5148': attribute type 39 has an invalid length. [ 154.260717][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 154.260733][ T29] audit: type=1400 audit(2000033346.527:5560): avc: denied { connect } for pid=16463 comm="syz.5.5150" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.326992][T16468] ALSA: seq fatal error: cannot create timer (-19) [ 154.350380][T16471] loop5: detected capacity change from 0 to 128 [ 154.357692][ T29] audit: type=1400 audit(2000033346.617:5561): avc: denied { mount } for pid=16470 comm="syz.5.5153" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 154.388125][ T29] audit: type=1400 audit(2000033346.647:5562): avc: denied { unmount } for pid=3576 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 154.527338][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5157'. [ 154.579309][ T29] audit: type=1326 audit(2000033346.837:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.1.5159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x0 [ 154.619558][ T29] audit: type=1400 audit(2000033346.877:5564): avc: denied { shutdown } for pid=16486 comm="syz.5.5160" laddr=fe80::10 lport=45194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.663911][ T29] audit: type=1400 audit(2000033346.927:5565): avc: denied { mounton } for pid=16488 comm="syz.5.5161" path="/1143/bus" dev="tmpfs" ino=5918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.666966][T16489] loop5: detected capacity change from 0 to 512 [ 154.694700][T16489] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.704636][ T29] audit: type=1400 audit(2000033346.967:5566): avc: denied { mounton } for pid=16488 comm="syz.5.5161" path="/1143/bus" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.705964][T16489] EXT4-fs (loop5): 1 truncate cleaned up [ 154.736983][T16489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.753189][T16489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.793460][T16494] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.5163'. [ 154.802967][T16494] netlink: zone id is out of range [ 154.808118][T16494] netlink: zone id is out of range [ 154.813603][T16494] netlink: zone id is out of range [ 154.825038][ T29] audit: type=1400 audit(2000033347.087:5567): avc: denied { unmount } for pid=3576 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 154.856000][T16494] netlink: set zone limit has 8 unknown bytes [ 155.013721][T16520] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5176'. [ 155.083796][T16532] netlink: 'syz.5.5183': attribute type 1 has an invalid length. [ 155.147010][ T29] audit: type=1326 audit(2000033347.397:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16541 comm="syz.4.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0305ecde9 code=0x7ffc0000 [ 155.171241][ T29] audit: type=1326 audit(2000033347.397:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16541 comm="syz.4.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff0305ecde9 code=0x7ffc0000 [ 155.269870][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5192'. [ 155.278768][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5192'. [ 155.707720][T16614] netlink: 'syz.6.5220': attribute type 21 has an invalid length. [ 155.751897][T16620] loop5: detected capacity change from 0 to 1024 [ 155.778421][T16626] netlink: 'syz.3.5226': attribute type 3 has an invalid length. [ 155.788483][T16620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.835445][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.876033][T16635] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 155.884299][T16635] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 156.228256][T16665] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 156.460905][T16672] veth0_to_bond: entered promiscuous mode [ 156.521196][T16682] veth0_to_bond (unregistering): left promiscuous mode [ 156.824500][T16696] loop4: detected capacity change from 0 to 8192 [ 157.074806][T16749] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.466652][T16820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.476674][T16820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.529001][T16826] loop6: detected capacity change from 0 to 8192 [ 158.016159][T16862] batadv_slave_1: entered promiscuous mode [ 158.022571][T16861] batadv_slave_1: left promiscuous mode [ 158.045548][T16865] netlink: 'syz.5.5332': attribute type 6 has an invalid length. [ 158.115611][T16876] loop5: detected capacity change from 0 to 2048 [ 158.131278][T16876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.159025][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.188889][T16887] loop4: detected capacity change from 0 to 164 [ 158.307439][T16906] loop4: detected capacity change from 0 to 512 [ 158.463542][T16915] loop3: detected capacity change from 0 to 512 [ 158.492061][T16915] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.501190][T16915] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 158.562388][T16924] x_tables: unsorted underflow at hook 3 [ 158.946417][T16980] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.026961][T16988] __nla_validate_parse: 9 callbacks suppressed [ 159.026977][T16988] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5389'. [ 159.178131][T16999] pim6reg: entered allmulticast mode [ 159.210520][T16999] pim6reg: left allmulticast mode [ 159.283828][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 159.283846][ T29] audit: type=1400 audit(2000033351.547:5803): avc: denied { create } for pid=17010 comm="syz.5.5398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.315184][ T29] audit: type=1400 audit(2000033351.577:5804): avc: denied { connect } for pid=17010 comm="syz.5.5398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.335100][ T29] audit: type=1400 audit(2000033351.577:5805): avc: denied { write } for pid=17010 comm="syz.5.5398" path="socket:[45318]" dev="sockfs" ino=45318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.414690][T17019] loop4: detected capacity change from 0 to 256 [ 159.421849][T17019] FAT-fs (loop4): bogus number of FAT sectors [ 159.423209][T17020] loop6: detected capacity change from 0 to 128 [ 159.427941][T17019] FAT-fs (loop4): Can't find a valid FAT filesystem [ 159.463820][T17020] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.498548][T17020] ext4 filesystem being mounted at /315/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.540451][ T29] audit: type=1400 audit(2000033351.757:5806): avc: denied { mount } for pid=17017 comm="syz.6.5402" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 159.574388][ T29] audit: type=1400 audit(2000033351.827:5807): avc: denied { module_request } for pid=17018 comm="syz.4.5403" kmod="arptable_vfat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 159.620501][ T29] audit: type=1400 audit(2000033351.867:5808): avc: denied { write } for pid=17017 comm="syz.6.5402" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.642413][ T29] audit: type=1400 audit(2000033351.867:5809): avc: denied { add_name } for pid=17017 comm="syz.6.5402" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.666405][ T29] audit: type=1400 audit(2000033351.867:5810): avc: denied { create } for pid=17017 comm="syz.6.5402" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 159.689612][ T29] audit: type=1400 audit(2000033351.867:5811): avc: denied { read append open } for pid=17017 comm="syz.6.5402" path="/315/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_service_bytes_recursive" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 159.737708][ T29] audit: type=1400 audit(2000033351.867:5812): avc: denied { write } for pid=17017 comm="syz.6.5402" path="/315/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 159.765602][T14206] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.875585][T17038] batadv_slave_1: entered promiscuous mode [ 159.901136][T17037] batadv_slave_1: left promiscuous mode [ 160.005606][T17052] netlink: 268 bytes leftover after parsing attributes in process `syz.6.5405'. [ 160.249800][T17087] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í( [ 160.263449][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5433'. [ 160.419029][T17091] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 160.427345][T17091] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 160.692165][ T1050] Process accounting resumed [ 160.719789][T17130] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 160.728171][T17130] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 160.776386][T17138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.784919][T17138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.834211][T17140] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 160.936681][T17148] netlink: '+}[@': attribute type 3 has an invalid length. [ 161.010780][T17162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5467'. [ 161.061072][T17170] loop4: detected capacity change from 0 to 512 [ 161.168039][T17181] loop3: detected capacity change from 0 to 2048 [ 161.195548][T17181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.236512][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.246018][T17191] netlink: 'syz.1.5483': attribute type 1 has an invalid length. [ 161.253817][T17191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5483'. [ 161.445337][T17226] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5497'. [ 161.457576][T17228] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5498'. [ 162.249653][T17255] loop4: detected capacity change from 0 to 2048 [ 162.256184][T17255] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ184467440737095516150xffffffffffffffff' [ 162.356194][T17267] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(ááí«Q00000000000000000005 [ 162.427652][T17279] syz.6.5524: attempt to access beyond end of device [ 162.427652][T17279] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 162.471250][T17284] 9pnet: Could not find request transport: 0xffffffffffffffff [ 162.485282][T17289] netlink: 'syz.6.5528': attribute type 3 has an invalid length. [ 162.692121][T17309] veth1_to_bridge: entered allmulticast mode [ 162.698635][T17309] veth1_to_bridge: left allmulticast mode [ 162.730516][T17315] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5540'. [ 162.740461][T17317] loop4: detected capacity change from 0 to 512 [ 162.771529][T17321] netlink: 'syz.4.5543': attribute type 39 has an invalid length. [ 162.872367][T17332] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 162.935894][T17343] netlink: 'syz.5.5553': attribute type 21 has an invalid length. [ 162.953227][T17343] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5553'. [ 162.992783][T17346] loop4: detected capacity change from 0 to 2048 [ 163.006937][T17353] sd 0:0:1:0: device reset [ 163.027953][T17357] syz.4.5561: attempt to access beyond end of device [ 163.027953][T17357] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 163.058232][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5562'. [ 163.163329][T17369] loop4: detected capacity change from 0 to 2048 [ 163.689643][T17437] loop5: detected capacity change from 0 to 512 [ 163.696832][T17437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.722105][T17437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.735304][T17437] ext4 filesystem being mounted at /1219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.759365][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.829633][T17450] loop3: detected capacity change from 0 to 512 [ 163.849232][T17450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.862449][T17450] ext4 filesystem being mounted at /1092/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.873866][T17450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.141496][T17493] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 164.184963][T17495] __nla_validate_parse: 4 callbacks suppressed [ 164.184988][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5635'. [ 164.205405][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5635'. [ 164.218702][T17497] 9pnet: Could not find request transport: 0xffffffffffffffff [ 164.256847][T17504] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5627'. [ 164.291096][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 164.291111][ T29] audit: type=1400 audit(2000033356.557:5961): avc: denied { mounton } for pid=17505 comm="syz.4.5629" path="/proc/1039/task" dev="proc" ino=46252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 164.336388][T17509] loop3: detected capacity change from 0 to 256 [ 164.344446][ T29] audit: type=1400 audit(2000033356.617:5962): avc: denied { setopt } for pid=17510 comm="syz.4.5631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 164.351218][T17509] FAT-fs (loop3): Directory bread(block 64) failed [ 164.371876][T17509] FAT-fs (loop3): Directory bread(block 65) failed [ 164.378515][T17509] FAT-fs (loop3): Directory bread(block 66) failed [ 164.385423][T17509] FAT-fs (loop3): Directory bread(block 67) failed [ 164.394983][T17509] FAT-fs (loop3): Directory bread(block 68) failed [ 164.402145][T17509] FAT-fs (loop3): Directory bread(block 69) failed [ 164.408941][T17509] FAT-fs (loop3): Directory bread(block 70) failed [ 164.415872][T17515] loop4: detected capacity change from 0 to 512 [ 164.416717][T17509] FAT-fs (loop3): Directory bread(block 71) failed [ 164.428885][T17509] FAT-fs (loop3): Directory bread(block 72) failed [ 164.436532][T17509] FAT-fs (loop3): Directory bread(block 73) failed [ 164.446573][ T29] audit: type=1400 audit(2000033356.707:5963): avc: denied { mount } for pid=17508 comm="syz.3.5630" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 164.486458][T17509] syz.3.5630: attempt to access beyond end of device [ 164.486458][T17509] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 164.512277][T17519] vlan2: entered allmulticast mode [ 164.518467][ T29] audit: type=1400 audit(2000033356.777:5964): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 164.614038][T17527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5640'. [ 164.647805][T17530] loop3: detected capacity change from 0 to 256 [ 164.654896][T17530] FAT-fs (loop3): bogus number of FAT sectors [ 164.661128][T17530] FAT-fs (loop3): Can't find a valid FAT filesystem [ 164.833857][T17547] loop3: detected capacity change from 0 to 8192 [ 164.938359][ T29] audit: type=1400 audit(2000033357.197:5965): avc: denied { read } for pid=17564 comm="syz.3.5658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 165.087981][T17575] loop6: detected capacity change from 0 to 2048 [ 165.101474][T17575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.131457][T14206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.420710][T17585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5664'. [ 165.453698][T17585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5664'. [ 165.530234][T17589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5667'. [ 165.541203][T17589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5667'. [ 165.576688][T17601] ip6gre1: entered allmulticast mode [ 165.627901][T17607] syz_tun: entered allmulticast mode [ 165.656600][T17613] netlink: 'syz.1.5678': attribute type 1 has an invalid length. [ 165.671596][T17613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.688833][ T29] audit: type=1400 audit(2000033357.947:5966): avc: denied { create } for pid=17615 comm="syz.5.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.711055][T17613] bond0: (slave gretap1): making interface the new active one [ 165.720802][T17613] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 165.744288][ T29] audit: type=1400 audit(2000033358.007:5967): avc: denied { create } for pid=17618 comm="syz.4.5680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.772249][ T29] audit: type=1400 audit(2000033358.007:5968): avc: denied { setopt } for pid=17618 comm="syz.4.5680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.913600][T17639] loop6: detected capacity change from 0 to 2048 [ 165.941228][T17639] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.956668][ T29] audit: type=1400 audit(2000033358.227:5969): avc: denied { setattr } for pid=17638 comm="syz.6.5688" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.982379][T14206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.018658][T17647] xt_hashlimit: size too large, truncated to 1048576 [ 166.379824][T17666] loop6: detected capacity change from 0 to 512 [ 166.386369][T17666] EXT4-fs: Ignoring removed orlov option [ 166.411439][T17666] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.424360][T17666] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.448509][T14206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.832580][T17701] xt_hashlimit: max too large, truncated to 1048576 [ 166.839477][T17700] loop5: detected capacity change from 0 to 1024 [ 166.846458][T17700] EXT4-fs: Ignoring removed orlov option [ 166.852242][T17700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.892204][T17700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.919092][ T29] audit: type=1400 audit(2000033359.177:5970): avc: denied { setattr } for pid=17698 comm="syz.5.5711" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.957106][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.086898][T17727] loop4: detected capacity change from 0 to 128 [ 167.160738][T17730] loop5: detected capacity change from 0 to 2048 [ 167.182248][T17730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.211680][T17741] hub 9-0:1.0: USB hub found [ 167.216441][T17741] hub 9-0:1.0: 8 ports detected [ 167.225154][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.442899][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5745'. [ 167.471158][T17777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5748'. [ 167.502840][T17781] IPVS: Error connecting to the multicast addr [ 167.582976][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.590422][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.597819][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.605303][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.612740][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.620266][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.627741][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.635173][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.642625][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.650049][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.657582][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.665052][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.672543][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.680022][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.687417][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.694860][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.702356][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.709763][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.717217][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.724653][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.732076][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.739544][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.746950][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.754393][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.761817][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.769216][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.776870][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.784306][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.791741][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.799154][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.806571][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.814028][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 167.822136][ T1050] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 167.917387][T17804] loop5: detected capacity change from 0 to 512 [ 167.957425][T17808] loop4: detected capacity change from 0 to 164 [ 167.986893][T17810] veth0_to_bond: entered promiscuous mode [ 167.993673][T17810] veth0_to_bond (unregistering): left promiscuous mode [ 168.007556][T17804] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.037357][T17804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.069583][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.137478][T17818] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17818 comm=syz.4.5766 [ 168.150222][T17818] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17818 comm=syz.4.5766 [ 168.183749][T17821] loop3: detected capacity change from 0 to 1024 [ 168.193006][T17821] EXT4-fs: Ignoring removed orlov option [ 168.198688][T17821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.223016][T17821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.256882][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.311909][T17833] vlan2: entered promiscuous mode [ 168.317114][T17833] erspan0: entered promiscuous mode [ 168.325051][T17833] erspan0: left promiscuous mode [ 168.556546][T17877] serio: Serial port ptm0 [ 168.604155][T17889] loop3: detected capacity change from 0 to 512 [ 168.614440][T17889] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.634027][T17889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.649478][T17889] ext4 filesystem being mounted at /1130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.663689][T17897] loop6: detected capacity change from 0 to 1024 [ 168.673726][T17897] EXT4-fs: Ignoring removed orlov option [ 168.679480][T17897] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.696654][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.711031][T17897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.727488][T17906] netlink: 'syz.1.5804': attribute type 4 has an invalid length. [ 168.753711][T14206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.768452][T17910] loop3: detected capacity change from 0 to 2048 [ 168.807906][T17910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.821573][T17920] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 168.846883][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.882411][T17930] netlink: 'syz.5.5825': attribute type 8 has an invalid length. [ 168.928460][T17935] Invalid ELF header magic: != ELF [ 169.018202][T17944] netlink: 'syz.3.5831': attribute type 4 has an invalid length. [ 169.119782][T17951] loop4: detected capacity change from 0 to 1024 [ 169.134677][T17951] EXT4-fs: Ignoring removed orlov option [ 169.140443][T17951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.163680][T17954] serio: Serial port ptm0 [ 169.336039][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 169.336057][ T29] audit: type=1400 audit(2000033361.597:5996): avc: denied { bind } for pid=17976 comm="syz.3.5836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 169.364893][T17981] atomic_op ffff888116d34128 conn xmit_atomic 0000000000000000 [ 169.401505][T17987] serio: Serial port ptm0 [ 169.600139][ T29] audit: type=1400 audit(2000033361.857:5997): avc: denied { bind } for pid=18003 comm="syz.4.5847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 169.619678][ T29] audit: type=1400 audit(2000033361.857:5998): avc: denied { name_bind } for pid=18003 comm="syz.4.5847" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 169.640883][ T29] audit: type=1400 audit(2000033361.857:5999): avc: denied { node_bind } for pid=18003 comm="syz.4.5847" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 169.661977][ T29] audit: type=1400 audit(2000033361.857:6000): avc: denied { connect } for pid=18003 comm="syz.4.5847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 169.681805][ T29] audit: type=1400 audit(2000033361.857:6001): avc: denied { name_connect } for pid=18003 comm="syz.4.5847" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 169.703290][ T29] audit: type=1400 audit(2000033361.907:6002): avc: denied { getopt } for pid=18003 comm="syz.4.5847" laddr=127.0.0.1 lport=48920 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 169.892029][T18021] serio: Serial port ptm0 [ 169.900774][ T29] audit: type=1326 audit(2000033362.157:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18018 comm="syz.6.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4752cde9 code=0x7ffc0000 [ 169.924439][ T29] audit: type=1326 audit(2000033362.157:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18018 comm="syz.6.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7ffb4752cde9 code=0x7ffc0000 [ 169.948045][ T29] audit: type=1326 audit(2000033362.157:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18018 comm="syz.6.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4752cde9 code=0x7ffc0000 [ 169.995919][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.003425][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.010869][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.018267][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.025708][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.033127][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.040606][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.048010][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.055431][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.062916][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.070424][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.078131][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.085599][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.093039][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.100483][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.107898][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.115317][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.122865][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.130384][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.137784][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.145241][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.152704][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.160215][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.167717][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.175153][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.182704][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.190147][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.197552][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.205127][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.212566][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.220076][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.227530][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 170.239434][ T3376] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 170.362799][T18036] serio: Serial port ptm0 [ 170.377811][T18038] IPv6: Can't replace route, no match found [ 170.458801][T18045] loop6: detected capacity change from 0 to 128 [ 170.510948][T18051] loop6: detected capacity change from 0 to 512 [ 170.539135][T18051] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.549207][T18051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.553994][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.568827][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.576272][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.583711][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.591146][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.598608][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.600639][T18051] __nla_validate_parse: 8 callbacks suppressed [ 170.600657][T18051] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5866'. [ 170.606161][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.628735][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.636277][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.643812][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.651686][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.659093][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.666534][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.674067][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.681561][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.688968][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.696539][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.704022][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.711977][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.719403][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.726876][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.734399][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.741823][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.749241][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.756766][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.764211][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.771630][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.779125][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.785595][T18064] serio: Serial port ptm0 [ 170.786544][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.798366][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.805806][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.813225][ T1050] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 170.821149][ T1050] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 170.821331][T14206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.906275][T18074] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 170.996279][T18085] loop6: detected capacity change from 0 to 1764 [ 171.019446][T18089] netlink: 'syz.1.5884': attribute type 10 has an invalid length. [ 171.039800][T14206] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 171.049926][T14206] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 171.232043][T16762] syz_tun (unregistering): left allmulticast mode [ 171.646163][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.653664][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.661119][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.668551][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.676050][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.683506][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.691263][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.698915][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.706331][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.713832][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.721384][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.728795][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.736262][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.743780][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.751349][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.758753][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.766192][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.773760][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.781242][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.788682][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.796171][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.803598][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.811120][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.818559][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.825957][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.833468][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.840861][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.848232][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.855702][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.863243][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.870700][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.878113][ T3376] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 171.886003][ T3376] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 171.994313][T18131] loop3: detected capacity change from 0 to 1024 [ 172.040036][T18131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.052258][T18131] ext4 filesystem being mounted at /1151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.089592][T18131] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5898: bg 0: block 393: padding at end of block bitmap is not set [ 172.130165][T18131] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 172.142705][T18131] EXT4-fs (loop3): This should not happen!! Data will be lost [ 172.142705][T18131] [ 172.194972][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.287616][T18105] chnl_net:caif_netlink_parms(): no params data found [ 172.381315][T18105] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.388461][T18105] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.405821][T18105] bridge_slave_0: entered allmulticast mode [ 172.421524][T18165] loop4: detected capacity change from 0 to 4096 [ 172.451566][T18105] bridge_slave_0: entered promiscuous mode [ 172.471371][T18105] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.478585][T18105] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.490046][T18105] bridge_slave_1: entered allmulticast mode [ 172.496515][T18105] bridge_slave_1: entered promiscuous mode [ 172.520970][T18105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.531983][T18105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.570383][T18105] team0: Port device team_slave_0 added [ 172.589554][T18182] loop5: detected capacity change from 0 to 1024 [ 172.598369][T18182] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 172.610805][T18105] team0: Port device team_slave_1 added [ 172.617263][T18182] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 172.619395][T18177] netlink: 'syz.3.5917': attribute type 10 has an invalid length. [ 172.633262][T18182] EXT4-fs (loop5): orphan cleanup on readonly fs [ 172.640271][T18182] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 172.650281][T18182] EXT4-fs (loop5): Remounting filesystem read-only [ 172.657011][T18182] EXT4-fs (loop5): 1 orphan inode deleted [ 172.666156][T18182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 172.666224][T18177] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 172.689683][T18105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.696807][T18105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.722848][T18105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.734504][T18105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.734959][T18182] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 172.741483][T18105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.741517][T18105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.785328][T18182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.852033][T18105] hsr_slave_0: entered promiscuous mode [ 172.858098][T18105] hsr_slave_1: entered promiscuous mode [ 172.866709][T18105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.874635][T18105] Cannot create hsr debugfs directory [ 172.979430][T18105] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.989777][T18105] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.045580][T18105] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.056017][T18105] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.070335][T18224] netlink: 'syz.4.5937': attribute type 10 has an invalid length. [ 173.092360][T18224] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 173.106316][T18232] syz.5.5941: attempt to access beyond end of device [ 173.106316][T18232] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 173.123668][T18105] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.134231][T18105] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.152603][T18237] SELinux: security_context_str_to_sid (ñ) failed with errno=-22 [ 173.183004][T18105] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.193482][T18105] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.282389][T18105] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 173.295334][T18105] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 173.305741][T18105] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 173.314301][T18105] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 173.369494][T18105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.383833][T18105] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.393765][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.401026][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.421811][T18105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.432212][T18105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.445440][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.452600][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.514673][T18105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.703582][T18105] veth0_vlan: entered promiscuous mode [ 173.723981][T18105] veth1_vlan: entered promiscuous mode [ 173.744423][T18105] veth0_macvtap: entered promiscuous mode [ 173.753385][T18105] veth1_macvtap: entered promiscuous mode [ 173.764768][T18105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.777482][T18105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.787632][T18105] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.796449][T18105] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.805227][T18105] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.814046][T18105] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.881263][T18269] loop5: detected capacity change from 0 to 1024 [ 173.911494][T18269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.925209][T18269] ext4 filesystem being mounted at /1295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.943028][T18269] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5949: bg 0: block 393: padding at end of block bitmap is not set [ 173.961330][T18269] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 173.973932][T18269] EXT4-fs (loop5): This should not happen!! Data will be lost [ 173.973932][T18269] [ 174.012373][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.145263][T18312] IPVS: Error connecting to the multicast addr [ 174.154155][T18313] loop6: detected capacity change from 0 to 1024 [ 174.171860][T18313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.173055][T18317] loop4: detected capacity change from 0 to 512 [ 174.185027][T18313] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.204046][T18317] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.209666][T18313] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5966: bg 0: block 393: padding at end of block bitmap is not set [ 174.225172][T18313] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 174.237756][T18313] EXT4-fs (loop6): This should not happen!! Data will be lost [ 174.237756][T18313] [ 174.242272][T18317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5968'. [ 174.248072][T18316] loop5: detected capacity change from 0 to 512 [ 174.263115][T18316] EXT4-fs: Ignoring removed bh option [ 174.268779][T18316] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 174.279809][T18105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.298721][T18316] EXT4-fs (loop5): 1 truncate cleaned up [ 174.307555][T18316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.321255][T18324] loop6: detected capacity change from 0 to 512 [ 174.341936][T18324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.354613][T18324] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.366672][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.389941][T18105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.414620][T18332] loop6: detected capacity change from 0 to 164 [ 174.422216][T18332] Unable to read rock-ridge attributes [ 174.430202][T18332] Unable to read rock-ridge attributes [ 174.453799][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 174.453816][ T29] audit: type=1400 audit(2000033366.717:6083): avc: denied { bind } for pid=18335 comm="syz.5.5975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.495852][T18338] netlink: 'syz.6.5976': attribute type 10 has an invalid length. [ 174.504237][T18338] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.511434][T18338] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.578828][T18338] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.586011][T18338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.593411][T18338] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.600490][T18338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.634696][T18338] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 174.815716][T18357] loop6: detected capacity change from 0 to 2048 [ 174.870899][T18357] Alternate GPT is invalid, using primary GPT. [ 174.877355][T18357] loop6: p1 p2 p3 [ 175.060030][T18394] netlink: 'syz.4.6004': attribute type 3 has an invalid length. [ 175.095216][ T29] audit: type=1400 audit(2000033367.357:6084): avc: denied { listen } for pid=18400 comm="syz.4.6008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.134458][ T29] audit: type=1400 audit(2000033367.387:6085): avc: denied { write } for pid=18400 comm="syz.4.6008" path="socket:[49714]" dev="sockfs" ino=49714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.204033][T18409] loop4: detected capacity change from 0 to 2048 [ 175.256712][ T29] audit: type=1326 audit(2000033367.507:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18414 comm="syz.6.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d584cde9 code=0x7ffc0000 [ 175.280512][ T29] audit: type=1326 audit(2000033367.507:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18414 comm="syz.6.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f86d584cde9 code=0x7ffc0000 [ 175.304099][ T29] audit: type=1326 audit(2000033367.507:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18414 comm="syz.6.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d584cde9 code=0x7ffc0000 [ 175.327637][ T29] audit: type=1326 audit(2000033367.507:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18414 comm="syz.6.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f86d584cde9 code=0x7ffc0000 [ 175.351251][ T29] audit: type=1326 audit(2000033367.507:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18414 comm="syz.6.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d584cde9 code=0x7ffc0000 [ 175.471639][ T29] audit: type=1326 audit(2000033367.737:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18431 comm="syz.1.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 175.495220][ T29] audit: type=1326 audit(2000033367.737:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18431 comm="syz.1.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd64dfcde9 code=0x7ffc0000 [ 175.592169][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888118148a00: rx timeout, send abort [ 175.600522][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888118148800: rx timeout, send abort [ 175.608844][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888118148a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 175.623255][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888118148800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 175.732583][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6032'. [ 175.818732][T18472] loop4: detected capacity change from 0 to 1024 [ 175.846423][T18476] loop4: detected capacity change from 0 to 512 [ 175.901367][T18483] netlink: 'syz.5.6043': attribute type 10 has an invalid length. [ 175.995785][T18499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6051'. [ 176.004911][T18499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6051'. [ 176.032976][T18501] loop3: detected capacity change from 0 to 164 [ 176.041340][T18501] Unable to read rock-ridge attributes [ 176.046089][T18503] loop5: detected capacity change from 0 to 512 [ 176.053912][T18501] Unable to read rock-ridge attributes [ 176.054633][T18503] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.066435][T18503] EXT4-fs: Ignoring removed i_version option [ 176.075998][T18503] EXT4-fs (loop5): 1 orphan inode deleted [ 176.082368][T18503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.104269][T18503] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.104299][T18508] loop3: detected capacity change from 0 to 512 [ 176.152817][T18508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.156516][T18516] loop4: detected capacity change from 0 to 128 [ 176.171625][T18508] ext4 filesystem being mounted at /1169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.199707][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.234778][T18522] loop3: detected capacity change from 0 to 2048 [ 176.290669][T18522] Alternate GPT is invalid, using primary GPT. [ 176.297020][T18522] loop3: p1 p2 p3 [ 176.343621][T18539] loop4: detected capacity change from 0 to 512 [ 176.350365][T18539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.357152][T18539] EXT4-fs: Ignoring removed i_version option [ 176.379479][ T51] batman_adv: batadv1: IGMP Querier disappeared - multicast optimizations disabled [ 176.392255][T18541] SELinux: security_context_str_to_sid (•) failed with errno=-22 [ 176.496620][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6075'. [ 176.682278][T18586] loop3: detected capacity change from 0 to 256 [ 176.802584][T18611] loop3: detected capacity change from 0 to 512 [ 176.804618][T18610] loop4: detected capacity change from 0 to 1024 [ 176.809223][T18611] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.822995][T18611] EXT4-fs: Ignoring removed i_version option [ 176.833056][T18611] EXT4-fs (loop3): 1 orphan inode deleted [ 176.843609][T18611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.877936][T18611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.893039][T18621] ipvlan2: entered promiscuous mode [ 176.898290][T18621] ipvlan2: entered allmulticast mode [ 176.903808][T18621] bridge0: entered allmulticast mode [ 176.910699][T18621] bridge0: port 1(ipvlan2) entered blocking state [ 176.917233][T18621] bridge0: port 1(ipvlan2) entered disabled state [ 176.980063][T18632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6109'. [ 177.153683][T18657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6121'. [ 177.224260][T18665] atomic_op ffff88811cca7928 conn xmit_atomic 0000000000000000 [ 177.393476][T18683] loop3: detected capacity change from 0 to 512 [ 177.411908][T18685] loop4: detected capacity change from 0 to 512 [ 177.423006][T18683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.441019][T18683] ext4 filesystem being mounted at /1191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.579058][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.694320][T18714] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6146'. [ 178.007882][T18740] loop5: detected capacity change from 0 to 1024 [ 178.165992][T18740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.206632][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.335420][T18759] ipvlan2: entered promiscuous mode [ 178.340718][T18759] ipvlan2: entered allmulticast mode [ 178.346130][T18759] bridge0: entered allmulticast mode [ 178.368692][T18759] bridge0: port 2(ipvlan2) entered blocking state [ 178.375231][T18759] bridge0: port 2(ipvlan2) entered disabled state [ 178.396502][T18761] netlink: 'syz.4.6166': attribute type 4 has an invalid length. [ 178.423975][T18761] netlink: 'syz.4.6166': attribute type 4 has an invalid length. [ 178.463677][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6168'. [ 178.536126][T18780] loop4: detected capacity change from 0 to 164 [ 178.544118][T18780] rock: directory entry would overflow storage [ 178.550418][T18780] rock: sig=0x66, size=4, remaining=3 [ 178.559763][T18780] rock: directory entry would overflow storage [ 178.565981][T18780] rock: sig=0x66, size=4, remaining=3 [ 178.580373][T18784] loop5: detected capacity change from 0 to 256 [ 178.621799][T18790] loop4: detected capacity change from 0 to 1024 [ 178.628546][T18790] EXT4-fs: Ignoring removed orlov option [ 178.634433][T18790] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.636358][T18792] bridge0: Device is already in use. [ 178.754050][T18810] SELinux: syz.3.6189 (18810) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 178.816973][T18820] loop5: detected capacity change from 0 to 512 [ 178.826504][T18820] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.6192: casefold flag without casefold feature [ 178.840784][T18820] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.6192: couldn't read orphan inode 15 (err -117) [ 178.852885][T18824] loop6: detected capacity change from 0 to 128 [ 178.871863][T18826] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 178.880701][T18826] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 178.889448][T18826] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 178.894650][T18820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.898144][T18826] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 178.920652][T18826] geneve3: entered promiscuous mode [ 178.925922][T18826] geneve3: entered allmulticast mode [ 178.932200][T18826] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 178.941392][T18826] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 178.950331][T18826] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 178.959204][T18826] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 178.986244][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.548782][T18860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6210'. [ 179.592032][T18865] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 179.624839][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 179.624857][ T29] audit: type=1400 audit(2000033371.887:6196): avc: denied { read } for pid=18868 comm="syz.3.6214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.695553][ T29] audit: type=1400 audit(2000033371.957:6197): avc: denied { read } for pid=18874 comm="syz.6.6216" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.718830][ T29] audit: type=1400 audit(2000033371.957:6198): avc: denied { open } for pid=18874 comm="syz.6.6216" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.728069][T18877] netlink: 'syz.6.6217': attribute type 4 has an invalid length. [ 179.742556][ T29] audit: type=1400 audit(2000033371.957:6199): avc: denied { ioctl } for pid=18874 comm="syz.6.6216" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.786748][T18877] netlink: 'syz.6.6217': attribute type 4 has an invalid length. [ 179.877763][T18883] x_tables: duplicate underflow at hook 1 [ 179.977807][T18895] geneve2: entered promiscuous mode [ 179.983230][T18895] geneve2: entered allmulticast mode [ 180.001050][T18900] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 180.030658][ T29] audit: type=1326 audit(2000033372.287:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3192d1cde9 code=0x7ffc0000 [ 180.054247][ T29] audit: type=1326 audit(2000033372.287:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3192d1cde9 code=0x7ffc0000 [ 180.077823][ T29] audit: type=1326 audit(2000033372.287:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3192d1cde9 code=0x7ffc0000 [ 180.101694][ T29] audit: type=1326 audit(2000033372.297:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3192d1cde9 code=0x7ffc0000 [ 180.125606][ T29] audit: type=1326 audit(2000033372.297:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3192d1cde9 code=0x7ffc0000 [ 180.161962][ T29] audit: type=1326 audit(2000033372.297:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3192d1cde9 code=0x7ffc0000 [ 180.314937][T18924] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.396558][T18934] loop6: detected capacity change from 0 to 256 [ 180.403206][T18934] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 180.489734][T18939] loop6: detected capacity change from 0 to 256 [ 180.811687][T18967] __nla_validate_parse: 2 callbacks suppressed [ 180.811701][T18967] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6261'. [ 181.071791][T18979] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6267'. [ 181.243009][T19003] loop6: detected capacity change from 0 to 1024 [ 181.254050][T19003] EXT4-fs: Ignoring removed i_version option [ 181.260403][T19003] EXT4-fs: Ignoring removed oldalloc option [ 181.267521][T19003] EXT4-fs: Ignoring removed bh option [ 181.284421][T19003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.303775][T19003] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.6279: Allocating blocks 481-513 which overlap fs metadata [ 181.328758][T19003] EXT4-fs (loop6): Remounting filesystem read-only [ 181.339968][T19003] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 181.359206][T19003] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 181.368502][T19003] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 181.390108][T18105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.429095][T19023] loop5: detected capacity change from 0 to 4096 [ 181.437779][T19023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.605262][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.832566][T19073] loop3: detected capacity change from 0 to 2048 [ 181.880727][T19073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.903517][T19073] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6308: bg 0: block 234: padding at end of block bitmap is not set [ 181.935469][T19073] EXT4-fs (loop3): Remounting filesystem read-only [ 181.965726][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.104006][T19106] Cannot find add_set index 0 as target [ 182.159868][T19115] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6329'. [ 182.181531][T19112] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 182.268162][T19135] atomic_op ffff8881175c8d28 conn xmit_atomic 0000000000000000 [ 182.293202][T19138] loop3: detected capacity change from 0 to 128 [ 182.310575][T19138] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 182.329893][T19138] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.347467][T19138] ext2 filesystem being mounted at /1237/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 182.500521][T19119] chnl_net:caif_netlink_parms(): no params data found [ 182.528589][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.627403][T19119] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.634634][T19119] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.643612][T19119] bridge_slave_0: entered allmulticast mode [ 182.650211][T19119] bridge_slave_0: entered promiscuous mode [ 182.657193][T19119] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.664464][T19119] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.717172][T19119] bridge_slave_1: entered allmulticast mode [ 182.731740][T19119] bridge_slave_1: entered promiscuous mode [ 182.777932][T19119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.813265][T19119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.847379][T19119] team0: Port device team_slave_0 added [ 182.859877][T19119] team0: Port device team_slave_1 added [ 182.892304][T19119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.899463][T19119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.925491][T19119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.937085][T19119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.944101][T19119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.970086][T19119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.012615][T19119] hsr_slave_0: entered promiscuous mode [ 183.018735][T19119] hsr_slave_1: entered promiscuous mode [ 183.024817][T19119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.034937][T19119] Cannot create hsr debugfs directory [ 183.145411][T19119] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 183.160894][T19119] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 183.192231][T19119] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 183.206573][T19119] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 183.313201][T19119] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.320333][T19119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.327707][T19119] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.334830][T19119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.396109][T19119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.408887][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.427317][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.444916][T19204] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 183.444916][T19204] program +}[@ not setting count and/or reply_len properly [ 183.491095][T19119] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.515354][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.522475][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.538907][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.546022][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.605319][T19119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.643230][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.669399][T19119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.703040][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.705608][T19229] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6368'. [ 183.726162][T19229] (unnamed net_device) (uninitialized): option ad_select: invalid value (110) [ 183.779033][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.857368][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.920437][T19212] chnl_net:caif_netlink_parms(): no params data found [ 183.938804][T19119] veth0_vlan: entered promiscuous mode [ 184.004391][ T36] bridge_slave_1: left allmulticast mode [ 184.010201][ T36] bridge_slave_1: left promiscuous mode [ 184.015839][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.023686][ T36] bridge_slave_0: left allmulticast mode [ 184.029394][ T36] bridge_slave_0: left promiscuous mode [ 184.035068][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.085228][ T36] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 184.142035][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.151958][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.161605][ T36] bond0 (unregistering): Released all slaves [ 184.170133][ T36] bond1 (unregistering): Released all slaves [ 184.183195][T19119] veth1_vlan: entered promiscuous mode [ 184.192596][T19212] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.199860][T19212] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.213991][T19212] bridge_slave_0: entered allmulticast mode [ 184.222276][T19212] bridge_slave_0: entered promiscuous mode [ 184.231759][T19212] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.238982][T19212] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.258774][T19212] bridge_slave_1: entered allmulticast mode [ 184.274062][T19212] bridge_slave_1: entered promiscuous mode [ 184.299379][ T36] hsr_slave_0: left promiscuous mode [ 184.305519][ T36] hsr_slave_1: left promiscuous mode [ 184.315640][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.323182][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.331078][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.338592][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.349023][ T36] veth1_macvtap: left promiscuous mode [ 184.354699][ T36] veth0_macvtap: left promiscuous mode [ 184.361797][ T36] veth1_vlan: left promiscuous mode [ 184.367121][ T36] veth0_vlan: left promiscuous mode [ 184.459982][ T36] team0 (unregistering): Port device team_slave_1 removed [ 184.471909][ T36] team0 (unregistering): Port device team_slave_0 removed [ 184.480282][T19294] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6392'. [ 184.511763][T19294] gretap0: entered promiscuous mode [ 184.530719][T19294] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6392'. [ 184.544364][T19212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.555340][T19212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.567084][T19294] 0ªX¹¦D: renamed from gretap0 [ 184.573235][T19294] 0ªX¹¦D: left promiscuous mode [ 184.578129][T19294] 0ªX¹¦D: entered allmulticast mode [ 184.585005][T19294] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 184.610993][T19119] veth0_macvtap: entered promiscuous mode [ 184.624583][T19119] veth1_macvtap: entered promiscuous mode [ 184.632081][T19212] team0: Port device team_slave_0 added [ 184.644566][T19119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.656260][T19212] team0: Port device team_slave_1 added [ 184.677415][T19119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.686545][T19212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.693594][T19212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.719591][T19212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.731839][T19212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.738813][T19212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.764895][T19212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.780345][T19119] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.789094][T19119] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.798070][T19119] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.806838][T19119] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.841107][T19212] hsr_slave_0: entered promiscuous mode [ 184.847435][T19212] hsr_slave_1: entered promiscuous mode [ 184.855085][T19212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.865583][T19212] Cannot create hsr debugfs directory [ 184.979155][T19212] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 185.008631][T19212] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 185.018206][T19326] syzkaller1: entered promiscuous mode [ 185.023823][T19326] syzkaller1: entered allmulticast mode [ 185.034741][T19212] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 185.049418][T19212] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 185.091916][T19212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.107637][T19212] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.122216][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.129351][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.140662][T19337] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6409'. [ 185.153441][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.160686][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.205104][T19341] loop3: detected capacity change from 0 to 512 [ 185.225700][T19341] EXT4-fs (loop3): too many log groups per flexible block group [ 185.233551][T19341] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 185.244652][T19212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.253648][T19341] EXT4-fs (loop3): mount failed [ 185.305246][ T1853] nci: nci_ntf_packet: unknown ntf opcode 0xb [ 185.400624][T19376] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 185.409573][T19376] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 185.418440][T19376] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 185.420786][T19379] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6419'. [ 185.427439][T19376] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 185.447064][T19376] geneve2: entered promiscuous mode [ 185.452340][T19376] geneve2: entered allmulticast mode [ 185.475831][T19212] veth0_vlan: entered promiscuous mode [ 185.490762][T19212] veth1_vlan: entered promiscuous mode [ 185.498415][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 185.498427][ T29] audit: type=1400 audit(2000066144.759:6306): avc: denied { bind } for pid=19382 comm="syz.3.6421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.509120][T19212] veth0_macvtap: entered promiscuous mode [ 185.526368][T19383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6421'. [ 185.538600][T19212] veth1_macvtap: entered promiscuous mode [ 185.560369][T19212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.571073][T19212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.584681][T19212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.595841][T19212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.606623][T19212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.618695][T19212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.628917][T19212] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.637898][T19212] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.646769][T19212] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.655546][T19212] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.779023][T19409] loop8: detected capacity change from 0 to 128 [ 185.815107][T19415] Cannot find del_set index 4 as target [ 185.841235][T19419] loop8: detected capacity change from 0 to 512 [ 185.847881][T19419] EXT4-fs: Ignoring removed bh option [ 185.853848][T19419] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.873298][ T29] audit: type=1400 audit(2000066145.139:6307): avc: denied { accept } for pid=19416 comm="syz.3.6435" lport=46182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.891169][T19419] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 185.904425][T19419] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 185.913959][T19419] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.6436: Failed to acquire dquot type 0 [ 185.925637][T19419] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 185.940523][T19419] EXT4-fs (loop8): 1 truncate cleaned up [ 185.946501][T19419] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.963712][T19419] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.6436: corrupted xattr block 19: bad e_name length [ 185.977391][T19419] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 185.986972][T19419] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.6436: corrupted xattr block 19: bad e_name length [ 186.001130][T19419] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 186.026101][T19212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.118591][T19435] loop5: detected capacity change from 0 to 512 [ 186.130367][T19435] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 186.151425][T19435] EXT4-fs (loop5): 1 truncate cleaned up [ 186.165498][T19435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.197826][ T29] audit: type=1400 audit(2000066145.459:6308): avc: denied { remove_name } for pid=19433 comm="syz.5.6441" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.220716][ T29] audit: type=1400 audit(2000066145.459:6309): avc: denied { unlink } for pid=19433 comm="syz.5.6441" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.256172][ T29] audit: type=1400 audit(2000066145.519:6310): avc: denied { watch watch_reads } for pid=19441 comm="syz.7.6444" path="/proc/29" dev="proc" ino=52865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 186.298930][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.363727][ T29] audit: type=1326 audit(2000066145.629:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19447 comm="syz.5.6445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbed49bcde9 code=0x0 [ 186.559497][ T29] audit: type=1326 audit(2000066145.819:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19459 comm="syz.7.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5e6fcde9 code=0x7ffc0000 [ 186.583217][ T29] audit: type=1326 audit(2000066145.819:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19459 comm="syz.7.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5e6fcde9 code=0x7ffc0000 [ 186.774718][T19481] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19481 comm=syz.3.6463 [ 186.946206][T19501] netlink: 'syz.1.6473': attribute type 1 has an invalid length. [ 186.962955][T19497] bond1 (unregistering): Released all slaves [ 187.260561][T19544] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6492'. [ 187.269936][T19544] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6492'. [ 187.297521][T19549] Cannot find set identified by id 0 to match [ 187.528863][T19566] loop5: detected capacity change from 0 to 8192 [ 187.748640][T19578] Cannot find set identified by id 0 to match [ 187.781977][T19580] netlink: 'syz.5.6508': attribute type 1 has an invalid length. [ 187.789785][T19580] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6508'. [ 187.825152][T19584] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 187.863348][T19588] 9pnet_fd: Insufficient options for proto=fd [ 187.936158][T19598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6516'. [ 187.985634][T19603] sctp: [Deprecated]: syz.1.6519 (pid 19603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.985634][T19603] Use struct sctp_sack_info instead [ 188.403349][T19646] loop3: detected capacity change from 0 to 128 [ 188.430726][T19652] netlink: 'syz.8.6542': attribute type 10 has an invalid length. [ 188.438785][T19652] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6542'. [ 188.453652][T19652] team0: Port device geneve1 added [ 188.735401][T19686] loop3: detected capacity change from 0 to 128 [ 188.742300][T19686] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 188.753554][T19686] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 188.761512][T19686] FAT-fs (loop3): Filesystem has been set read-only [ 188.768298][T19686] syz.3.6556: attempt to access beyond end of device [ 188.768298][T19686] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 188.783513][T19686] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 188.791449][T19686] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 188.799757][T19686] syz.3.6556: attempt to access beyond end of device [ 188.799757][T19686] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 188.813461][T19686] syz.3.6556: attempt to access beyond end of device [ 188.813461][T19686] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 188.845925][T19692] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6558'. [ 188.874154][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6561'. [ 188.911499][T19703] loop3: detected capacity change from 0 to 512 [ 188.918049][T19703] EXT4-fs: Ignoring removed orlov option [ 188.964331][T19703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.977393][T19703] ext4 filesystem being mounted at /1292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.024528][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.274502][T19734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6578'. [ 189.285275][T19734] IPVS: Error joining to the multicast group [ 189.330279][T19738] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6580'. [ 189.358315][T19742] SELinux: policydb version 0 does not match my version range 15-34 [ 189.367831][T19742] SELinux: failed to load policy [ 189.394412][T19745] futex_wake_op: syz.1.6584 tries to shift op by -1; fix this program [ 189.507040][T19761] loop5: detected capacity change from 0 to 512 [ 189.521169][T19761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.534282][T19761] ext4 filesystem being mounted at /1406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.552133][T19761] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #19: comm syz.5.6591: corrupted inode contents [ 189.564496][T19761] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #19: comm syz.5.6591: mark_inode_dirty error [ 189.586181][T19761] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #19: comm syz.5.6591: corrupted inode contents [ 189.601187][T19761] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3006: inode #19: comm syz.5.6591: mark_inode_dirty error [ 189.613881][T19761] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3009: inode #19: comm syz.5.6591: mark inode dirty (error -117) [ 189.628446][T19761] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 189.642213][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6594'. [ 189.665890][T19771] ================================================================== [ 189.674054][T19771] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 189.681974][T19771] [ 189.684322][T19771] write to 0xffff8881385c1c60 of 8 bytes by task 19772 on cpu 0: [ 189.692065][T19771] cpu_map_kthread_run+0x4a1/0x11e0 [ 189.697275][T19771] kthread+0x4ae/0x520 [ 189.701357][T19771] ret_from_fork+0x4b/0x60 [ 189.705790][T19771] ret_from_fork_asm+0x1a/0x30 [ 189.710741][T19771] [ 189.713065][T19771] read to 0xffff8881385c1c60 of 8 bytes by task 19771 on cpu 1: [ 189.720695][T19771] bq_flush_to_queue+0x125/0x360 [ 189.725650][T19771] cpu_map_enqueue+0x19e/0x1b0 [ 189.730420][T19771] xdp_do_redirect_frame+0x2a4/0x6b0 [ 189.735716][T19771] bpf_test_run_xdp_live+0x8c7/0x1040 [ 189.741103][T19771] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 189.746572][T19771] bpf_prog_test_run+0x20f/0x3a0 [ 189.751522][T19771] __sys_bpf+0x400/0x7a0 [ 189.756244][T19771] __x64_sys_bpf+0x43/0x50 [ 189.760672][T19771] x64_sys_call+0x2914/0x2dc0 [ 189.765364][T19771] do_syscall_64+0xc9/0x1c0 [ 189.769883][T19771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.775792][T19771] [ 189.778121][T19771] value changed: 0xffff888108fe2070 -> 0x0000000000000000 [ 189.785330][T19771] [ 189.787654][T19771] Reported by Kernel Concurrency Sanitizer on: [ 189.793833][T19771] CPU: 1 UID: 0 PID: 19771 Comm: syz.1.6595 Tainted: G W 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 189.806085][T19771] Tainted: [W]=WARN [ 189.809898][T19771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 189.819960][T19771] ================================================================== [ 189.836917][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.