last executing test programs: 3m54.67482866s ago: executing program 32 (id=487): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) ioctl$TCSETSW2(r0, 0x5453, 0x0) 3m47.111045655s ago: executing program 3 (id=849): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x46) 3m47.090916207s ago: executing program 3 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') rmdir(&(0x7f0000000000)='./file0/file0\x00') 3m47.011557103s ago: executing program 3 (id=854): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x3, 0xb700a5c9483ffa75}, &(0x7f0000000180)=0xc) 3m46.14772248s ago: executing program 3 (id=881): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3m46.054869667s ago: executing program 3 (id=886): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t') 3m45.649627768s ago: executing program 3 (id=895): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000048, &(0x7f0000000080)={[{@acl}, {@nodioread_nolock}]}, 0x4, 0x509, &(0x7f0000000540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c60ebab1c176bfdbb4ddffffff7f02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc28d0072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd5adb8e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39ddbb1edb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d01006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a634b93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff6f16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c64ac4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b059bc295aa0e38ff07edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939db52812e07795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b59895e0309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb284fcfde9015769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a10100000000000000c9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443a6a64c7803760880af23fb3f430a5d11fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670e31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630ed5a0c2261bc2d5de6ee174534b8dfc0432ab6bbcf296d36807544aa7c3d3301ae227b713a371414c98695e559f9cbf6b046184064a5f2424cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79aa2832c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574bda31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167a9f006685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca67905e877893646d185a75582f866785af6b0149e336c31fb177e3e85f4c60cbbde4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63db66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce985a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90a6e865225f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853b8b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3045b9c790984c6fb65fd7887bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212dedd245b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e000000000000000000000087b97a200609c77e0000000000000000d3a54ccd0900a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09ac0090609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699f61acdc8e36010d76093ddd227d9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89732c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eebf33a260a9b2647726795617a9d1700000000000000f65d0eb4b7b077f1b4d3c5254753ddc9d5861fca4ec4205af1c89fa638b00342ff5f5994fc1f042d1b4a0000000000000070035394b646baa4ba26f70c2c2fe2bc501ecc19f538fdeb7485b73a72a3cba6c50721ce39a0dba3757fcfdb20f40fc9f7fb5d0b6100000000000000005bc7aff2c5b266f8276c6a6eebeae26b7410b7b506f7518ef70721f4315b04f1c35d5c5ab58d6d78682c21821d8e0648feddf5734daba6e219ddc4708f0de8032515fdd2825334e43786d58caeaaee3bdfcfc7e27d90f26de71d00417b23910b4f2c06d21313a73fdb069482241e09d49d37d91a43a08812df97700683e828735af95018960271e49d61fb985e088d079ee30b347952dc5ba725047cef9b0065fed61cf2a4336bd8b3dea27ab071fc2cea404b8d39b798aef5739327b0f02add98cb77ad6c6fc582798a8e5b0e7baf898efaff86d859932b903881253c3457a86fb5ff849bb51959d3d16cba8e59bc854be0509d12d800000000000000000000000000f317892775411b258f8065c160e82caabcc7b2dd9bd88d2974d465ca94431d92f2240fa8e11aec7ee5c726b2c32b749ca10490eab4194626c58ec84f9fe93551027e829eed"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 3m45.606256852s ago: executing program 33 (id=895): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000048, &(0x7f0000000080)={[{@acl}, {@nodioread_nolock}]}, 0x4, 0x509, &(0x7f0000000540)="$eJzs3c9vU0ceAPCvnZiEEDDscthd7S4syy67Qjg/gAhxWbhsVSGkqqinHiBNTBTFxlEcVJJyCMfekUDqqf0TeuuhEqceeuutvfVCD5Voi1qRSj24es8mMYlDUvLDTfz5SC/vzYzj70zMzPgNcSaAjnU8IhYiYl9E3IiIfCM/0zjiUv1IHvfs6d2xxad3xzJRq137PpOWJ3nR9D2JA43n7I2IN1+LeCezOm51bn5qtFQqzjTSA7Pl6YHq3PyZyWwjZ3hkaGTwwtnzw1vW1mPlj5/8f/LKW59+8rfHXyz8972kWv3vH0zLmtuxlepNz0V/U153RFzZjmBt0t3498Puk/S2P0TEibT/56MrfTUBgL2sVstHLd+cBgD2uuT+vz8y2UJjLaA/stlCob6GdzT6sqVKdfZ0vnL71nika1iHI5e9OVkqDjbWCg9HLpOkh9Lr5fTwC+n7xbMRcSQi7vfsT8sLY5XSeDvf+ABABzuwYv7/qac+/wMAe1xvuysAAOw48z8AdB7zPwB0nt8w//t0IADsEe7/AaDzmP8BoPOsO//f25l6AAA74o2rV5Ojtlj/+9fP/1L3mfFidapQvj1WGKvMTBcmKpWJUrEwVqut93ylSmV66NxSsjo3f71cuX1r9vpkeXSieL2Y287GAAAbcuTYo6+SSX/h4v70iKa9HMzVsLdl210BoG262l0BoG18ngc61wbu8S0DwB7XYoveF6z5K0IPbf4Ku9WpP1v/h061mfV/awewu73a+v//trwewM4zh0PnqtUy9vwHgA5jjR/Y1P//t+KDBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHSA/vTIZAvplh0LyddsoRBxMCIORy5zc7JUHIyIQxHxZU+uJ0kPtbvSAMAmZb/NNPb/OpU/2b+ydF/m5570HBHvfnDtwZ3R2dmZoST/h6X82YfXHiw29hNsRwsAgCaXVmel8/dw49x0I//s6d2x58dOVvHJ5frmokncxcZRL+mO7vTcG7mI6Psx00jXJe9XurYg/sK9iPjTcvvvNEXoT9dA6jufroyfxD64DfGXf/4r42dfiJ9Ny5JzLv1Z/HEL6gKd5tHl+jjZ6HtJF2v0v2wcT8+t+39vOkJtXjL+JWPJ4qrxL7s0/nWtip9J+/zxpfTLa/Lk3Gevr8qs5etl9yL+0t0qfmYpfqb1+Js7ucE2fv3Xv59Yq6z2YcSplu1/viN1OR1mB2bL0wPVufkzk+XRieJE8dbw8MjQyOCFs+eHB9I16vrXz1vF+O7i6UNrxU/a37dG/N6Xtz/+tcH2f/TLjbf/sZzMr4z/n3+2fv2PviR+Mif+e4PxR/surbl9dxJ/fI32r/P6x+kNxn/8zfz4Bh8KAOyA6tz81GipVJxZ5yJ5r7neY1zszotYiNiqJ0wXJSLi99Cujr9Ibhxf+dvbPTIB222507e7JgAAAAAAAAAAAAAAwFqqc/NTPdv8aa12txEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC969cAAAD//0uhzPc=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 3m32.0725225s ago: executing program 4 (id=1360): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x18) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0) 3m31.987158066s ago: executing program 4 (id=1363): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r1, 0x1277}, 0x8) 3m31.902094733s ago: executing program 4 (id=1366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 3m31.688349129s ago: executing program 4 (id=1372): sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x404c820) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x6, 0x2a4, &(0x7f0000002680)="$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") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x89d8acdc520a1335, 0xffffffffffffffff, 0x40, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 3m31.490677055s ago: executing program 4 (id=1375): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x80000001) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) 3m28.380233655s ago: executing program 4 (id=1473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f010005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) syz_open_dev$usbmon(&(0x7f00000005c0), 0x9d72, 0x4e902) 3m28.380103155s ago: executing program 34 (id=1473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f010005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) syz_open_dev$usbmon(&(0x7f00000005c0), 0x9d72, 0x4e902) 3m9.762568077s ago: executing program 5 (id=2248): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={r1, @in={{0x2, 0xfffe, @empty}}, 0x6, 0x7f7e}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x0, 0xd, 0xfffffffc}, 0x9c) 3m9.711102471s ago: executing program 5 (id=2265): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x2004, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 3m9.626769497s ago: executing program 5 (id=2260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000180), 0x0}, 0x20) 3m9.529986325s ago: executing program 5 (id=2270): sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x404c820) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x6, 0x2a4, &(0x7f0000002680)="$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") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x89d8acdc520a1335, 0xffffffffffffffff, 0x40, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 3m9.278827845s ago: executing program 5 (id=2280): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 3m9.004332406s ago: executing program 5 (id=2300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x10}}, 0x0) 3m9.004236676s ago: executing program 35 (id=2300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x10}}, 0x0) 2m16.150108138s ago: executing program 2 (id=4636): socket$inet6(0xa, 0x3, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, 0x0, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000000002018000180140002006e657464657673696d300000000000000800080000100000080009"], 0x44}}, 0x0) 2m16.093850623s ago: executing program 2 (id=4642): ioperm(0x5, 0x1, 0x26) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) 2m16.056872005s ago: executing program 2 (id=4643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x2000000, 0x1, 0x0, r2}}, 0x40) 2m16.014636009s ago: executing program 2 (id=4647): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0) 2m15.99472228s ago: executing program 2 (id=4650): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) 2m15.668245196s ago: executing program 2 (id=4667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0xb0}}, 0x0) 2m15.661259456s ago: executing program 36 (id=4667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0xb0}}, 0x0) 1m39.907768555s ago: executing program 7 (id=6300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x52132248838576c8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'], 0x28}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000012e00)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x10060, 0x0) 1m39.863985788s ago: executing program 7 (id=6301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000180)=@sg0, 0x0, 0x0) 1m39.772918425s ago: executing program 7 (id=6304): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r2, 0x9}, &(0x7f0000000100)=0x8) 1m39.675961093s ago: executing program 7 (id=6307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x635}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 1m39.58387106s ago: executing program 7 (id=6310): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@abort}, {@errors_remount}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000280)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(r0, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m39.354434747s ago: executing program 7 (id=6316): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfff}, 0x0) 1m23.011979113s ago: executing program 37 (id=6316): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfff}, 0x0) 1.705121148s ago: executing program 6 (id=10416): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r0, 0x8) accept4$inet(r0, &(0x7f0000000100), 0x0, 0x80800) 1.6794624s ago: executing program 6 (id=10417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffe}, 0x18) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x63a7}, 0x102, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x61801680, 0x0, 0x1f, 0x0, 0x0, 0x0) 1.396487932s ago: executing program 6 (id=10427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000002000"], 0x138) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) 1.04627647s ago: executing program 6 (id=10431): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x1, 0x1}) 975.325355ms ago: executing program 6 (id=10432): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) close(r1) 593.274814ms ago: executing program 6 (id=10440): r0 = gettid() r1 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r1, 0x0, 0x0, 0x22, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 436.304727ms ago: executing program 0 (id=10451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) ptrace$peekuser(0x3, 0x0, 0x6) 408.554729ms ago: executing program 9 (id=10454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) modify_ldt$read(0x0, &(0x7f0000000140)=""/4096, 0x1000) 393.97371ms ago: executing program 0 (id=10455): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 365.353432ms ago: executing program 9 (id=10457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x465, &(0x7f0000000d80)="$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") 343.922514ms ago: executing program 8 (id=10459): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r2}}}], 0x28}}], 0x1, 0x805) 306.414047ms ago: executing program 1 (id=10461): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 301.421677ms ago: executing program 8 (id=10462): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r1) 215.964994ms ago: executing program 9 (id=10463): unshare(0x2a020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000084000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) 203.936585ms ago: executing program 8 (id=10464): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_create1(0x0) 191.692846ms ago: executing program 1 (id=10465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) 170.303808ms ago: executing program 1 (id=10466): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 165.687978ms ago: executing program 8 (id=10467): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x3d, 0x55d, &(0x7f0000000b00)="$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") r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 140.11065ms ago: executing program 9 (id=10468): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x0, 0xa, 0x73, 0x0, 0x0, 0x8, 0x0}) 139.62388ms ago: executing program 0 (id=10478): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c00002800028014000200fc00000000000000000000000000000106000f0002000000060012004e20000008000a00", @ANYRES32], 0x60}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 110.494002ms ago: executing program 8 (id=10469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 96.389053ms ago: executing program 1 (id=10470): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x14, r1, 0x1, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 71.511975ms ago: executing program 1 (id=10471): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r2}}}], 0x28}}], 0x1, 0x805) 70.761815ms ago: executing program 9 (id=10472): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) 56.139786ms ago: executing program 0 (id=10473): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) close(0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0x4}) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 29.924678ms ago: executing program 1 (id=10474): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r1) 29.364298ms ago: executing program 0 (id=10485): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x4e, 0x1, 0x9, 0x0, 0x0, 0x5, 0xd4029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67ff, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0xfffffffffffffffb, 0x0, 0x5, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x7b}], 0x10000108}, 0x20040883) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 13.68782ms ago: executing program 9 (id=10475): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 123.92µs ago: executing program 0 (id=10476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 0s ago: executing program 8 (id=10477): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x5, 0x2, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) kernel console output (not intermixed with test programs): 15] isofs_fill_super: root inode is not a directory. Corrupted media? [ 227.947885][T21941] netlink: '\': attribute type 10 has an invalid length. [ 227.958231][T21941] team0: Device hsr_slave_0 failed to register rx_handler [ 228.234777][T21985] loop6: detected capacity change from 0 to 164 [ 228.242422][T21985] isofs_fill_super: root inode is not a directory. Corrupted media? [ 228.306140][T21997] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 228.312712][T21997] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 228.320189][T21997] vhci_hcd vhci_hcd.0: Device attached [ 228.328279][T21998] vhci_hcd: connection closed [ 228.328474][ T28] vhci_hcd: stop threads [ 228.337610][ T28] vhci_hcd: release socket [ 228.342093][ T28] vhci_hcd: disconnect device [ 228.352370][T22005] netlink: 'syz.6.8190': attribute type 11 has an invalid length. [ 228.364314][T22005] netlink: 140 bytes leftover after parsing attributes in process `syz.6.8190'. [ 228.757123][T22059] netlink: '\': attribute type 10 has an invalid length. [ 228.768318][T22063] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8218'. [ 228.852925][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 228.852940][ T29] audit: type=1400 audit(2000525443.414:7747): avc: denied { write } for pid=22072 comm="syz.9.8223" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.901626][ T29] audit: type=1400 audit(2000525443.442:7748): avc: denied { read } for pid=22072 comm="syz.9.8223" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.045128][ T29] audit: type=1400 audit(2000525443.580:7749): avc: denied { validate_trans } for pid=22092 comm="syz.8.8232" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 229.110159][ T29] audit: type=1400 audit(2000525443.645:7750): avc: denied { accept } for pid=22096 comm="syz.6.8236" laddr=::ffff:172.20.20.10 lport=60474 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.135793][ T29] audit: type=1400 audit(2000525443.645:7751): avc: denied { setopt } for pid=22096 comm="syz.6.8236" laddr=::ffff:172.20.20.10 lport=60474 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 229.162031][ T29] audit: type=1400 audit(2000525443.645:7752): avc: denied { override_creds } for pid=22094 comm="syz.8.8235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 229.191743][T22101] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8233'. [ 229.218526][ T29] audit: type=1400 audit(2000525443.718:7753): avc: denied { create } for pid=22100 comm="syz.1.8233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 229.239471][ T29] audit: type=1400 audit(2000525443.728:7754): avc: denied { write } for pid=22100 comm="syz.1.8233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 229.259791][ T29] audit: type=1400 audit(2000525443.728:7755): avc: denied { nlmsg_write } for pid=22100 comm="syz.1.8233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 229.310151][T22109] rdma_op ffff8881220b4980 conn xmit_rdma 0000000000000000 [ 229.364387][ T29] audit: type=1326 audit(2000525443.885:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.9.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629531cde9 code=0x7ffc0000 [ 229.418596][T22108] lo speed is unknown, defaulting to 1000 [ 229.462078][T22127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8248'. [ 229.466501][T22108] tunl0 speed is unknown, defaulting to 1000 [ 229.471091][T22127] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8248'. [ 230.002572][T22203] lo speed is unknown, defaulting to 1000 [ 230.066962][T22203] tunl0 speed is unknown, defaulting to 1000 [ 230.084104][T22211] loop6: detected capacity change from 0 to 512 [ 230.144157][T22211] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.8285: corrupted in-inode xattr: invalid ea_ino [ 230.161525][T22211] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.8285: couldn't read orphan inode 15 (err -117) [ 230.498787][T22262] SELinux: Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped). [ 230.731282][T22290] netlink: 'syz.6.8324': attribute type 21 has an invalid length. [ 230.742137][T22290] __nla_validate_parse: 3 callbacks suppressed [ 230.742153][T22290] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8324'. [ 230.757652][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8324'. [ 230.909641][T22304] 9pnet_fd: Insufficient options for proto=fd [ 231.001588][T22312] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.8335'. [ 231.026565][T22312] netlink: zone id is out of range [ 231.031839][T22312] netlink: zone id is out of range [ 231.038144][T22312] netlink: zone id is out of range [ 231.044233][T22312] netlink: zone id is out of range [ 231.067922][T22312] netlink: set zone limit has 8 unknown bytes [ 231.118988][T22324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8339'. [ 231.334726][T22347] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8349'. [ 231.419886][T22356] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 231.438972][T22356] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 231.471782][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.479313][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.486905][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.494406][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.502088][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.509534][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.517061][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.524835][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.532354][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.539915][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.547416][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.555012][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.562451][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.569845][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.577279][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.584788][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.592189][ T3360] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 231.601198][ T3360] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 231.758247][T22403] syzkaller0: entered promiscuous mode [ 231.763779][T22403] syzkaller0: entered allmulticast mode [ 231.773324][T22405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8377'. [ 231.809064][T22405] bond1: entered promiscuous mode [ 231.814217][T22405] bond1: entered allmulticast mode [ 231.821903][T22405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.890931][T22424] IPv6: Can't replace route, no match found [ 231.971629][T22436] syzkaller0: entered promiscuous mode [ 231.977238][T22436] syzkaller0: entered allmulticast mode [ 232.002407][T22442] netlink: 'syz.1.8396': attribute type 10 has an invalid length. [ 232.010812][T22442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.020843][T22442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.031266][T22442] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 232.088246][T22450] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8400'. [ 232.130350][T22452] bond2: entered promiscuous mode [ 232.135812][T22452] bond2: entered allmulticast mode [ 232.141503][T22452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.150318][T22456] loop8: detected capacity change from 0 to 512 [ 232.157975][T22452] bond2 (unregistering): Released all slaves [ 232.173027][T22456] EXT4-fs mount: 17 callbacks suppressed [ 232.173047][T22456] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.199623][T22456] ext4 filesystem being mounted at /1219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.238206][ T8854] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.289876][T22473] Cannot find add_set index 4 as target [ 232.444875][T22503] SELinux: policydb version 0 does not match my version range 15-34 [ 232.469863][T22503] SELinux: failed to load policy [ 232.579016][T22518] netlink: 180900 bytes leftover after parsing attributes in process `syz.9.8430'. [ 232.609671][T22518] netlink: zone id is out of range [ 232.614893][T22518] netlink: zone id is out of range [ 232.622045][T22518] netlink: zone id is out of range [ 232.627207][T22518] netlink: zone id is out of range [ 232.635760][T22518] netlink: set zone limit has 8 unknown bytes [ 232.742845][T22528] loop8: detected capacity change from 0 to 1024 [ 232.774747][T22528] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.824824][T22528] ext4 filesystem being mounted at /1229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.930954][ T8854] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.015851][T22554] binfmt_misc: register: failed to install interpreter file ./file0 [ 233.026994][T22558] netlink: 'syz.9.8450': attribute type 10 has an invalid length. [ 233.044549][T22558] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 233.203623][T22572] loop9: detected capacity change from 0 to 512 [ 233.258763][T22572] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.293668][T22572] ext4 filesystem being mounted at /797/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.362930][T14165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.398048][T22590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8464'. [ 233.971770][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8505'. [ 234.000277][T22674] bond1: entered promiscuous mode [ 234.005366][T22674] bond1: entered allmulticast mode [ 234.012632][T22674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.160050][T22706] binfmt_misc: register: failed to install interpreter file ./file0 [ 234.308834][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 234.308864][ T29] audit: type=1400 audit(2000525449.424:7975): avc: denied { open } for pid=22729 comm="syz.8.8533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 234.334570][ T29] audit: type=1400 audit(2000525449.424:7976): avc: denied { kernel } for pid=22729 comm="syz.8.8533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 234.386858][ T29] audit: type=1400 audit(2000525449.498:7977): avc: denied { mounton } for pid=22734 comm="syz.0.8535" path="/1637/file0" dev="tmpfs" ino=8431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 234.425283][ T29] audit: type=1400 audit(2000525449.535:7978): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 234.452392][T22741] xt_hashlimit: max too large, truncated to 1048576 [ 234.459332][ T29] audit: type=1400 audit(2000525449.563:7979): avc: denied { write } for pid=22735 comm="syz.6.8536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 234.478895][ T29] audit: type=1400 audit(2000525449.563:7980): avc: denied { create } for pid=22735 comm="syz.6.8536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 234.499469][ T29] audit: type=1400 audit(2000525449.563:7981): avc: denied { write } for pid=22735 comm="syz.6.8536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 234.520009][ T29] audit: type=1400 audit(2000525449.563:7982): avc: denied { read } for pid=22735 comm="syz.6.8536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 234.674379][ T29] audit: type=1400 audit(2000525449.766:7983): avc: denied { tracepoint } for pid=22756 comm="syz.0.8546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 234.702951][ T29] audit: type=1400 audit(2000525449.794:7984): avc: denied { execute } for pid=22756 comm="syz.0.8546" path="/1644/cgroup.stat" dev="tmpfs" ino=8468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 235.263317][T22833] x_tables: duplicate underflow at hook 2 [ 235.413184][T22851] loop8: detected capacity change from 0 to 736 [ 235.601858][T22881] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 235.601858][T22881] program syz.8.8606 not setting count and/or reply_len properly [ 235.625183][T22886] IPv6: syztnl0: Disabled Multicast RS [ 235.771997][T22906] Invalid ELF header magic: != ELF [ 236.561287][T22975] netlink: 'syz.9.8643': attribute type 1 has an invalid length. [ 236.569257][T22975] netlink: 'syz.9.8643': attribute type 2 has an invalid length. [ 236.622134][T22981] loop9: detected capacity change from 0 to 1024 [ 236.628870][T22981] EXT4-fs: Ignoring removed orlov option [ 236.634968][T22981] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 236.664584][T22981] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.693058][T14165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.766758][T22994] loop9: detected capacity change from 0 to 512 [ 236.779168][T22994] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #15: comm syz.9.8651: casefold flag without casefold feature [ 236.792143][T22994] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.8651: couldn't read orphan inode 15 (err -117) [ 236.805749][T22994] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.862761][T14165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.883176][T23006] IPv6: Can't replace route, no match found [ 237.046826][T23032] __nla_validate_parse: 3 callbacks suppressed [ 237.046845][T23032] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8667'. [ 237.073751][ T3373] kernel write not supported for file /snd/seq (pid: 3373 comm: kworker/0:3) [ 237.129597][T23044] netlink: 'syz.8.8675': attribute type 10 has an invalid length. [ 237.137468][T23044] netlink: 'syz.8.8675': attribute type 19 has an invalid length. [ 237.145461][T23044] netlink: 156 bytes leftover after parsing attributes in process `syz.8.8675'. [ 237.164940][T23045] netlink: 'syz.6.8676': attribute type 13 has an invalid length. [ 237.290221][T23071] sg_write: data in/out 215/14 bytes for SCSI command 0x0-- guessing data in; [ 237.290221][T23071] program syz.0.8689 not setting count and/or reply_len properly [ 237.359347][T23081] Cannot find set identified by id 0 to match [ 237.368593][T23082] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 237.368615][T23082] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 237.489474][T23100] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8703'. [ 237.498554][T23100] netlink: 264 bytes leftover after parsing attributes in process `syz.9.8703'. [ 237.514164][T23100] netlink: 72 bytes leftover after parsing attributes in process `syz.9.8703'. [ 237.558375][T23110] netlink: 'syz.8.8708': attribute type 9 has an invalid length. [ 237.660767][T23125] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8716'. [ 237.720904][T23136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.741655][T23136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.892441][T23161] IPv6: Can't replace route, no match found [ 238.005915][T23170] lo speed is unknown, defaulting to 1000 [ 238.024012][T23175] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.8740'. [ 238.066660][T23180] sg_write: data in/out 215/14 bytes for SCSI command 0x0-- guessing data in; [ 238.066660][T23180] program syz.6.8742 not setting count and/or reply_len properly [ 238.106346][T23170] tunl0 speed is unknown, defaulting to 1000 [ 238.282797][T23193] lo speed is unknown, defaulting to 1000 [ 238.318514][T23193] tunl0 speed is unknown, defaulting to 1000 [ 238.543218][T23211] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 238.550784][T23211] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 238.685789][T23222] hub 9-0:1.0: USB hub found [ 238.699103][T23222] hub 9-0:1.0: 8 ports detected [ 238.878839][T23242] sd 0:0:1:0: device reset [ 239.042740][T23248] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8772'. [ 239.061207][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8774'. [ 239.130787][T23258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8777'. [ 239.140337][T23258] netlink: 'syz.1.8777': attribute type 7 has an invalid length. [ 239.369718][T23286] netlink: 'syz.9.8791': attribute type 1 has an invalid length. [ 239.377671][T23286] netlink: 'syz.9.8791': attribute type 2 has an invalid length. [ 239.386859][T23286] netlink: 'syz.9.8791': attribute type 1 has an invalid length. [ 239.394703][T23286] netlink: 'syz.9.8791': attribute type 2 has an invalid length. [ 239.469313][T23301] netlink: 'syz.1.8799': attribute type 1 has an invalid length. [ 239.507450][T23307] SELinux: Context system_u:object_r:bin_t:s0 is not valid (left unmapped). [ 239.586394][T23319] 8021q: VLANs not supported on lo [ 239.632070][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 239.671039][T23329] SELinux: security_context_str_to_sid (ÿ) failed with errno=-22 [ 239.719395][T23341] netlink: 'syz.0.8817': attribute type 21 has an invalid length. [ 239.729232][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 239.729247][ T29] audit: type=1326 audit(2000000002.095:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23334 comm="syz.9.8815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629531cde9 code=0x7ffc0000 [ 239.831816][ T29] audit: type=1400 audit(2000000002.196:8236): avc: denied { bind } for pid=23354 comm="syz.6.8824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 239.840342][T23355] random: crng reseeded on system resumption [ 239.851622][ T29] audit: type=1400 audit(2000000002.196:8237): avc: denied { write } for pid=23354 comm="syz.6.8824" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 239.880637][ T29] audit: type=1400 audit(2000000002.196:8238): avc: denied { open } for pid=23354 comm="syz.6.8824" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 239.921916][ T29] audit: type=1326 audit(2000000002.270:8239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23354 comm="syz.6.8824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad83b3cde9 code=0x0 [ 239.977414][T23365] syzkaller1: entered promiscuous mode [ 239.983119][T23365] syzkaller1: entered allmulticast mode [ 239.993386][T23366] loop9: detected capacity change from 0 to 512 [ 240.003758][T23366] EXT4-fs: Ignoring removed orlov option [ 240.013768][T23366] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.8828: bg 0: block 248: padding at end of block bitmap is not set [ 240.028965][T23366] Quota error (device loop9): write_blk: dquota write failed [ 240.036615][T23366] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 240.052892][T23368] lo speed is unknown, defaulting to 1000 [ 240.059772][T23366] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.8828: Failed to acquire dquot type 1 [ 240.077276][T23366] EXT4-fs (loop9): 1 truncate cleaned up [ 240.083502][T23366] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.101868][T23368] tunl0 speed is unknown, defaulting to 1000 [ 240.113690][T23366] ext4 filesystem being mounted at /850/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.203464][T14165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.216018][ T6600] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 240.225099][ T6600] EXT4-fs error (device loop9): ext4_release_dquot:6950: comm kworker/u8:44: Failed to release dquot type 1 [ 240.294396][T23381] bond2: entered promiscuous mode [ 240.299500][T23381] bond2: entered allmulticast mode [ 240.305072][T23381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.315615][T23381] bond2 (unregistering): Released all slaves [ 240.356008][T23387] loop9: detected capacity change from 0 to 128 [ 240.368156][ T29] audit: type=1400 audit(2000000002.685:8240): avc: denied { mount } for pid=23386 comm="syz.9.8835" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 240.450078][ T29] audit: type=1400 audit(2000000002.759:8241): avc: denied { override_creds } for pid=23390 comm="syz.9.8837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 240.477869][T23392] tmpfs: Bad value for 'mpol' [ 241.133101][T23480] bond2: entered promiscuous mode [ 241.138227][T23480] bond2: entered allmulticast mode [ 241.161415][T23480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.180840][T23480] bridge3: port 1(bond2) entered blocking state [ 241.187333][T23480] bridge3: port 1(bond2) entered disabled state [ 241.244457][T23488] hub 9-0:1.0: USB hub found [ 241.265528][T23488] hub 9-0:1.0: 8 ports detected [ 241.573853][T23520] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 241.619136][T23525] syz.0.8896: attempt to access beyond end of device [ 241.619136][T23525] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 241.780007][T23547] hub 9-0:1.0: USB hub found [ 241.791518][T23547] hub 9-0:1.0: 8 ports detected [ 241.897088][T23563] ip6tnl1: entered promiscuous mode [ 241.902359][T23563] ip6tnl1: entered allmulticast mode [ 242.093117][T23580] hub 9-0:1.0: USB hub found [ 242.109891][T23580] hub 9-0:1.0: 8 ports detected [ 242.526833][T23624] loop9: detected capacity change from 0 to 512 [ 242.533690][T23624] EXT4-fs (loop9): Invalid default hash set in the superblock [ 242.771119][T23631] __nla_validate_parse: 9 callbacks suppressed [ 242.771137][T23631] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8947'. [ 242.845046][T23637] SELinux: policydb version 0 does not match my version range 15-34 [ 242.853881][T23637] SELinux: failed to load policy [ 242.947646][T23644] vhci_hcd: invalid port number 0 [ 243.171065][T23659] loop9: detected capacity change from 0 to 8192 [ 243.228268][T23666] netlink: 'syz.0.8965': attribute type 2 has an invalid length. [ 243.601323][T23708] block device autoloading is deprecated and will be removed. [ 243.618923][T23708] syz.8.8986: attempt to access beyond end of device [ 243.618923][T23708] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 243.648243][T23710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8987'. [ 243.755683][T23726] loop8: detected capacity change from 0 to 2048 [ 243.788376][T23726] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.816974][T23726] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 243.870332][T23726] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 243.882861][T23726] EXT4-fs (loop8): This should not happen!! Data will be lost [ 243.882861][T23726] [ 243.892557][T23726] EXT4-fs (loop8): Total free blocks count 0 [ 243.898611][T23726] EXT4-fs (loop8): Free/Dirty block details [ 243.904570][T23726] EXT4-fs (loop8): free_blocks=2415919104 [ 243.910322][T23726] EXT4-fs (loop8): dirty_blocks=48 [ 243.915523][T23726] EXT4-fs (loop8): Block reservation details [ 243.921528][T23726] EXT4-fs (loop8): i_reserved_data_blocks=3 [ 244.092103][ T8854] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.210357][T23762] loop0: detected capacity change from 0 to 164 [ 244.233158][T23762] Unable to read rock-ridge attributes [ 244.241825][T23762] Unable to read rock-ridge attributes [ 244.261060][T23762] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 244.375460][T23775] loop0: detected capacity change from 0 to 128 [ 244.571813][T23786] loop0: detected capacity change from 0 to 512 [ 244.652636][T23794] loop8: detected capacity change from 0 to 512 [ 244.680855][T23794] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 244.696379][T23786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.723335][T23794] EXT4-fs (loop8): 1 truncate cleaned up [ 244.737502][T23794] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.751259][T23786] ext4 filesystem being mounted at /1736/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.779500][T23794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.887246][T23792] lo speed is unknown, defaulting to 1000 [ 244.912243][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.957222][T23792] tunl0 speed is unknown, defaulting to 1000 [ 245.061400][T23806] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9027'. [ 245.220840][T23800] lo speed is unknown, defaulting to 1000 [ 245.312829][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 245.312844][ T29] audit: type=1400 audit(2000000007.254:8367): avc: denied { listen } for pid=23812 comm="syz.6.9031" laddr=::ffff:172.20.20.10 lport=42808 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 245.400432][T23800] tunl0 speed is unknown, defaulting to 1000 [ 245.428031][ T29] audit: type=1400 audit(2000000007.282:8368): avc: denied { accept } for pid=23812 comm="syz.6.9031" laddr=::ffff:172.20.20.10 lport=42808 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 245.454476][ T29] audit: type=1400 audit(2000000007.282:8369): avc: denied { setopt } for pid=23812 comm="syz.6.9031" laddr=::ffff:172.20.20.10 lport=42808 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 245.658298][ T29] audit: type=1400 audit(2000000007.550:8370): avc: denied { bind } for pid=23830 comm="syz.0.9038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 245.718523][T23836] netlink: 'syz.6.9040': attribute type 1 has an invalid length. [ 245.819679][T23846] pimreg: entered allmulticast mode [ 245.837016][T23846] pimreg: left allmulticast mode [ 246.018667][ T29] audit: type=1400 audit(2000000007.901:8371): avc: denied { ioctl } for pid=23874 comm="syz.0.9058" path="socket:[83454]" dev="sockfs" ino=83454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.018863][T23875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9058'. [ 246.072151][T23877] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9059'. [ 246.129809][T23885] netlink: 3 bytes leftover after parsing attributes in process `syz.6.9063'. [ 246.139212][T23885] 0ªX¹¦À: renamed from caif0 [ 246.139924][ T29] audit: type=1400 audit(2000000008.011:8372): avc: denied { mounton } for pid=23886 comm="syz.0.9064" path="/1753/file0" dev="tmpfs" ino=9028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 246.146725][T23887] block device autoloading is deprecated and will be removed. [ 246.175391][T23885] 0ªX¹¦À: entered allmulticast mode [ 246.176013][T23887] syz.0.9064: attempt to access beyond end of device [ 246.176013][T23887] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 246.180642][T23885] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 246.195273][T23887] FAT-fs (loop1): unable to read boot sector [ 246.286011][T23898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9069'. [ 246.312592][T23900] sctp: [Deprecated]: syz.0.9070 (pid 23900) Use of int in maxseg socket option. [ 246.312592][T23900] Use struct sctp_assoc_value instead [ 246.312619][ T29] audit: type=1400 audit(2000000008.178:8373): avc: denied { getopt } for pid=23899 comm="syz.0.9070" lport=52809 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 246.437863][ T29] audit: type=1401 audit(2000000008.298:8374): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 246.586215][T23920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.626975][T23922] loop9: detected capacity change from 0 to 512 [ 246.633761][T23922] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.647638][ T29] audit: type=1326 audit(2000000008.482:8375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23918 comm="syz.0.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 246.693967][ T29] audit: type=1326 audit(2000000008.510:8376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23918 comm="syz.0.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 246.735470][T23922] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.753715][T23922] Process accounting resumed [ 246.754975][T23929] loop0: detected capacity change from 0 to 512 [ 246.765331][T23929] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 246.766643][T23922] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 246.796412][T23929] EXT4-fs (loop0): 1 truncate cleaned up [ 246.806069][T23929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.830375][T14165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.849030][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.993484][T23952] random: crng reseeded on system resumption [ 247.277089][T23970] vhci_hcd: default hub control req: 800c v0000 i0000 l0 [ 247.399665][T23982] netlink: 'syz.8.9108': attribute type 13 has an invalid length. [ 247.408909][T23982] gretap0: refused to change device tx_queue_len [ 247.415759][T23982] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 247.468766][T23986] netlink: 'syz.8.9110': attribute type 3 has an invalid length. [ 247.970542][T24041] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9137'. [ 248.001544][T24030] lo speed is unknown, defaulting to 1000 [ 248.069291][T24056] rdma_op ffff888130c32980 conn xmit_rdma 0000000000000000 [ 248.137212][T24030] tunl0 speed is unknown, defaulting to 1000 [ 248.177518][T24072] sctp: [Deprecated]: syz.9.9152 (pid 24072) Use of int in max_burst socket option. [ 248.177518][T24072] Use struct sctp_assoc_value instead [ 248.257784][T24080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9156'. [ 248.267010][T24080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9156'. [ 248.460638][T24098] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.558874][T24104] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 248.578654][T24104] SELinux: failed to load policy [ 248.644848][T24111] 9pnet: Could not find request transport: t [ 249.086231][T24177] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9201'. [ 249.095334][T24177] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9201'. [ 249.215811][T24191] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9209'. [ 249.322458][T24203] loop9: detected capacity change from 0 to 512 [ 249.332948][T24203] EXT4-fs: Ignoring removed orlov option [ 249.350721][T24203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 249.365380][T24203] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 249.391626][T24203] EXT4-fs (loop9): orphan cleanup on readonly fs [ 249.406603][T24203] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.9214: bg 0: block 248: padding at end of block bitmap is not set [ 249.430394][T24203] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.9214: Failed to acquire dquot type 1 [ 249.444957][T24203] EXT4-fs (loop9): 1 truncate cleaned up [ 249.451952][T24203] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 249.479895][T24218] netlink: '+}[@': attribute type 13 has an invalid length. [ 249.495429][T14165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.507837][T24218] gretap0: refused to change device tx_queue_len [ 249.514312][T24218] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 249.671417][T24240] tmpfs: Bad value for 'mpol' [ 249.702211][T24244] 9pnet_fd: Insufficient options for proto=fd [ 249.805282][T24260] loop0: detected capacity change from 0 to 512 [ 249.806817][T24261] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9241'. [ 249.842883][T24260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.894886][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.941877][T24270] SELinux: failed to load policy [ 249.952376][T24272] loop9: detected capacity change from 0 to 256 [ 250.081879][T24290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9254'. [ 250.122758][T24300] tipc: Enabling of bearer rejected, media not registered [ 250.163163][T24306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9261'. [ 250.172329][T24306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9261'. [ 250.194190][T24306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9261'. [ 250.208688][T24310] syz.9.9264: attempt to access beyond end of device [ 250.208688][T24310] loop19: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 250.226500][T24310] EXT4-fs (loop19): unable to read superblock [ 250.233017][T24315] loop8: detected capacity change from 0 to 1024 [ 250.258750][T24315] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.320153][T24323] lo speed is unknown, defaulting to 1000 [ 250.343101][T24315] EXT4-fs (loop8): shut down requested (0) [ 250.357743][T24323] tunl0 speed is unknown, defaulting to 1000 [ 250.398123][ T8854] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.566083][T24350] loop0: detected capacity change from 0 to 256 [ 250.594943][T24350] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.758437][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 250.758454][ T29] audit: type=1400 audit(2000000012.285:8594): avc: denied { append } for pid=24377 comm="syz.0.9293" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 250.836370][ T29] audit: type=1400 audit(2000000012.313:8595): avc: denied { shutdown } for pid=24377 comm="syz.0.9293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.856732][ T29] audit: type=1400 audit(2000000012.313:8596): avc: denied { read } for pid=24377 comm="syz.0.9293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.941381][ T29] audit: type=1326 audit(2000000012.442:8597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24397 comm="syz.0.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 250.964984][ T29] audit: type=1326 audit(2000000012.442:8598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24397 comm="syz.0.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 251.033015][ T29] audit: type=1326 audit(2000000012.442:8599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24397 comm="syz.0.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 251.056706][ T29] audit: type=1326 audit(2000000012.442:8600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24397 comm="syz.0.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 251.080336][ T29] audit: type=1326 audit(2000000012.442:8601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24397 comm="syz.0.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 251.104124][ T29] audit: type=1326 audit(2000000012.442:8602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24397 comm="syz.0.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 251.127759][ T29] audit: type=1326 audit(2000000012.442:8603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24397 comm="syz.0.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 251.319154][T24441] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 251.368432][T24451] loop1: detected capacity change from 0 to 128 [ 251.406532][T24455] SELinux: Context system_u:object_r:null_device_t:s0 is not valid (left unmapped). [ 251.426441][ T6589] kworker/u8:34: attempt to access beyond end of device [ 251.426441][ T6589] loop1: rw=1, sector=129, nr_sectors = 1 limit=128 [ 251.503872][T24444] lo speed is unknown, defaulting to 1000 [ 251.565872][T24444] tunl0 speed is unknown, defaulting to 1000 [ 251.576662][T24479] UHID_CREATE from different security context by process 2929 (syz.8.9343), this is not allowed. [ 252.162867][T24562] loop8: detected capacity change from 0 to 8192 [ 252.234608][T24562] loop8: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 252.247059][T24562] loop8: p1 size 108986237 extends beyond EOD, truncated [ 252.408778][T24562] loop8: p3 size 50462720 extends beyond EOD, truncated [ 252.417055][T24562] loop8: p5 size 108986237 extends beyond EOD, truncated [ 252.424646][T24562] loop8: p6 size 108986237 extends beyond EOD, truncated [ 252.434049][T24562] loop8: p7 size 108986237 extends beyond EOD, truncated [ 252.441614][T24562] loop8: p8 size 108986237 extends beyond EOD, truncated [ 252.451135][T24562] loop8: p9 size 108986237 extends beyond EOD, truncated [ 252.458806][T24562] loop8: p10 size 108986237 extends beyond EOD, truncated [ 252.467152][T24562] loop8: p11 size 108986237 extends beyond EOD, truncated [ 252.477384][T24562] loop8: p12 size 108986237 extends beyond EOD, truncated [ 252.547414][T24562] loop8: p13 size 108986237 extends beyond EOD, truncated [ 252.555081][T24562] loop8: p14 size 108986237 extends beyond EOD, truncated [ 252.576732][T24562] loop8: p15 size 108986237 extends beyond EOD, truncated [ 252.594645][T24562] loop8: p16 size 108986237 extends beyond EOD, truncated [ 252.605259][T24562] loop8: p17 size 108986237 extends beyond EOD, truncated [ 252.642272][T24562] loop8: p18 size 108986237 extends beyond EOD, truncated [ 252.658190][T24562] loop8: p19 size 108986237 extends beyond EOD, truncated [ 252.694851][T24562] loop8: p20 size 108986237 extends beyond EOD, truncated [ 252.705216][T24562] loop8: p21 size 108986237 extends beyond EOD, truncated [ 252.713663][T24562] loop8: p22 size 108986237 extends beyond EOD, truncated [ 252.727454][T24562] loop8: p23 size 108986237 extends beyond EOD, truncated [ 252.740357][T24562] loop8: p24 size 108986237 extends beyond EOD, truncated [ 252.748227][T24562] loop8: p25 size 108986237 extends beyond EOD, truncated [ 252.756670][T24562] loop8: p26 size 108986237 extends beyond EOD, truncated [ 252.765197][T24562] loop8: p27 size 108986237 extends beyond EOD, truncated [ 252.773255][T24562] loop8: p28 size 108986237 extends beyond EOD, truncated [ 252.781032][T24562] loop8: p29 size 108986237 extends beyond EOD, truncated [ 252.813459][T24562] loop8: p30 size 108986237 extends beyond EOD, truncated [ 252.822831][T24562] loop8: p31 size 108986237 extends beyond EOD, truncated [ 252.830729][T24562] loop8: p32 size 108986237 extends beyond EOD, truncated [ 252.841012][T24562] loop8: p33 size 108986237 extends beyond EOD, truncated [ 252.849117][T24562] loop8: p34 size 108986237 extends beyond EOD, truncated [ 252.856931][T24562] loop8: p35 size 108986237 extends beyond EOD, truncated [ 252.866148][T24562] loop8: p36 size 108986237 extends beyond EOD, truncated [ 252.874404][T24562] loop8: p37 size 108986237 extends beyond EOD, truncated [ 252.883879][T24562] loop8: p38 size 108986237 extends beyond EOD, truncated [ 252.900713][T24562] loop8: p39 size 108986237 extends beyond EOD, truncated [ 252.917869][T24562] loop8: p40 size 108986237 extends beyond EOD, truncated [ 252.925942][T24562] loop8: p41 size 108986237 extends beyond EOD, truncated [ 252.933639][T24562] loop8: p42 size 108986237 extends beyond EOD, truncated [ 252.943306][T24562] loop8: p43 size 108986237 extends beyond EOD, truncated [ 252.951393][T24562] loop8: p44 size 108986237 extends beyond EOD, truncated [ 252.968466][T24562] loop8: p45 size 108986237 extends beyond EOD, truncated [ 252.985370][T24562] loop8: p46 size 108986237 extends beyond EOD, truncated [ 253.006229][T24562] loop8: p47 size 108986237 extends beyond EOD, truncated [ 253.034916][T24562] loop8: p48 size 108986237 extends beyond EOD, truncated [ 253.042344][T24617] loop0: detected capacity change from 0 to 512 [ 253.049229][T24617] EXT4-fs (loop0): Invalid default hash set in the superblock [ 253.049571][T24562] loop8: p49 size 108986237 extends beyond EOD, truncated [ 253.064425][T24562] loop8: p50 size 108986237 extends beyond EOD, truncated [ 253.072460][T24562] loop8: p51 size 108986237 extends beyond EOD, truncated [ 253.080455][T24562] loop8: p52 size 108986237 extends beyond EOD, truncated [ 253.088127][T24562] loop8: p53 size 108986237 extends beyond EOD, truncated [ 253.099709][T24621] loop9: detected capacity change from 0 to 256 [ 253.106603][T24562] loop8: p54 size 108986237 extends beyond EOD, truncated [ 253.124918][T24562] loop8: p55 size 108986237 extends beyond EOD, truncated [ 253.133723][T24562] loop8: p56 size 108986237 extends beyond EOD, truncated [ 253.151548][T24621] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 253.164118][T24562] loop8: p57 size 108986237 extends beyond EOD, truncated [ 253.171990][T24562] loop8: p58 size 108986237 extends beyond EOD, truncated [ 253.180783][T24562] loop8: p59 size 108986237 extends beyond EOD, truncated [ 253.204597][T24562] loop8: p60 size 108986237 extends beyond EOD, truncated [ 253.219049][T24562] loop8: p61 size 108986237 extends beyond EOD, truncated [ 253.228283][T24562] loop8: p62 size 108986237 extends beyond EOD, truncated [ 253.267619][T24562] loop8: p63 size 108986237 extends beyond EOD, truncated [ 253.295751][T24562] loop8: p64 size 108986237 extends beyond EOD, truncated [ 253.315981][T24562] loop8: p65 size 108986237 extends beyond EOD, truncated [ 253.329477][T24562] loop8: p66 size 108986237 extends beyond EOD, truncated [ 253.344066][T24562] loop8: p67 size 108986237 extends beyond EOD, truncated [ 253.354506][T24562] loop8: p68 size 108986237 extends beyond EOD, truncated [ 253.370812][T24562] loop8: p69 size 108986237 extends beyond EOD, truncated [ 253.386964][T24562] loop8: p70 size 108986237 extends beyond EOD, truncated [ 253.406916][T24562] loop8: p71 size 108986237 extends beyond EOD, truncated [ 253.433453][T24562] loop8: p72 size 108986237 extends beyond EOD, truncated [ 253.460278][T24562] loop8: p73 size 108986237 extends beyond EOD, truncated [ 253.486258][T24673] loop1: detected capacity change from 0 to 512 [ 253.494677][T24562] loop8: p74 size 108986237 extends beyond EOD, truncated [ 253.518378][T24562] loop8: p75 size 108986237 extends beyond EOD, truncated [ 253.529022][T24562] loop8: p76 size 108986237 extends beyond EOD, truncated [ 253.538771][T24562] loop8: p77 size 108986237 extends beyond EOD, truncated [ 253.539070][T24673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.558819][T24562] loop8: p78 size 108986237 extends beyond EOD, truncated [ 253.566329][T24673] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.577096][T24562] loop8: p79 size 108986237 extends beyond EOD, truncated [ 253.585070][T24562] loop8: p80 size 108986237 extends beyond EOD, truncated [ 253.596199][T24562] loop8: p81 size 108986237 extends beyond EOD, truncated [ 253.605606][T24562] loop8: p82 size 108986237 extends beyond EOD, truncated [ 253.614207][T24562] loop8: p83 size 108986237 extends beyond EOD, truncated [ 253.628270][T24562] loop8: p84 size 108986237 extends beyond EOD, truncated [ 253.640779][T24562] loop8: p85 size 108986237 extends beyond EOD, truncated [ 253.653162][T24562] loop8: p86 size 108986237 extends beyond EOD, truncated [ 253.660581][T18674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.669877][T24562] loop8: p87 size 108986237 extends beyond EOD, truncated [ 253.679521][T24562] loop8: p88 size 108986237 extends beyond EOD, truncated [ 253.687819][T24562] loop8: p89 size 108986237 extends beyond EOD, truncated [ 253.695984][T24562] loop8: p90 size 108986237 extends beyond EOD, truncated [ 253.715403][T24562] loop8: p91 size 108986237 extends beyond EOD, truncated [ 253.731089][T24562] loop8: p92 size 108986237 extends beyond EOD, truncated [ 253.746290][T24692] loop1: detected capacity change from 0 to 1024 [ 253.763915][T24562] loop8: p93 size 108986237 extends beyond EOD, truncated [ 253.782546][T24562] loop8: p94 size 108986237 extends beyond EOD, truncated [ 253.801054][T24562] loop8: p95 size 108986237 extends beyond EOD, truncated [ 253.804706][T24692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.827295][T24692] EXT4-fs (loop1): shut down requested (0) [ 253.834176][T24562] loop8: p96 size 108986237 extends beyond EOD, truncated [ 253.843818][T24562] loop8: p97 size 108986237 extends beyond EOD, truncated [ 253.851949][T24562] loop8: p98 size 108986237 extends beyond EOD, truncated [ 253.855444][T24687] lo speed is unknown, defaulting to 1000 [ 253.861398][T24562] loop8: p99 size 108986237 extends beyond EOD, truncated [ 253.872884][T24562] loop8: p100 size 108986237 extends beyond EOD, truncated [ 253.883370][T24562] loop8: p101 size 108986237 extends beyond EOD, truncated [ 253.891383][T24562] loop8: p102 size 108986237 extends beyond EOD, truncated [ 253.899101][T24562] loop8: p103 size 108986237 extends beyond EOD, truncated [ 253.899828][T18674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.908615][T24562] loop8: p104 size 108986237 extends beyond EOD, truncated [ 253.925414][T24562] loop8: p105 size 108986237 extends beyond EOD, truncated [ 253.933176][T24562] loop8: p106 size 108986237 extends beyond EOD, truncated [ 253.941070][T24562] loop8: p107 size 108986237 extends beyond EOD, truncated [ 253.950861][T24562] loop8: p108 size 108986237 extends beyond EOD, truncated [ 253.958630][T24562] loop8: p109 size 108986237 extends beyond EOD, truncated [ 254.000137][T24687] tunl0 speed is unknown, defaulting to 1000 [ 254.021320][T24562] loop8: p110 size 108986237 extends beyond EOD, truncated [ 254.037821][T24562] loop8: p111 size 108986237 extends beyond EOD, truncated [ 254.047972][T24562] loop8: p112 size 108986237 extends beyond EOD, truncated [ 254.114536][T24562] loop8: p113 size 108986237 extends beyond EOD, truncated [ 254.122527][T24562] loop8: p114 size 108986237 extends beyond EOD, truncated [ 254.138049][T24706] loop9: detected capacity change from 0 to 1024 [ 254.159863][T24562] loop8: p115 size 108986237 extends beyond EOD, truncated [ 254.172688][T24562] loop8: p116 size 108986237 extends beyond EOD, truncated [ 254.182254][T24706] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.194800][T24562] loop8: p117 size 108986237 extends beyond EOD, truncated [ 254.202604][T24562] loop8: p118 size 108986237 extends beyond EOD, truncated [ 254.217925][T14165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.243896][T24562] loop8: p119 size 108986237 extends beyond EOD, truncated [ 254.251832][T24562] loop8: p120 size 108986237 extends beyond EOD, truncated [ 254.272134][T24721] tipc: Enabling of bearer rejected, media not registered [ 254.283292][T24562] loop8: p121 size 108986237 extends beyond EOD, truncated [ 254.310758][T24562] loop8: p121 could not be added: -ENOMEM [ 254.316685][T24562] loop8: p122 size 108986237 extends beyond EOD, truncated [ 254.340590][T24562] loop8: p123 size 108986237 extends beyond EOD, truncated [ 254.355500][T24562] loop8: p124 size 108986237 extends beyond EOD, truncated [ 254.363631][T24562] loop8: p125 size 108986237 extends beyond EOD, truncated [ 254.374425][T24562] loop8: p126 size 108986237 extends beyond EOD, truncated [ 254.406871][T24562] loop8: p127 size 108986237 extends beyond EOD, truncated [ 254.444183][T24562] loop8: p128 size 108986237 extends beyond EOD, truncated [ 254.517444][T24733] loop1: detected capacity change from 0 to 512 [ 254.530519][T24562] loop8: p129 size 108986237 extends beyond EOD, truncated [ 254.541350][T24562] loop8: p130 size 108986237 extends beyond EOD, truncated [ 254.558337][T24562] loop8: p131 size 108986237 extends beyond EOD, truncated [ 254.558679][T24733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.592655][T24562] loop8: p132 size 108986237 extends beyond EOD, truncated [ 254.600509][T24562] loop8: p133 size 108986237 extends beyond EOD, truncated [ 254.608354][T24562] loop8: p134 size 108986237 extends beyond EOD, truncated [ 254.616038][T24562] loop8: p135 size 108986237 extends beyond EOD, truncated [ 254.623612][T24562] loop8: p136 size 108986237 extends beyond EOD, truncated [ 254.633503][T24562] loop8: p137 size 108986237 extends beyond EOD, truncated [ 254.641238][T24562] loop8: p138 size 108986237 extends beyond EOD, truncated [ 254.673001][T18674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.673069][T24562] loop8: p139 size 108986237 extends beyond EOD, truncated [ 254.689933][T24562] loop8: p140 size 108986237 extends beyond EOD, truncated [ 254.693098][T24743] lo speed is unknown, defaulting to 1000 [ 254.697766][T24562] loop8: p141 size 108986237 extends beyond EOD, truncated [ 254.710792][T24562] loop8: p142 size 108986237 extends beyond EOD, truncated [ 254.718496][T24562] loop8: p143 size 108986237 extends beyond EOD, truncated [ 254.726383][T24562] loop8: p144 size 108986237 extends beyond EOD, truncated [ 254.734197][T24562] loop8: p145 size 108986237 extends beyond EOD, truncated [ 254.743274][T24562] loop8: p146 size 108986237 extends beyond EOD, truncated [ 254.753548][T24751] tipc: Enabling of bearer rejected, media not registered [ 254.767034][T24562] loop8: p147 size 108986237 extends beyond EOD, truncated [ 254.777397][T24562] loop8: p148 size 108986237 extends beyond EOD, truncated [ 254.801021][T24562] loop8: p149 size 108986237 extends beyond EOD, truncated [ 254.808603][T24743] tunl0 speed is unknown, defaulting to 1000 [ 254.830095][T24562] loop8: p150 size 108986237 extends beyond EOD, truncated [ 254.853416][T24562] loop8: p151 size 108986237 extends beyond EOD, truncated [ 254.861314][T24562] loop8: p152 size 108986237 extends beyond EOD, truncated [ 254.875149][T24562] loop8: p153 size 108986237 extends beyond EOD, truncated [ 254.884471][T24562] loop8: p154 size 108986237 extends beyond EOD, truncated [ 254.909767][T24562] loop8: p155 size 108986237 extends beyond EOD, truncated [ 254.919783][T24761] netlink: 'syz.1.9473': attribute type 1 has an invalid length. [ 254.928117][T24562] loop8: p156 size 108986237 extends beyond EOD, truncated [ 254.944527][T24562] loop8: p157 size 108986237 extends beyond EOD, truncated [ 254.980264][T24562] loop8: p158 size 108986237 extends beyond EOD, truncated [ 255.006118][T24562] loop8: p158 could not be added: -ENOMEM [ 255.012069][T24562] loop8: p159 size 108986237 extends beyond EOD, truncated [ 255.023056][T24562] loop8: p159 could not be added: -ENOMEM [ 255.029014][T24562] loop8: p160 size 108986237 extends beyond EOD, truncated [ 255.056829][T24562] loop8: p161 size 108986237 extends beyond EOD, truncated [ 255.088051][T24562] loop8: p162 size 108986237 extends beyond EOD, truncated [ 255.122793][T24562] loop8: p163 size 108986237 extends beyond EOD, truncated [ 255.142315][T24562] loop8: p164 size 108986237 extends beyond EOD, truncated [ 255.162436][T24562] loop8: p165 size 108986237 extends beyond EOD, truncated [ 255.184701][T24562] loop8: p166 size 108986237 extends beyond EOD, truncated [ 255.231020][T24562] loop8: p167 size 108986237 extends beyond EOD, truncated [ 255.273005][T24562] loop8: p168 size 108986237 extends beyond EOD, truncated [ 255.309335][T24562] loop8: p169 size 108986237 extends beyond EOD, truncated [ 255.329289][T24791] loop9: detected capacity change from 0 to 512 [ 255.340929][T24562] loop8: p170 size 108986237 extends beyond EOD, truncated [ 255.354520][T24791] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 255.375953][T24562] loop8: p171 size 108986237 extends beyond EOD, truncated [ 255.384227][T24562] loop8: p172 size 108986237 extends beyond EOD, truncated [ 255.394583][T24562] loop8: p173 size 108986237 extends beyond EOD, truncated [ 255.428393][T24791] EXT4-fs (loop9): 1 truncate cleaned up [ 255.439455][T24791] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.468825][T24562] loop8: p174 size 108986237 extends beyond EOD, truncated [ 255.505493][T24562] loop8: p175 size 108986237 extends beyond EOD, truncated [ 255.520757][T24795] lo speed is unknown, defaulting to 1000 [ 255.538632][T24562] loop8: p176 size 108986237 extends beyond EOD, truncated [ 255.556787][T24795] tunl0 speed is unknown, defaulting to 1000 [ 255.560074][T14165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.581833][T24562] loop8: p177 size 108986237 extends beyond EOD, truncated [ 255.593306][T24562] loop8: p178 size 108986237 extends beyond EOD, truncated [ 255.613824][T24562] loop8: p179 size 108986237 extends beyond EOD, truncated [ 255.646442][T24562] loop8: p180 size 108986237 extends beyond EOD, truncated [ 255.678900][T24562] loop8: p181 size 108986237 extends beyond EOD, truncated [ 255.704457][T24562] loop8: p182 size 108986237 extends beyond EOD, truncated [ 255.728468][T24562] loop8: p183 size 108986237 extends beyond EOD, truncated [ 255.758757][T24562] loop8: p184 size 108986237 extends beyond EOD, truncated [ 255.795828][T24562] loop8: p185 size 108986237 extends beyond EOD, truncated [ 255.803887][T24562] loop8: p186 size 108986237 extends beyond EOD, truncated [ 255.838342][T24562] loop8: p187 size 108986237 extends beyond EOD, truncated [ 255.848678][T24562] loop8: p188 size 108986237 extends beyond EOD, truncated [ 255.898714][T24812] lo speed is unknown, defaulting to 1000 [ 255.904613][T24562] loop8: p189 size 108986237 extends beyond EOD, truncated [ 255.912508][T24562] loop8: p190 size 108986237 extends beyond EOD, truncated [ 255.921963][T24562] loop8: p191 size 108986237 extends beyond EOD, truncated [ 255.936632][T24562] loop8: p192 size 108986237 extends beyond EOD, truncated [ 255.946416][T24562] loop8: p193 size 108986237 extends beyond EOD, truncated [ 255.982581][T24562] loop8: p194 size 108986237 extends beyond EOD, truncated [ 255.991070][T24562] loop8: p195 size 108986237 extends beyond EOD, truncated [ 256.023290][T24562] loop8: p196 size 108986237 extends beyond EOD, truncated [ 256.031352][T24562] loop8: p197 size 108986237 extends beyond EOD, truncated [ 256.049601][T24562] loop8: p198 size 108986237 extends beyond EOD, truncated [ 256.068606][T24562] loop8: p199 size 108986237 extends beyond EOD, truncated [ 256.069022][T24812] tunl0 speed is unknown, defaulting to 1000 [ 256.090829][T24562] loop8: p200 size 108986237 extends beyond EOD, truncated [ 256.099108][T24562] loop8: p201 size 108986237 extends beyond EOD, truncated [ 256.123693][T24562] loop8: p202 size 108986237 extends beyond EOD, truncated [ 256.164591][T24562] loop8: p203 size 108986237 extends beyond EOD, truncated [ 256.183878][T24562] loop8: p204 size 108986237 extends beyond EOD, truncated [ 256.220117][T24562] loop8: p205 size 108986237 extends beyond EOD, truncated [ 256.228177][T24562] loop8: p206 size 108986237 extends beyond EOD, truncated [ 256.250397][T24562] loop8: p207 size 108986237 extends beyond EOD, truncated [ 256.284970][T24562] loop8: p208 size 108986237 extends beyond EOD, truncated [ 256.292617][T24823] tipc: Enabling of bearer rejected, media not registered [ 256.300867][T24562] loop8: p209 size 108986237 extends beyond EOD, truncated [ 256.344846][T24562] loop8: p210 size 108986237 extends beyond EOD, truncated [ 256.355786][T24562] loop8: p211 size 108986237 extends beyond EOD, truncated [ 256.389371][T24562] loop8: p212 size 108986237 extends beyond EOD, truncated [ 256.400415][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 256.400431][ T29] audit: type=1326 audit(2000000017.482:8752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24832 comm="syz.0.9507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 256.416935][T24825] lo speed is unknown, defaulting to 1000 [ 256.430499][ T29] audit: type=1326 audit(2000000017.482:8753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24832 comm="syz.0.9507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 256.437170][T24562] loop8: p213 size 108986237 extends beyond EOD, truncated [ 256.476449][T24562] loop8: p214 size 108986237 extends beyond EOD, truncated [ 256.485102][ T29] audit: type=1326 audit(2000000017.546:8754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24832 comm="syz.0.9507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 256.508794][ T29] audit: type=1326 audit(2000000017.556:8755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24832 comm="syz.0.9507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 256.532442][ T29] audit: type=1326 audit(2000000017.556:8756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24832 comm="syz.0.9507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 256.548832][T24562] loop8: p215 size 108986237 extends beyond EOD, truncated [ 256.555928][ T29] audit: type=1326 audit(2000000017.556:8757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24832 comm="syz.0.9507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 256.586855][ T29] audit: type=1326 audit(2000000017.556:8758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24832 comm="syz.0.9507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 256.597059][T24562] loop8: p216 size 108986237 extends beyond EOD, [ 256.610367][ T29] audit: type=1326 audit(2000000017.556:8759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24832 comm="syz.0.9507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 256.610475][ T29] audit: type=1326 audit(2000000017.565:8760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24832 comm="syz.0.9507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 256.616950][T24562] truncated [ 256.640411][ T29] audit: type=1326 audit(2000000017.565:8761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24832 comm="syz.0.9507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 256.702897][T24825] tunl0 speed is unknown, defaulting to 1000 [ 256.703940][T24562] loop8: p217 size 108986237 extends beyond EOD, truncated [ 256.714474][T24837] loop0: detected capacity change from 0 to 512 [ 256.717728][T24562] loop8: p218 size 108986237 extends beyond EOD, truncated [ 256.730559][T24562] loop8: p219 size 108986237 extends beyond EOD, truncated [ 256.732182][T24837] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.739332][T24562] loop8: p220 size 108986237 extends beyond EOD, truncated [ 256.755837][T24562] loop8: p221 size 108986237 extends beyond EOD, truncated [ 256.763913][T24562] loop8: p222 size 108986237 extends beyond EOD, truncated [ 256.771777][T24562] loop8: p223 size 108986237 extends beyond EOD, truncated [ 256.779437][T24562] loop8: p224 size 108986237 extends beyond EOD, truncated [ 256.787280][T24562] loop8: p225 size 108986237 extends beyond EOD, truncated [ 256.797416][T24562] loop8: p226 size 108986237 extends beyond EOD, truncated [ 256.815246][T24562] loop8: p227 size 108986237 extends beyond EOD, truncated [ 256.842981][T24837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.859170][T24562] loop8: p228 size 108986237 extends beyond EOD, truncated [ 256.867008][T24562] loop8: p229 size 108986237 extends beyond EOD, truncated [ 256.874048][T24837] Process accounting resumed [ 256.892624][T24562] loop8: p230 size 108986237 extends beyond EOD, truncated [ 256.902110][T24562] loop8: p231 size 108986237 extends beyond EOD, truncated [ 256.912419][T24837] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 256.929596][T24844] __nla_validate_parse: 12 callbacks suppressed [ 256.929614][T24844] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9512'. [ 256.958117][T24562] loop8: p232 size 108986237 extends beyond EOD, truncated [ 256.967340][T24562] loop8: p233 size 108986237 extends beyond EOD, truncated [ 256.980657][T24848] IPv6: NLM_F_CREATE should be specified when creating new route [ 256.987717][T24562] loop8: p234 size 108986237 extends beyond EOD, truncated [ 257.001711][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.011120][T24562] loop8: p235 size 108986237 extends beyond EOD, truncated [ 257.029960][T24562] loop8: p236 size 108986237 extends beyond EOD, truncated [ 257.038280][T24562] loop8: p237 size 108986237 extends beyond EOD, truncated [ 257.063443][T24562] loop8: p238 size 108986237 extends beyond EOD, truncated [ 257.072085][T24562] loop8: p239 size 108986237 extends beyond EOD, truncated [ 257.080260][T24562] loop8: p240 size 108986237 extends beyond EOD, truncated [ 257.089130][T24562] loop8: p241 size 108986237 extends beyond EOD, truncated [ 257.098076][T24854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9515'. [ 257.109373][T24562] loop8: p242 size 108986237 extends beyond EOD, truncated [ 257.137756][T24562] loop8: p243 size 108986237 extends beyond EOD, truncated [ 257.157588][T24562] loop8: p244 size 108986237 extends beyond EOD, truncated [ 257.180234][T24562] loop8: p245 size 108986237 extends beyond EOD, truncated [ 257.195789][T24562] loop8: p246 size 108986237 extends beyond EOD, truncated [ 257.220463][T24562] loop8: p247 size 108986237 extends beyond EOD, truncated [ 257.238882][T24562] loop8: p248 size 108986237 extends beyond EOD, truncated [ 257.259670][T24562] loop8: p249 size 108986237 extends beyond EOD, truncated [ 257.284401][T24562] loop8: p250 size 108986237 extends beyond EOD, truncated [ 257.308285][T24562] loop8: p251 size 108986237 extends beyond EOD, truncated [ 257.332386][T24562] loop8: p252 size 108986237 extends beyond EOD, truncated [ 257.380371][T24562] loop8: p253 size 108986237 extends beyond EOD, truncated [ 257.400215][T24562] loop8: p254 size 108986237 extends beyond EOD, truncated [ 257.422147][T24562] loop8: p255 size 108986237 extends beyond EOD, truncated [ 257.459206][T24898] netlink: 'syz.6.9537': attribute type 2 has an invalid length. [ 257.468523][T24898] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9537'. [ 257.554407][T24909] syz.6.9542: attempt to access beyond end of device [ 257.554407][T24909] loop13: rw=0, sector=0, nr_sectors = 1 limit=0 [ 257.578895][T24909] FAT-fs (loop13): unable to read boot sector [ 257.669783][T24922] loop9: detected capacity change from 0 to 256 [ 257.856093][T24953] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9560'. [ 257.867540][T24953] 0ªX¹¦À: renamed from caif0 [ 257.873870][T24959] SELinux: security_context_str_to_sid ({ÿ) failed with errno=-22 [ 257.882487][T24953] 0ªX¹¦À: entered allmulticast mode [ 257.887767][T24953] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 257.923400][T24961] loop8: detected capacity change from 0 to 2048 [ 257.933272][T24961] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 257.943166][T24961] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 257.963219][T24961] EXT4-fs (loop8): failed to initialize system zone (-117) [ 257.980961][T24961] EXT4-fs (loop8): mount failed [ 258.001157][T24965] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 258.062630][T24974] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9572'. [ 258.153820][T24989] loop1: detected capacity change from 0 to 256 [ 258.169233][T24991] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 258.187697][T24993] netlink: 3 bytes leftover after parsing attributes in process `syz.8.9580'. [ 258.197470][T24993] 0ªX¹¦À: renamed from caif0 [ 258.207600][T24993] 0ªX¹¦À: entered allmulticast mode [ 258.212892][T24993] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 258.280795][T25003] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 258.340614][T25005] lo speed is unknown, defaulting to 1000 [ 258.354658][T25016] vhci_hcd: default hub control req: 800c v0000 i0000 l0 [ 258.402099][T25022] loop0: detected capacity change from 0 to 256 [ 258.413004][T25005] tunl0 speed is unknown, defaulting to 1000 [ 258.511389][T25029] SELinux: failed to load policy [ 258.561144][T25035] loop8: detected capacity change from 0 to 256 [ 259.039988][T25084] loop9: detected capacity change from 0 to 2048 [ 259.047913][T25084] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 259.057831][T25084] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 259.072638][T25087] loop8: detected capacity change from 0 to 128 [ 259.082785][T25090] netlink: 'syz.1.9620': attribute type 13 has an invalid length. [ 259.090929][T25084] EXT4-fs (loop9): failed to initialize system zone (-117) [ 259.095811][T25087] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 259.098173][T25084] EXT4-fs (loop9): mount failed [ 259.111009][T25090] gretap0: refused to change device tx_queue_len [ 259.118403][T25087] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 259.135231][T25090] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 259.427946][T25124] netlink: 'syz.8.9649': attribute type 2 has an invalid length. [ 259.435751][T25124] netlink: 'syz.8.9649': attribute type 4 has an invalid length. [ 259.462869][T25128] loop1: detected capacity change from 0 to 2048 [ 259.491678][T25128] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 259.501618][T25128] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 259.517536][T25138] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 259.525960][T25138] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 259.534468][T25138] netlink: 2 bytes leftover after parsing attributes in process `+}[@'. [ 259.539788][T25128] EXT4-fs (loop1): failed to initialize system zone (-117) [ 259.550444][T25128] EXT4-fs (loop1): mount failed [ 259.748212][T25172] loop8: detected capacity change from 0 to 256 [ 259.786236][T25180] Process accounting resumed [ 259.829776][T25182] SELinux: syz.1.9676 (25182) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 259.863378][T25192] loop1: detected capacity change from 0 to 512 [ 259.871859][T25192] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9670: bg 0: block 35: padding at end of block bitmap is not set [ 259.886383][T25192] EXT4-fs (loop1): Remounting filesystem read-only [ 259.893032][T25192] EXT4-fs (loop1): 1 truncate cleaned up [ 259.899133][T25192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.911589][T25192] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 259.920117][T25192] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.974212][T25202] loop8: detected capacity change from 0 to 256 [ 260.093851][T25205] loop1: detected capacity change from 0 to 128 [ 260.100750][T25205] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 260.113302][T25205] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 260.237356][T25224] loop9: detected capacity change from 0 to 2048 [ 260.270767][T25224] loop9: p1 < > p4 [ 260.275734][T25224] loop9: p4 size 8388608 extends beyond EOD, truncated [ 260.460219][T25259] Process accounting resumed [ 260.572168][T25266] lo speed is unknown, defaulting to 1000 [ 260.604308][T25266] tunl0 speed is unknown, defaulting to 1000 [ 260.832364][T25284] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 260.890933][T25292] loop0: detected capacity change from 0 to 256 [ 261.078535][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.086118][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.093597][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.113191][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.120709][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.128194][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.135749][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.143297][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.150870][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.158369][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.165904][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.173361][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.180870][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.188921][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.201019][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.208537][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.216089][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.223543][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.231088][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.238613][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.245879][T25326] lo speed is unknown, defaulting to 1000 [ 261.246036][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.259355][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.266772][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.274280][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.281796][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.289257][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.296743][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.304363][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.311626][T25326] tunl0 speed is unknown, defaulting to 1000 [ 261.311822][ T3374] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 261.326013][ T3374] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 261.393772][T25337] loop1: detected capacity change from 0 to 256 [ 261.496258][T25350] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 261.736590][ T3374] IPVS: starting estimator thread 0... [ 261.830924][T25376] IPVS: using max 2112 ests per chain, 105600 per kthread [ 261.941360][T25391] lo speed is unknown, defaulting to 1000 [ 262.000569][T25391] tunl0 speed is unknown, defaulting to 1000 [ 262.023528][T25412] program syz.9.9775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.040788][T25412] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 262.063415][T25414] loop1: detected capacity change from 0 to 512 [ 262.111190][T25422] hub 9-0:1.0: USB hub found [ 262.116479][T25414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.130744][T25422] hub 9-0:1.0: 8 ports detected [ 262.148405][T25414] ext4 filesystem being mounted at /520/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.187070][T18674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.206590][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 262.206607][ T29] audit: type=1326 audit(2000000022.844:8874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25431 comm="syz.6.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad83b3cde9 code=0x7ffc0000 [ 262.306455][ T29] audit: type=1326 audit(2000000022.881:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25431 comm="syz.6.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fad83b3cde9 code=0x7ffc0000 [ 262.307597][T25444] netlink: 'syz.1.9790': attribute type 1 has an invalid length. [ 262.330133][ T29] audit: type=1326 audit(2000000022.881:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25431 comm="syz.6.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad83b3cde9 code=0x7ffc0000 [ 262.399258][T25450] bridge0: entered promiscuous mode [ 262.406603][T25450] macvlan2: entered promiscuous mode [ 262.413445][T25450] bridge0: port 5(macvlan2) entered blocking state [ 262.420243][T25450] bridge0: port 5(macvlan2) entered disabled state [ 262.429824][T25450] macvlan2: entered allmulticast mode [ 262.435241][T25450] bridge0: entered allmulticast mode [ 262.441286][T25450] macvlan2: left allmulticast mode [ 262.446512][T25450] bridge0: left allmulticast mode [ 262.454146][ T29] audit: type=1400 audit(2000000023.075:8877): avc: denied { listen } for pid=25448 comm="syz.1.9792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.466677][T25450] bridge0: left promiscuous mode [ 262.483711][ T29] audit: type=1326 audit(2000000023.075:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25455 comm="syz.6.9795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad83b3cde9 code=0x0 [ 262.524186][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.531610][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.539113][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.546682][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.554211][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.561703][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.569199][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.576601][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.584091][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.591542][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.598951][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.606396][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.613873][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.621325][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.628772][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.636375][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.643925][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.651334][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.658839][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.666317][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.673781][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.681308][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.688775][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.696329][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.703833][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.711494][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.719133][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.726562][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.734164][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.741755][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.749240][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.756663][ T3373] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 262.765221][ T3373] hid-generic 0000:0003:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 262.779943][T25464] __nla_validate_parse: 6 callbacks suppressed [ 262.780027][T25464] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9797'. [ 262.943837][ T29] audit: type=1326 audit(2000000023.527:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25493 comm="syz.0.9814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 262.967755][ T29] audit: type=1326 audit(2000000023.527:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25493 comm="syz.0.9814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 263.009449][ T29] audit: type=1326 audit(2000000023.573:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25493 comm="syz.0.9814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 263.033484][ T29] audit: type=1326 audit(2000000023.573:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25493 comm="syz.0.9814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 263.057140][ T29] audit: type=1326 audit(2000000023.573:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25493 comm="syz.0.9814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7ffc0000 [ 263.147388][T25512] loop1: detected capacity change from 0 to 2048 [ 263.166681][T25520] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9825'. [ 263.177440][T25512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.241655][T18674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.252730][T25523] lo speed is unknown, defaulting to 1000 [ 263.300499][T25523] tunl0 speed is unknown, defaulting to 1000 [ 263.488292][T25543] lo speed is unknown, defaulting to 1000 [ 263.775341][T25543] tunl0 speed is unknown, defaulting to 1000 [ 264.581748][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811d607a00: rx timeout, send abort [ 264.590034][ C1] vcan0: j1939_tp_rxtimer: 0xffff888118812c00: rx timeout, send abort [ 264.598368][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811d607a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 264.612709][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888118812c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 264.754720][T25697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9905'. [ 264.795055][T25697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9905'. [ 264.839479][T25697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9905'. [ 264.849768][T25697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9905'. [ 264.880121][T25717] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.913111][T25697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9905'. [ 264.944991][T25697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9905'. [ 265.014981][T25736] loop1: detected capacity change from 0 to 512 [ 265.039842][T25736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.069756][T25736] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.115870][T18674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.154475][T25759] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 265.163544][T25759] SELinux: failed to load policy [ 265.284689][T25778] loop1: detected capacity change from 0 to 512 [ 265.316108][T25782] netlink: 'syz.8.9947': attribute type 5 has an invalid length. [ 265.319162][T25778] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.356308][T25778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.399252][T25789] loop8: detected capacity change from 0 to 128 [ 265.406265][T25778] ext4 filesystem being mounted at /545/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.438521][T25778] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.9945: corrupted inode contents [ 265.453164][T25793] netlink: 1196 bytes leftover after parsing attributes in process `syz.8.9951'. [ 265.463093][T25778] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.9945: mark_inode_dirty error [ 265.507502][T25778] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.9945: corrupted inode contents [ 265.558393][T25778] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.9945: mark_inode_dirty error [ 265.569835][T25806] loop8: detected capacity change from 0 to 1024 [ 265.588638][T18674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.599506][T25806] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.614862][T25806] ext4 filesystem being mounted at /1522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.638594][T25806] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 265.659888][T25806] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 265.672278][T25806] EXT4-fs (loop8): This should not happen!! Data will be lost [ 265.672278][T25806] [ 265.682039][T25806] EXT4-fs (loop8): Total free blocks count 0 [ 265.688149][T25806] EXT4-fs (loop8): Free/Dirty block details [ 265.694103][T25806] EXT4-fs (loop8): free_blocks=4293918720 [ 265.699971][T25806] EXT4-fs (loop8): dirty_blocks=16 [ 265.705097][T25806] EXT4-fs (loop8): Block reservation details [ 265.711184][T25806] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 265.759893][ T8854] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.789072][T25831] SELinux: ebitmap: empty map [ 265.794093][T25831] SELinux: failed to load policy [ 265.866787][T25845] netlink: 'syz.0.9974': attribute type 1 has an invalid length. [ 265.881054][T25847] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9975'. [ 265.902428][T25847] IPVS: Error joining to the multicast group [ 265.956916][T25857] loop8: detected capacity change from 0 to 512 [ 265.965492][T25857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.974911][T25857] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 265.984388][T25857] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 265.999709][T25857] EXT4-fs (loop8): 1 truncate cleaned up [ 266.006215][T25857] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.065500][T25868] loop9: detected capacity change from 0 to 164 [ 266.119994][T25877] vhci_hcd: default hub control req: 000a v0073 i0000 l0 [ 266.291719][T25903] loop0: detected capacity change from 0 to 512 [ 266.298687][T25903] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 266.310733][T25903] EXT4-fs (loop0): 1 truncate cleaned up [ 266.318876][T25903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.370977][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.391246][T25912] loop9: detected capacity change from 0 to 512 [ 266.410243][T25912] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.10005: corrupted in-inode xattr: invalid ea_ino [ 266.423923][T25912] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.10005: couldn't read orphan inode 15 (err -117) [ 266.436690][T25912] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.454895][T25912] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.10005: bg 0: block 441: padding at end of block bitmap is not set [ 266.485334][T14165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.523227][T25920] loop9: detected capacity change from 0 to 4096 [ 266.530571][T25920] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 266.695526][T25947] sd 0:0:1:0: device reset [ 266.874820][ T8854] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.397544][T26035] loop1: detected capacity change from 0 to 164 [ 267.493730][T26041] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 267.558029][T26059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.585836][T26059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.623264][T26065] loop0: detected capacity change from 0 to 4096 [ 267.648718][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 267.648735][ T29] audit: type=1400 audit(2000000027.875:9221): avc: denied { create } for pid=26067 comm="syz.8.10078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.654657][T26065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.655518][ T29] audit: type=1400 audit(2000000027.875:9222): avc: denied { map } for pid=26067 comm="syz.8.10078" path="socket:[91286]" dev="sockfs" ino=91286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.711069][ T29] audit: type=1400 audit(2000000027.875:9223): avc: denied { read } for pid=26067 comm="syz.8.10078" path="socket:[91286]" dev="sockfs" ino=91286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.735684][ T29] audit: type=1400 audit(2000000027.949:9224): avc: denied { mount } for pid=26064 comm="syz.0.10077" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 267.773505][ T29] audit: type=1400 audit(2000000027.985:9225): avc: denied { write } for pid=26064 comm="+}[@" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.795330][ T29] audit: type=1400 audit(2000000027.985:9226): avc: denied { add_name } for pid=26064 comm="+}[@" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.808018][T26065] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #15: comm +}[@: corrupted inode contents [ 267.815738][ T29] audit: type=1400 audit(2000000027.985:9227): avc: denied { create } for pid=26064 comm="+}[@" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 267.859623][T26065] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #15: comm +}[@: mark_inode_dirty error [ 267.895293][ T29] audit: type=1400 audit(2000000028.013:9228): avc: denied { write } for pid=26064 comm="+}[@" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 267.910536][T26065] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #15: comm +}[@: corrupted inode contents [ 267.917222][ T29] audit: type=1400 audit(2000000028.013:9229): avc: denied { open } for pid=26064 comm="+}[@" path="/1976/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 267.957981][T26077] batadv1: entered promiscuous mode [ 267.976158][T26065] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm +}[@: mark_inode_dirty error [ 267.989490][T26065] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #15: comm +}[@: corrupted inode contents [ 268.023360][T26083] dvmrp0: entered allmulticast mode [ 268.030967][T26083] dvmrp0: left allmulticast mode [ 268.037140][T26065] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm +}[@: mark_inode_dirty error [ 268.051336][T26065] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #15: comm +}[@: corrupted inode contents [ 268.071753][T26065] EXT4-fs error (device loop0): ext4_truncate:4240: inode #15: comm +}[@: mark_inode_dirty error [ 268.084090][T26065] EXT4-fs error (device loop0) in ext4_setattr:5569: Corrupt filesystem [ 268.124890][ T29] audit: type=1400 audit(2000000028.299:9230): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 268.146662][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.247111][T26097] loop0: detected capacity change from 0 to 512 [ 268.269638][T26097] EXT4-fs: Ignoring removed nobh option [ 268.299290][T26097] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 268.320608][T26097] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.10092: invalid indirect mapped block 2683928664 (level 1) [ 268.361917][T26097] EXT4-fs (loop0): 1 truncate cleaned up [ 268.374720][T26097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.391693][T26108] random: crng reseeded on system resumption [ 268.402186][T26097] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.10092: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 268.483286][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.688296][T26147] geneve2: entered promiscuous mode [ 268.693642][T26147] geneve2: entered allmulticast mode [ 268.832863][T26178] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 268.847839][T26176] rtc_cmos 00:00: Alarms can be up to one day in the future [ 268.858824][T26178] SELinux: failed to load policy [ 268.897600][T26188] loop1: detected capacity change from 0 to 512 [ 268.926414][T26188] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 268.939568][T26188] EXT4-fs (loop1): invalid journal inode [ 268.945291][T26188] EXT4-fs (loop1): can't get journal size [ 269.004171][T26188] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 269.012259][T26188] System zones: 1-12, 13-13, 3840-3840 [ 269.021709][T26188] EXT4-fs (loop1): 1 truncate cleaned up [ 269.028214][T26188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.079397][T18674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.157799][T26218] __nla_validate_parse: 7 callbacks suppressed [ 269.157824][T26218] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10148'. [ 269.216869][T26222] pimreg: entered allmulticast mode [ 269.259214][T26222] pimreg: left allmulticast mode [ 269.266749][T26226] 9pnet: Could not find request transport: f [ 269.348519][T26230] lo speed is unknown, defaulting to 1000 [ 269.441302][T26230] tunl0 speed is unknown, defaulting to 1000 [ 269.738197][ T3373] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.745888][ T3373] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.753588][ T3373] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.761309][ T3373] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.768613][ T3373] rtc rtc0: __rtc_set_alarm: err=-22 [ 269.968743][T26284] netlink: 48 bytes leftover after parsing attributes in process `syz.9.10175'. [ 269.993504][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.001288][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.008708][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.020124][T26292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10181'. [ 270.021269][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.036818][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.044262][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.051826][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.059277][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.066742][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.074273][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.081772][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.089269][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.096700][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.104571][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.162384][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.169832][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.177301][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.184751][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.192271][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.199711][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.207228][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.214689][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.222218][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.229678][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.237349][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.244803][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.252242][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.259744][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.267155][ T3360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.284367][ T3360] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 270.428098][T26323] loop9: detected capacity change from 0 to 512 [ 270.464108][T26325] pimreg: entered allmulticast mode [ 270.470493][T26323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.489524][T26325] pimreg: left allmulticast mode [ 270.566786][T26323] ext4 filesystem being mounted at /1127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.582532][T26330] lo speed is unknown, defaulting to 1000 [ 270.627393][T26330] tunl0 speed is unknown, defaulting to 1000 [ 270.751347][T14165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.976256][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 270.983819][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 270.991441][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.000781][T26334] lo speed is unknown, defaulting to 1000 [ 271.047937][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.055672][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.063273][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.070810][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.078350][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.085844][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.093263][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.100734][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.108197][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.115731][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.123186][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.188209][T26334] tunl0 speed is unknown, defaulting to 1000 [ 271.312234][T26352] xt_hashlimit: max too large, truncated to 1048576 [ 271.345527][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.353026][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.360591][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.368151][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.375619][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.383140][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.390666][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.398119][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.405545][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.413088][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.420606][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.428010][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.435506][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.443069][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.450572][ T3373] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 271.578035][ T3373] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 271.732760][T26373] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10212'. [ 271.742087][T26373] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10212'. [ 271.861185][T26390] lo speed is unknown, defaulting to 1000 [ 271.926757][T26390] tunl0 speed is unknown, defaulting to 1000 [ 272.333829][T26432] loop8: detected capacity change from 0 to 2048 [ 272.333829][T26435] loop1: detected capacity change from 0 to 256 [ 272.403442][T26438] loop9: detected capacity change from 0 to 512 [ 272.422507][T26432] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.426815][T26438] EXT4-fs: Ignoring removed oldalloc option [ 272.489356][T26438] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.10245: Parent and EA inode have the same ino 15 [ 272.559325][T26438] EXT4-fs (loop9): Remounting filesystem read-only [ 272.567344][T26438] EXT4-fs warning (device loop9): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 272.588471][T26438] EXT4-fs (loop9): 1 orphan inode deleted [ 272.600064][T26438] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.616803][ T8854] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.633615][T26438] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 272.643872][T26438] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.896112][T26452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10251'. [ 272.976169][T26460] hub 9-0:1.0: USB hub found [ 272.985465][T26460] hub 9-0:1.0: 8 ports detected [ 273.105139][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 273.105156][ T29] audit: type=1400 audit(2000000032.905:9376): avc: denied { create } for pid=26477 comm="syz.1.10264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 273.106088][T26480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10263'. [ 273.119802][T26476] vhci_hcd: invalid port number 0 [ 273.146972][ T29] audit: type=1400 audit(2000000032.951:9377): avc: denied { bind } for pid=26477 comm="syz.1.10264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 273.210982][ T29] audit: type=1400 audit(2000000032.970:9378): avc: denied { setopt } for pid=26470 comm="syz.8.10258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 273.319063][T26483] lo speed is unknown, defaulting to 1000 [ 273.363698][ T29] audit: type=1400 audit(2000000033.145:9379): avc: denied { write } for pid=26494 comm="syz.6.10271" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 273.391948][ T29] audit: type=1400 audit(2000000033.145:9380): avc: denied { ioctl } for pid=26494 comm="syz.6.10271" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 273.406197][T26483] tunl0 speed is unknown, defaulting to 1000 [ 273.489577][ T29] audit: type=1326 audit(2000000033.256:9381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26502 comm="syz.0.10285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2e5d553da7 code=0x7fc00000 [ 273.513244][ T29] audit: type=1326 audit(2000000033.256:9382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26502 comm="syz.0.10285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e5d4f8fb9 code=0x7fc00000 [ 273.537148][ T29] audit: type=1326 audit(2000000033.256:9383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26502 comm="syz.0.10285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2e5d4f907f code=0x7fc00000 [ 273.560903][ T29] audit: type=1326 audit(2000000033.256:9384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26502 comm="syz.0.10285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7fc00000 [ 273.584511][ T29] audit: type=1326 audit(2000000033.256:9385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26502 comm="syz.0.10285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5d55cde9 code=0x7fc00000 [ 273.780362][T26509] lo speed is unknown, defaulting to 1000 [ 273.887590][T26509] tunl0 speed is unknown, defaulting to 1000 [ 274.250950][T26569] loop0: detected capacity change from 0 to 512 [ 274.263257][T26569] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 274.271669][T26569] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 274.281349][T26569] EXT4-fs (loop0): 1 truncate cleaned up [ 274.287577][T26569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.317250][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.509068][T26604] loop1: detected capacity change from 0 to 512 [ 274.528106][T26604] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 274.566636][T26604] EXT4-fs (loop1): 1 truncate cleaned up [ 274.573290][T26604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.629632][T18674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.835755][T26638] bridge0: entered promiscuous mode [ 274.841095][T26638] macvlan2: entered promiscuous mode [ 274.849148][T26638] bridge0: port 3(macvlan2) entered blocking state [ 274.855853][T26638] bridge0: port 3(macvlan2) entered disabled state [ 274.862964][T26638] macvlan2: entered allmulticast mode [ 274.868497][T26638] bridge0: entered allmulticast mode [ 274.874982][T26638] macvlan2: left allmulticast mode [ 274.880133][T26638] bridge0: left allmulticast mode [ 274.896893][T26638] bridge0: left promiscuous mode [ 274.920664][T26648] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10342'. [ 274.930169][T26648] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10342'. [ 274.947748][T26648] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10342'. [ 274.959941][T26648] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10342'. [ 275.013675][T26648] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10342'. [ 275.023122][T26648] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10342'. [ 275.056627][T26667] hub 9-0:1.0: USB hub found [ 275.061813][T26662] vhci_hcd: invalid port number 0 [ 275.069612][T26667] hub 9-0:1.0: 8 ports detected [ 275.296025][T26699] bridge0: entered promiscuous mode [ 275.312592][T26695] vhci_hcd: invalid port number 0 [ 275.317731][T26701] loop8: detected capacity change from 0 to 512 [ 275.317759][T26699] macvlan2: entered promiscuous mode [ 275.326762][T26701] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 275.342357][T26701] EXT4-fs (loop8): 1 truncate cleaned up [ 275.349158][T26699] bridge0: port 4(macvlan2) entered blocking state [ 275.352878][T26701] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.355839][T26699] bridge0: port 4(macvlan2) entered disabled state [ 275.375188][T26699] macvlan2: entered allmulticast mode [ 275.394120][T26699] macvlan2: left allmulticast mode [ 275.398048][T26707] netlink: 1196 bytes leftover after parsing attributes in process `syz.9.10378'. [ 275.399903][T26699] bridge0: left promiscuous mode [ 275.414740][ T8854] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.537558][T26717] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 275.566650][T26717] SELinux: failed to load policy [ 275.625730][T26727] lo speed is unknown, defaulting to 1000 [ 275.656869][T26727] tunl0 speed is unknown, defaulting to 1000 [ 275.775304][T26732] vhci_hcd: invalid port number 0 [ 275.859595][T26746] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10397'. [ 275.914782][T26752] bridge0: entered promiscuous mode [ 275.920515][T26752] macvlan2: entered promiscuous mode [ 275.927020][T26752] bridge0: port 1(macvlan2) entered blocking state [ 275.933609][T26752] bridge0: port 1(macvlan2) entered disabled state [ 275.950047][T26752] macvlan2: entered allmulticast mode [ 275.955569][T26752] bridge0: entered allmulticast mode [ 275.969423][T26752] macvlan2: left allmulticast mode [ 275.974632][T26752] bridge0: left allmulticast mode [ 275.985321][T26752] bridge0: left promiscuous mode [ 276.076299][T26762] loop9: detected capacity change from 0 to 512 [ 276.083185][T26762] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.103125][T26762] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.118646][T26762] ext4 filesystem being mounted at /1167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.143942][T26762] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.10392: corrupted inode contents [ 276.156303][T26762] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #2: comm syz.9.10392: mark_inode_dirty error [ 276.167934][T26762] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.10392: corrupted inode contents [ 276.181880][T26762] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.10392: mark_inode_dirty error [ 276.215679][T14165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.493440][T26798] bridge0: entered promiscuous mode [ 276.502718][T26798] macvlan2: entered promiscuous mode [ 276.509888][T26798] bridge0: port 4(macvlan2) entered blocking state [ 276.516518][T26798] bridge0: port 4(macvlan2) entered disabled state [ 276.523981][T26798] macvlan2: entered allmulticast mode [ 276.529402][T26798] bridge0: entered allmulticast mode [ 276.543667][T26798] macvlan2: left allmulticast mode [ 276.548844][T26798] bridge0: left allmulticast mode [ 276.556622][T26798] bridge0: left promiscuous mode [ 276.563323][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.570811][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.578325][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.585726][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.593336][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.601045][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.608626][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.616269][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.623817][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.631614][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.639116][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.647193][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.654637][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.662512][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.670183][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.677833][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.685568][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.693034][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.700657][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.708174][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.715578][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.722985][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.730436][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.737917][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.745436][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.752850][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.760315][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.767784][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.775232][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.782703][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.790117][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.797553][ T3360] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 276.806020][ T3360] hid-generic 0000:0003:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 276.841053][T26810] loop8: detected capacity change from 0 to 512 [ 276.848208][T26810] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 276.860098][T26810] EXT4-fs (loop8): 1 truncate cleaned up [ 276.866143][T26810] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.927947][ T8854] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.956359][T26816] lo speed is unknown, defaulting to 1000 [ 276.987101][T26816] tunl0 speed is unknown, defaulting to 1000 [ 277.094297][T26827] loop8: detected capacity change from 0 to 512 [ 277.112352][T26827] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 277.120662][T26827] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 277.131050][T26827] EXT4-fs (loop8): 1 truncate cleaned up [ 277.137958][T26827] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.168126][ T8854] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.182722][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.190222][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.197843][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.205349][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.212776][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.220270][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.227685][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.235083][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.242567][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.250258][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.257789][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.265221][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.272693][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.280208][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.287674][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.295240][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.302722][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.310181][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.317661][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.325083][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.332478][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.340039][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.347457][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.354883][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.362441][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.370129][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.377602][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.385018][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.392547][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.400013][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.407410][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.414860][ T3360] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 277.444096][ T3360] hid-generic 0000:0003:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 277.543875][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.551366][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.558843][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.566281][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.573794][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.581670][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.589261][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.596707][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.604348][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.611802][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.619391][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.627009][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.634538][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.641986][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.649431][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.656845][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.659829][T26852] loop8: detected capacity change from 0 to 512 [ 277.664359][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.678007][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.685465][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.692934][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.699339][T26856] loop9: detected capacity change from 0 to 512 [ 277.700321][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.707635][T26856] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 277.714009][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.714036][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.728773][T26856] EXT4-fs (loop9): 1 truncate cleaned up [ 277.731286][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.739351][T26856] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.744357][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.771670][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.779336][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.786964][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.794509][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.801942][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.809346][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.816789][ T3372] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 277.824814][ T3372] hid-generic 0000:0003:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 277.826706][T26852] EXT4-fs (loop8): 1 orphan inode deleted [ 277.843199][ T9022] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:54: Failed to release dquot type 1 [ 277.855275][T26852] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.858678][T14165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.888547][T26852] ext4 filesystem being mounted at /1620/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.911268][T26863] loop0: detected capacity change from 0 to 512 [ 277.922189][T26865] loop1: detected capacity change from 0 to 512 [ 277.933666][T26863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.947547][T26865] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 277.957486][T26863] ext4 filesystem being mounted at /2035/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.968134][T26865] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 277.981076][T26865] EXT4-fs (loop1): 1 truncate cleaned up [ 277.987261][T26865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.002217][ T8854] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.031850][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.044967][T18674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.191570][T26902] loop0: detected capacity change from 0 to 512 [ 278.211071][T26906] loop9: detected capacity change from 0 to 512 [ 278.231982][T26902] EXT4-fs (loop0): 1 orphan inode deleted [ 278.242238][T26906] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 278.242310][T26902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.263073][T26906] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 278.263273][ T6589] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:34: Failed to release dquot type 1 [ 278.273849][T26906] EXT4-fs (loop9): 1 truncate cleaned up [ 278.290547][T26906] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.303432][T26902] ext4 filesystem being mounted at /2039/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.349211][T14165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.406064][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.407574][T26928] loop8: detected capacity change from 0 to 164 [ 278.454709][T26930] vhci_hcd: default hub control req: 000a v0073 i0000 l0 [ 278.482375][T26936] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10469'. [ 278.540587][T26945] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.10485'. [ 278.572066][T26949] ================================================================== [ 278.580292][T26949] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 278.588206][T26949] [ 278.590531][T26949] write to 0xffff88812ae362d8 of 8 bytes by task 26950 on cpu 0: [ 278.598251][T26949] cpu_map_kthread_run+0x4a1/0x11e0 [ 278.603817][T26949] kthread+0x4ae/0x520 [ 278.607957][T26949] ret_from_fork+0x4b/0x60 [ 278.612403][T26949] ret_from_fork_asm+0x1a/0x30 [ 278.617185][T26949] [ 278.619601][T26949] read to 0xffff88812ae362d8 of 8 bytes by task 26949 on cpu 1: [ 278.627324][T26949] bq_flush_to_queue+0x125/0x360 [ 278.632280][T26949] __cpu_map_flush+0x38/0x80 [ 278.636890][T26949] xdp_do_flush+0x101/0x170 [ 278.641427][T26949] bpf_test_run_xdp_live+0xc8d/0x1040 [ 278.646832][T26949] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 278.652142][T26949] bpf_prog_test_run+0x20f/0x3a0 [ 278.657096][T26949] __sys_bpf+0x400/0x7a0 [ 278.661445][T26949] __x64_sys_bpf+0x43/0x50 [ 278.665982][T26949] x64_sys_call+0x2914/0x2dc0 [ 278.670684][T26949] do_syscall_64+0xc9/0x1c0 [ 278.675209][T26949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.681119][T26949] [ 278.683441][T26949] value changed: 0xffff888125936070 -> 0x0000000000000000 [ 278.690552][T26949] [ 278.692886][T26949] Reported by Kernel Concurrency Sanitizer on: [ 278.699043][T26949] CPU: 1 UID: 0 PID: 26949 Comm: syz.9.10475 Tainted: G W 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 278.711380][T26949] Tainted: [W]=WARN [ 278.715199][T26949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 278.725704][T26949] ================================================================== [ 278.738365][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 278.738380][ T29] audit: type=1400 audit(2000000038.102:9573): avc: denied { tracepoint } for pid=26953 comm="syz.8.10477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1