last executing test programs: 691.24386ms ago: executing program 0 (id=1251): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x69bd, 0x400}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 608.414011ms ago: executing program 0 (id=1249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) clock_nanosleep(0x0, 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) 569.293522ms ago: executing program 0 (id=1254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 569.078712ms ago: executing program 3 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 547.866152ms ago: executing program 3 (id=1257): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) 492.785553ms ago: executing program 0 (id=1261): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) fcntl$setlease(r1, 0x400, 0x1) 463.258413ms ago: executing program 0 (id=1264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = gettid() select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) tkill(r0, 0x7) 431.971994ms ago: executing program 2 (id=1266): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f00000003c0)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 431.742634ms ago: executing program 3 (id=1267): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 387.090934ms ago: executing program 0 (id=1269): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) 384.839245ms ago: executing program 3 (id=1271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 363.756345ms ago: executing program 2 (id=1273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 337.955425ms ago: executing program 1 (id=1275): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a3000000000090003"], 0x558}}, 0x40) 305.119096ms ago: executing program 1 (id=1278): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r2) 304.964346ms ago: executing program 2 (id=1279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5d8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x508, 0x3d8, 0x3d8, 0x508, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x2}}}}, {{@uncond, 0x0, 0x1f8, 0x228, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'dvmrp1\x00', {0x3ff, 0x1, 0x2, 0x8, 0x3b7c, 0x1ff, 0x1, 0x8, 0x40}, {0xffffffffffffffff}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0xb, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) 277.893096ms ago: executing program 1 (id=1280): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa2c0739963b0e8f1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x4, 0xff, 0x7, 0x0, 0x1, 0x917d5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xd}, 0xb3d8c41eb80db927, 0x1, 0x8007, 0x0, 0x81, 0x5, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 277.652406ms ago: executing program 2 (id=1281): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x69bd, 0x400}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 241.308837ms ago: executing program 1 (id=1284): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu~\'\'\t|\t') 233.484617ms ago: executing program 2 (id=1285): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007bc}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@data_err_ignore}, {@bh}, {@errors_continue}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) 201.432417ms ago: executing program 4 (id=1286): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000001440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000002840), &(0x7f0000002880), 0x0) 172.811178ms ago: executing program 4 (id=1287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) 172.464008ms ago: executing program 1 (id=1288): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r0, 0x5460, 0x0) ioctl(r0, 0x5451, 0x0) 110.274329ms ago: executing program 1 (id=1289): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 107.759689ms ago: executing program 4 (id=1290): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r2) 84.803409ms ago: executing program 4 (id=1291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 84.157709ms ago: executing program 3 (id=1301): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000001540)={[{@discard}, {@mblk_io_submit}, {@grpjquota}, {@quota}, {@nobarrier}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)) 64.32439ms ago: executing program 4 (id=1292): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 39.26796ms ago: executing program 4 (id=1293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r1, 0x409, 0xb) 492.12µs ago: executing program 2 (id=1294): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) ioctl$PIO_FONT(r0, 0x4b61, 0x0) 0s ago: executing program 3 (id=1295): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. [ 52.658637][ T29] audit: type=1400 audit(1750249186.642:62): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.659496][ T3308] cgroup: Unknown subsys name 'net' [ 52.681356][ T29] audit: type=1400 audit(1750249186.642:63): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.708702][ T29] audit: type=1400 audit(1750249186.672:64): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.860389][ T3308] cgroup: Unknown subsys name 'cpuset' [ 52.866468][ T3308] cgroup: Unknown subsys name 'rlimit' [ 53.035448][ T29] audit: type=1400 audit(1750249187.022:65): avc: denied { setattr } for pid=3308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.058763][ T29] audit: type=1400 audit(1750249187.022:66): avc: denied { create } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.079518][ T29] audit: type=1400 audit(1750249187.022:67): avc: denied { write } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.099903][ T29] audit: type=1400 audit(1750249187.022:68): avc: denied { read } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.106780][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 53.120186][ T29] audit: type=1400 audit(1750249187.032:69): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 53.153543][ T29] audit: type=1400 audit(1750249187.032:70): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 53.176786][ T29] audit: type=1400 audit(1750249187.122:71): avc: denied { relabelto } for pid=3311 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 53.205983][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.244104][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 54.339731][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.346907][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.354158][ T3320] bridge_slave_0: entered allmulticast mode [ 54.360491][ T3320] bridge_slave_0: entered promiscuous mode [ 54.367570][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.374700][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.381977][ T3320] bridge_slave_1: entered allmulticast mode [ 54.388396][ T3320] bridge_slave_1: entered promiscuous mode [ 54.411267][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 54.423754][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 54.437932][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.454463][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.500957][ T3320] team0: Port device team_slave_0 added [ 54.506634][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 54.521455][ T3320] team0: Port device team_slave_1 added [ 54.547749][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.554823][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.580760][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.611808][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.618802][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.644840][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.655495][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 54.664207][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.671300][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.678403][ T3322] bridge_slave_0: entered allmulticast mode [ 54.684653][ T3322] bridge_slave_0: entered promiscuous mode [ 54.709339][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.716409][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.723689][ T3322] bridge_slave_1: entered allmulticast mode [ 54.730217][ T3322] bridge_slave_1: entered promiscuous mode [ 54.736453][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.743577][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.750862][ T3324] bridge_slave_0: entered allmulticast mode [ 54.757156][ T3324] bridge_slave_0: entered promiscuous mode [ 54.764306][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.771390][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.778488][ T3324] bridge_slave_1: entered allmulticast mode [ 54.784825][ T3324] bridge_slave_1: entered promiscuous mode [ 54.817185][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.824283][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.831514][ T3323] bridge_slave_0: entered allmulticast mode [ 54.837824][ T3323] bridge_slave_0: entered promiscuous mode [ 54.850379][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.866531][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.875762][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.882843][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.890052][ T3323] bridge_slave_1: entered allmulticast mode [ 54.896699][ T3323] bridge_slave_1: entered promiscuous mode [ 54.903549][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.924477][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.948594][ T3320] hsr_slave_0: entered promiscuous mode [ 54.954488][ T3320] hsr_slave_1: entered promiscuous mode [ 54.972582][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.982474][ T3322] team0: Port device team_slave_0 added [ 54.988965][ T3322] team0: Port device team_slave_1 added [ 54.999052][ T3324] team0: Port device team_slave_0 added [ 55.005646][ T3324] team0: Port device team_slave_1 added [ 55.021562][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.040105][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.047212][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.054507][ T3318] bridge_slave_0: entered allmulticast mode [ 55.060801][ T3318] bridge_slave_0: entered promiscuous mode [ 55.077703][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.084692][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.110688][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.125656][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.132727][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.158708][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.169643][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.176748][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.183969][ T3318] bridge_slave_1: entered allmulticast mode [ 55.190328][ T3318] bridge_slave_1: entered promiscuous mode [ 55.201580][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.208592][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.234626][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.250921][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.257874][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.283892][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.310150][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.319916][ T3323] team0: Port device team_slave_0 added [ 55.335176][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.344929][ T3323] team0: Port device team_slave_1 added [ 55.386720][ T3318] team0: Port device team_slave_0 added [ 55.392824][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.399885][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.425904][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.438551][ T3324] hsr_slave_0: entered promiscuous mode [ 55.444574][ T3324] hsr_slave_1: entered promiscuous mode [ 55.450426][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.457963][ T3324] Cannot create hsr debugfs directory [ 55.472916][ T3318] team0: Port device team_slave_1 added [ 55.480989][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.487943][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.513942][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.534869][ T3322] hsr_slave_0: entered promiscuous mode [ 55.541066][ T3322] hsr_slave_1: entered promiscuous mode [ 55.546897][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.554546][ T3322] Cannot create hsr debugfs directory [ 55.597562][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.604653][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.630612][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.644359][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.651440][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.677366][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.711609][ T3323] hsr_slave_0: entered promiscuous mode [ 55.717683][ T3323] hsr_slave_1: entered promiscuous mode [ 55.723518][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.731138][ T3323] Cannot create hsr debugfs directory [ 55.776992][ T3318] hsr_slave_0: entered promiscuous mode [ 55.783013][ T3318] hsr_slave_1: entered promiscuous mode [ 55.788758][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.796342][ T3318] Cannot create hsr debugfs directory [ 55.870815][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.879086][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.910331][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.928598][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.941291][ T3324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.951364][ T3324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.960295][ T3324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.971776][ T3324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.994377][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.004599][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.020684][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.035454][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.051880][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.061672][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.080087][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.088610][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.120668][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.133275][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.144675][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.153253][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.172320][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.181107][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.225629][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.233721][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.245049][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.257133][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.267154][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.274272][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.283736][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.290801][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.299257][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.306540][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.330474][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.337540][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.355254][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.363377][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.370462][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.389254][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.396399][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.426965][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.441630][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.448691][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.465115][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.475580][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.482645][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.492220][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.504428][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.515867][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.556186][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.563415][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.574985][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.585373][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.617574][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.624658][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.658139][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.674563][ T3323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.685024][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.697497][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.722839][ T3324] veth0_vlan: entered promiscuous mode [ 56.731517][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.751286][ T3324] veth1_vlan: entered promiscuous mode [ 56.800645][ T3324] veth0_macvtap: entered promiscuous mode [ 56.816223][ T3324] veth1_macvtap: entered promiscuous mode [ 56.845756][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.856666][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.878204][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.894426][ T3324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.903351][ T3324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.912178][ T3324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.920939][ T3324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.937268][ T3322] veth0_vlan: entered promiscuous mode [ 56.968226][ T3322] veth1_vlan: entered promiscuous mode [ 56.978064][ T3318] veth0_vlan: entered promiscuous mode [ 56.994931][ T3318] veth1_vlan: entered promiscuous mode [ 57.006634][ T3322] veth0_macvtap: entered promiscuous mode [ 57.018559][ T3320] veth0_vlan: entered promiscuous mode [ 57.033136][ T3324] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.037390][ T3323] veth0_vlan: entered promiscuous mode [ 57.056612][ T3322] veth1_macvtap: entered promiscuous mode [ 57.066067][ T3320] veth1_vlan: entered promiscuous mode [ 57.074641][ T3323] veth1_vlan: entered promiscuous mode [ 57.085009][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.106570][ T3320] veth0_macvtap: entered promiscuous mode [ 57.115663][ T3323] veth0_macvtap: entered promiscuous mode [ 57.126202][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.138059][ T3323] veth1_macvtap: entered promiscuous mode [ 57.146698][ T3320] veth1_macvtap: entered promiscuous mode [ 57.153800][ T3318] veth0_macvtap: entered promiscuous mode [ 57.163363][ T3318] veth1_macvtap: entered promiscuous mode [ 57.171164][ T3322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.179979][ T3322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.188724][ T3322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.197504][ T3322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.220487][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.229383][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.238082][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.246503][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.255484][ T3490] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 57.273751][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.284413][ T3318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.293232][ T3318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.302219][ T3318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.310977][ T3318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.321634][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.340377][ T3320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.349222][ T3320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.357973][ T3320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.366716][ T3320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.384867][ T3323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.393805][ T3323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.402638][ T3323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.411340][ T3323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.483089][ T3499] ref_ctr_offset mismatch. inode: 0x12 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 57.697329][ T3529] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14'. [ 57.713757][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 57.713834][ T29] audit: type=1400 audit(1750249191.702:119): avc: denied { create } for pid=3504 comm="syz.2.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.763122][ T29] audit: type=1400 audit(1750249191.702:120): avc: denied { map } for pid=3504 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.786979][ T29] audit: type=1400 audit(1750249191.702:121): avc: denied { read write } for pid=3504 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.848918][ T29] audit: type=1400 audit(1750249191.832:122): avc: denied { tracepoint } for pid=3556 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 57.918942][ T29] audit: type=1400 audit(1750249191.902:123): avc: denied { create } for pid=3558 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.956462][ T3561] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 57.968853][ T3559] IPVS: stopping master sync thread 3561 ... [ 57.977816][ T29] audit: type=1400 audit(1750249191.932:124): avc: denied { setopt } for pid=3558 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.028687][ T3566] SELinux: failed to load policy [ 58.035085][ T29] audit: type=1400 audit(1750249192.012:125): avc: denied { load_policy } for pid=3565 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 58.077925][ T3573] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 58.077925][ T3573] The task syz.4.18 (3573) triggered the difference, watch for misbehavior. [ 58.172520][ T29] audit: type=1326 audit(1750249192.162:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3575 comm="syz.3.24" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66ecb6e929 code=0x0 [ 58.196864][ T29] audit: type=1400 audit(1750249192.182:127): avc: denied { create } for pid=3579 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.220169][ T3583] loop2: detected capacity change from 0 to 512 [ 58.259881][ T3583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.263369][ T29] audit: type=1400 audit(1750249192.222:128): avc: denied { mounton } for pid=3582 comm="syz.2.26" path="/4/bus" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.297276][ T3583] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.352830][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.382322][ T3593] netlink: 76 bytes leftover after parsing attributes in process `syz.2.28'. [ 58.388424][ T3001] udevd[3001]: worker [3310] terminated by signal 33 (Unknown signal 33) [ 58.400396][ T3001] udevd[3001]: worker [3310] failed while handling '/devices/virtual/block/loop0' [ 58.522766][ T3606] loop1: detected capacity change from 0 to 164 [ 58.531314][ T3606] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 58.665762][ T3616] netlink: 264 bytes leftover after parsing attributes in process `syz.2.40'. [ 58.674770][ T3616] netlink: 56 bytes leftover after parsing attributes in process `syz.2.40'. [ 58.726906][ T3622] loop1: detected capacity change from 0 to 1024 [ 58.742842][ T3622] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.750509][ T3624] mmap: syz.2.44 (3624) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.771565][ T3622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.795888][ T3622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.42'. [ 58.804842][ T3622] netlink: 108 bytes leftover after parsing attributes in process `syz.1.42'. [ 58.814914][ T3622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.42'. [ 58.824184][ T3622] netlink: 108 bytes leftover after parsing attributes in process `syz.1.42'. [ 58.833175][ T3622] netlink: 84 bytes leftover after parsing attributes in process `syz.1.42'. [ 58.868061][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.906035][ T3632] loop4: detected capacity change from 0 to 164 [ 58.916103][ T3632] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 58.961198][ T3636] macvtap0: entered promiscuous mode [ 58.971254][ T3636] macvtap0: left promiscuous mode [ 59.017581][ T3642] netlink: 264 bytes leftover after parsing attributes in process `syz.1.52'. [ 59.068523][ T3644] loop4: detected capacity change from 0 to 1024 [ 59.086365][ T3644] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 59.188232][ T3652] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 59.188232][ T3652] program syz.2.66 not setting count and/or reply_len properly [ 59.261671][ T3660] loop4: detected capacity change from 0 to 1024 [ 59.290210][ T3660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.326294][ T3675] program syz.3.63 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.336226][ T3660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.398382][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.445734][ T3685] loop2: detected capacity change from 0 to 1024 [ 59.460023][ T3685] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 59.581628][ C1] hrtimer: interrupt took 27449 ns [ 59.653676][ T3717] loop1: detected capacity change from 0 to 1024 [ 59.676606][ T3717] ======================================================= [ 59.676606][ T3717] WARNING: The mand mount option has been deprecated and [ 59.676606][ T3717] and is ignored by this kernel. Remove the mand [ 59.676606][ T3717] option from the mount to silence this warning. [ 59.676606][ T3717] ======================================================= [ 59.745100][ T3717] EXT4-fs: Ignoring removed nobh option [ 59.751036][ T3717] EXT4-fs: Ignoring removed bh option [ 59.765196][ T3726] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.774019][ T3726] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.782838][ T3726] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.791545][ T3726] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.822503][ T3717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.836202][ T3726] Zero length message leads to an empty skb [ 59.856385][ T3717] EXT4-fs (loop1): shut down requested (0) [ 59.871354][ T3726] syz.3.90 (3726) used greatest stack depth: 10568 bytes left [ 59.893707][ T3734] syz.2.92 uses obsolete (PF_INET,SOCK_PACKET) [ 59.902049][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.138324][ T3773] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 60.154365][ T3769] rdma_op ffff88811b7ba180 conn xmit_rdma 0000000000000000 [ 60.161900][ T23] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 60.536354][ T3808] hsr0: entered promiscuous mode [ 60.547175][ T3808] vlan2: entered promiscuous mode [ 60.583368][ T3824] loop1: detected capacity change from 0 to 164 [ 60.705973][ T3848] netlink: 'syz.3.144': attribute type 7 has an invalid length. [ 60.713677][ T3848] netlink: 'syz.3.144': attribute type 8 has an invalid length. [ 60.725960][ T3848] erspan0: entered promiscuous mode [ 60.732190][ T3848] gretap0: entered promiscuous mode [ 60.761961][ T3848] erspan0: left promiscuous mode [ 60.768782][ T3848] gretap0: left promiscuous mode [ 60.777741][ T3855] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.889420][ T3861] netlink: 'syz.3.149': attribute type 2 has an invalid length. [ 61.093789][ T3879] loop0: detected capacity change from 0 to 1024 [ 61.188324][ T3879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.218037][ T23] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 61.500571][ T3879] EXT4-fs warning (device loop0): ext4_empty_dir:3095: inode #11: comm syz.0.158: directory missing '..' [ 61.526170][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.599753][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 61.604792][ T3916] loop4: detected capacity change from 0 to 512 [ 61.617317][ T3916] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.630570][ T3916] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.638053][ T3918] netlink: 'syz.0.175': attribute type 10 has an invalid length. [ 61.652866][ T3918] team0: Port device geneve1 added [ 61.660514][ T3916] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.680299][ T3916] EXT4-fs (loop4): 1 truncate cleaned up [ 61.687629][ T3916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.732543][ T3927] loop0: detected capacity change from 0 to 512 [ 61.739491][ T3927] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.751449][ T3927] EXT4-fs (loop0): 1 truncate cleaned up [ 61.757590][ T3927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.771854][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.772959][ T3927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.862699][ T3943] tracefs: Invalid uid '0x00000000ffffffff' [ 61.892315][ T3949] 9pnet_fd: Insufficient options for proto=fd [ 61.936580][ T3957] loop0: detected capacity change from 0 to 1024 [ 61.943671][ T3957] EXT4-fs: Ignoring removed orlov option [ 61.949381][ T3957] EXT4-fs: Ignoring removed bh option [ 61.956021][ T3957] EXT4-fs: Ignoring removed bh option [ 61.981019][ T3957] EXT4-fs (loop0): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.008496][ T3318] EXT4-fs (loop0): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 62.064075][ T3539] tipc: Subscription rejected, illegal request [ 62.438952][ T3985] netlink: 'syz.3.204': attribute type 6 has an invalid length. [ 62.545853][ T4019] process 'syz.3.220' launched '/dev/fd/3' with NULL argv: empty string added [ 62.598644][ T4017] loop1: detected capacity change from 0 to 512 [ 62.615756][ T4017] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.648503][ T4017] EXT4-fs (loop1): 1 truncate cleaned up [ 62.658967][ T4017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.710960][ T4017] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.721325][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 62.721336][ T29] audit: type=1400 audit(1750249196.712:391): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.810971][ T29] audit: type=1326 audit(1750249196.802:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d76e929 code=0x7ffc0000 [ 62.854091][ T29] audit: type=1326 audit(1750249196.822:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f870d76e929 code=0x7ffc0000 [ 62.877406][ T29] audit: type=1326 audit(1750249196.822:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syzkaller" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d76e929 code=0x7ffc0000 [ 62.956429][ T29] audit: type=1400 audit(1750249196.902:395): avc: denied { create } for pid=4044 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.976051][ T29] audit: type=1400 audit(1750249196.902:396): avc: denied { bind } for pid=4044 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.988478][ T4058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=4058 comm=syz.2.234 [ 62.995250][ T29] audit: type=1400 audit(1750249196.902:397): avc: denied { write } for pid=4044 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.026852][ T29] audit: type=1400 audit(1750249196.922:398): avc: denied { name_bind } for pid=4046 comm="syz.2.229" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 63.059051][ T4061] __nla_validate_parse: 19 callbacks suppressed [ 63.059065][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 63.074349][ T4061] netlink: 44 bytes leftover after parsing attributes in process `syz.2.235'. [ 63.075024][ T29] audit: type=1400 audit(1750249197.042:399): avc: denied { bind } for pid=4056 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.102710][ T29] audit: type=1400 audit(1750249197.042:400): avc: denied { node_bind } for pid=4056 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 63.124660][ T4063] loop4: detected capacity change from 0 to 1024 [ 63.147647][ T4063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.177310][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.245208][ T4086] xt_nat: multiple ranges no longer supported [ 63.285532][ T4092] loop1: detected capacity change from 0 to 764 [ 63.309886][ T4092] Symlink component flag not implemented [ 63.323518][ T4092] Symlink component flag not implemented (7) [ 63.345124][ T4112] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.428341][ T4141] netlink: 64 bytes leftover after parsing attributes in process `syz.2.259'. [ 63.497512][ T4147] netlink: 'syz.1.262': attribute type 8 has an invalid length. [ 63.606783][ T4157] unsupported nla_type 52263 [ 63.696468][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 63.718526][ T4165] netlink: 312 bytes leftover after parsing attributes in process `syz.2.271'. [ 63.727558][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 63.794184][ T4054] syz.0.231 (4054) used greatest stack depth: 10312 bytes left [ 63.832497][ T4180] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 63.902401][ T4188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 64.081463][ T4212] loop2: detected capacity change from 0 to 512 [ 64.108398][ T4212] EXT4-fs: Ignoring removed bh option [ 64.129214][ T4212] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.175934][ T4212] EXT4-fs (loop2): 1 truncate cleaned up [ 64.193996][ T4212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.300341][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.572955][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 64.609154][ T4275] loop2: detected capacity change from 0 to 1024 [ 64.628085][ T4275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.700908][ T4275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.718264][ T4275] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 64.730530][ T4275] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.730530][ T4275] [ 64.740309][ T4275] EXT4-fs (loop2): Total free blocks count 0 [ 64.741416][ T2964] kernel write not supported for file /validatetrans (pid: 2964 comm: kworker/1:2) [ 64.746287][ T4275] EXT4-fs (loop2): Free/Dirty block details [ 64.761699][ T4275] EXT4-fs (loop2): free_blocks=0 [ 64.766634][ T4275] EXT4-fs (loop2): dirty_blocks=0 [ 64.771683][ T4275] EXT4-fs (loop2): Block reservation details [ 64.777650][ T4275] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 64.851860][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.915140][ T4303] SELinux: Context is not valid (left unmapped). [ 64.924407][ T3393] kernel write not supported for file /104/oom_score_adj (pid: 3393 comm: kworker/0:3) [ 64.981397][ T4311] netlink: 'syz.3.339': attribute type 2 has an invalid length. [ 64.989164][ T4311] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.339'. [ 65.028782][ T4317] ALSA: seq fatal error: cannot create timer (-19) [ 65.276535][ T4356] netlink: 'syz.3.359': attribute type 29 has an invalid length. [ 65.393080][ T4368] vlan2: entered promiscuous mode [ 65.398318][ T4368] bond0: entered promiscuous mode [ 65.403370][ T4368] bond_slave_0: entered promiscuous mode [ 65.409070][ T4368] bond_slave_1: entered promiscuous mode [ 65.446874][ T4373] openvswitch: netlink: Message has 6 unknown bytes. [ 65.472914][ T4375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 65.754291][ T4423] loop3: detected capacity change from 0 to 512 [ 65.762674][ T4423] EXT4-fs (loop3): orphan cleanup on readonly fs [ 65.769535][ T4423] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.392: bg 0: block 248: padding at end of block bitmap is not set [ 65.784828][ T4423] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.392: Failed to acquire dquot type 1 [ 65.797674][ T4423] EXT4-fs (loop3): 1 truncate cleaned up [ 65.804271][ T4423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.818995][ T4423] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.392: deleted inode referenced: 12 [ 65.843047][ T4423] syz.3.392 (4423) used greatest stack depth: 9496 bytes left [ 65.853205][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.229054][ T4455] openvswitch: netlink: Message has 6 unknown bytes. [ 66.247984][ T4457] capability: warning: `syz.2.403' uses 32-bit capabilities (legacy support in use) [ 66.255302][ T4433] Set syz1 is full, maxelem 65536 reached [ 66.270201][ T4457] program syz.2.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.398425][ T4481] atomic_op ffff88811b9efd28 conn xmit_atomic 0000000000000000 [ 66.406370][ T4485] netlink: zone id is out of range [ 66.419160][ T4485] netlink: zone id is out of range [ 66.424418][ T4485] netlink: del zone limit has 8 unknown bytes [ 66.440511][ T4487] loop1: detected capacity change from 0 to 512 [ 66.463260][ T4487] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.482557][ T4487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.526029][ T4500] 9pnet_fd: Insufficient options for proto=fd [ 66.542858][ T4487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.567619][ T4487] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.584840][ T4507] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 66.596043][ T4501] IPVS: stopping master sync thread 4507 ... [ 66.655213][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.685514][ T4517] loop4: detected capacity change from 0 to 512 [ 66.698775][ T4517] EXT4-fs: test_dummy_encryption option not supported [ 66.706440][ T4518] netlink: 'syz.1.428': attribute type 9 has an invalid length. [ 66.719294][ T4517] loop4: detected capacity change from 0 to 512 [ 66.737938][ T4517] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 66.749812][ T4517] EXT4-fs (loop4): invalid journal inode [ 66.756431][ T4517] EXT4-fs (loop4): can't get journal size [ 66.765149][ T4517] EXT4-fs (loop4): 1 truncate cleaned up [ 66.777471][ T4517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.803722][ T4517] EXT4-fs warning (device loop4): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 66.854979][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.911557][ T4545] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 66.934739][ T4548] 9pnet: p9_errstr2errno: server reported unknown error @΂0x0000000000000003 [ 66.975555][ T4549] loop4: detected capacity change from 0 to 1024 [ 66.982703][ T4549] EXT4-fs: Ignoring removed nobh option [ 66.988321][ T4549] EXT4-fs: Ignoring removed bh option [ 67.002318][ T4549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.227135][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.308632][ T4611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.328920][ T4611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.372626][ T4617] loop0: detected capacity change from 0 to 2048 [ 67.407360][ T4617] Alternate GPT is invalid, using primary GPT. [ 67.413870][ T4617] loop0: p1 p2 p3 [ 67.419583][ T4623] syz.4.478 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.599216][ T4661] SELinux: security_context_str_to_sid () failed with errno=-22 [ 67.644355][ T4673] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 67.650936][ T4673] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.658548][ T4673] vhci_hcd vhci_hcd.0: Device attached [ 67.679310][ T4674] vhci_hcd: connection closed [ 67.679484][ T3527] vhci_hcd: stop threads [ 67.687433][ T4677] sctp: [Deprecated]: syz.1.502 (pid 4677) Use of int in max_burst socket option. [ 67.687433][ T4677] Use struct sctp_assoc_value instead [ 67.688555][ T3527] vhci_hcd: release socket [ 67.688574][ T3527] vhci_hcd: disconnect device [ 67.722930][ T4681] IPv6: Can't replace route, no match found [ 67.740752][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 67.740766][ T29] audit: type=1400 audit(2000000002.150:762): avc: denied { ioctl } for pid=4682 comm="syz.1.505" path="socket:[7091]" dev="sockfs" ino=7091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.790164][ T4688] Cannot find add_set index 0 as target [ 68.164836][ T4701] 9pnet: p9_errstr2errno: server reported unknown error @ [ 68.241130][ T29] audit: type=1326 audit(2000000002.650:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ecb6e929 code=0x7ffc0000 [ 68.264535][ T29] audit: type=1326 audit(2000000002.650:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f66ecb6e929 code=0x7ffc0000 [ 68.287949][ T29] audit: type=1326 audit(2000000002.650:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ecb6e929 code=0x7ffc0000 [ 68.315090][ T4717] __nla_validate_parse: 13 callbacks suppressed [ 68.315106][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 68.318078][ T4715] netlink: 'syz.3.519': attribute type 2 has an invalid length. [ 68.337936][ T4715] netlink: 'syz.3.519': attribute type 1 has an invalid length. [ 68.341566][ T29] audit: type=1400 audit(2000000002.730:766): avc: denied { bind } for pid=4716 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.345613][ T4715] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.519'. [ 68.394897][ T29] audit: type=1400 audit(2000000002.800:767): avc: denied { write } for pid=4720 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.486482][ T4733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'. [ 68.539959][ T29] audit: type=1326 audit(2000000002.950:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d76e929 code=0x7ffc0000 [ 68.563372][ T29] audit: type=1326 audit(2000000002.950:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d76e929 code=0x7ffc0000 [ 68.595345][ T29] audit: type=1326 audit(2000000002.990:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f870d76e929 code=0x7ffc0000 [ 68.618712][ T29] audit: type=1326 audit(2000000002.990:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d76e929 code=0x7ffc0000 [ 68.711550][ T4750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 68.713376][ T4751] 9pnet_fd: Insufficient options for proto=fd [ 68.720413][ T4750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 68.914678][ T4781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 69.076034][ T4814] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 69.082666][ T4814] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 69.090207][ T4814] vhci_hcd vhci_hcd.0: Device attached [ 69.097916][ T4816] vhci_hcd: connection closed [ 69.098107][ T3527] vhci_hcd: stop threads [ 69.107224][ T3527] vhci_hcd: release socket [ 69.111858][ T3527] vhci_hcd: disconnect device [ 69.305409][ T4851] 9pnet_fd: Insufficient options for proto=fd [ 69.440782][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 69.674154][ T4867] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 69.709558][ T4870] loop4: detected capacity change from 0 to 512 [ 69.741573][ T4870] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 69.756745][ T4870] EXT4-fs (loop4): mount failed [ 69.855897][ T4885] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 69.866942][ T4882] IPVS: stopping master sync thread 4885 ... [ 69.908796][ T4890] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 69.915359][ T4890] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 69.923087][ T4890] vhci_hcd vhci_hcd.0: Device attached [ 69.942017][ T4891] vhci_hcd: connection closed [ 69.942145][ T12] vhci_hcd: stop threads [ 69.951226][ T12] vhci_hcd: release socket [ 69.955631][ T12] vhci_hcd: disconnect device [ 70.036941][ T4900] program syz.3.603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.166815][ T4916] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 70.179250][ T4918] netlink: 'syz.0.612': attribute type 10 has an invalid length. [ 70.194249][ T4920] IPv6: sit1: Disabled Multicast RS [ 70.200451][ T4920] sit1: entered allmulticast mode [ 70.213015][ T4918] team0: Device hsr_slave_0 failed to register rx_handler [ 70.289390][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'. [ 71.125267][ T4981] IPv6: sit1: Disabled Multicast RS [ 71.131845][ T4981] sit1: entered allmulticast mode [ 71.340487][ T5013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.655'. [ 71.349739][ T5013] netlink: 'syz.4.655': attribute type 7 has an invalid length. [ 71.357637][ T5013] netlink: 'syz.4.655': attribute type 8 has an invalid length. [ 71.366071][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 71.383149][ T5013] erspan0: entered promiscuous mode [ 71.389958][ T5013] gretap0: entered promiscuous mode [ 71.397589][ T5013] erspan0: left promiscuous mode [ 71.416544][ T5013] gretap0: left promiscuous mode [ 71.578459][ T5056] loop2: detected capacity change from 0 to 512 [ 71.587327][ T5056] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.597668][ T5054] netlink: 'syz.3.675': attribute type 10 has an invalid length. [ 71.605629][ T5054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.675'. [ 71.617170][ T5056] EXT4-fs (loop2): 1 truncate cleaned up [ 71.637131][ T5056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.658469][ T5054] team0: Port device geneve1 added [ 71.731963][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.762858][ T5072] tracefs: Invalid uid '0x00000000ffffffff' [ 71.883456][ T5100] loop3: detected capacity change from 0 to 512 [ 71.914917][ T5100] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.941390][ T5102] hub 2-0:1.0: USB hub found [ 71.946155][ T5102] hub 2-0:1.0: 8 ports detected [ 71.946155][ T5100] EXT4-fs (loop3): 1 truncate cleaned up [ 71.946484][ T5100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.034742][ T5107] loop1: detected capacity change from 0 to 256 [ 72.053091][ T5107] FAT-fs (loop1): bogus number of FAT sectors [ 72.059295][ T5107] FAT-fs (loop1): Can't find a valid FAT filesystem [ 72.116257][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.319485][ T5147] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 72.467264][ T5174] loop3: detected capacity change from 0 to 512 [ 72.474240][ T5174] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.486101][ T5174] EXT4-fs (loop3): 1 truncate cleaned up [ 72.492215][ T5174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.505103][ T5174] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.531644][ T5179] loop3: detected capacity change from 0 to 512 [ 72.541495][ T5179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.554132][ T5179] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.567042][ T5179] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.729: corrupted inode contents [ 72.579050][ T5179] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.729: mark_inode_dirty error [ 72.590675][ T5179] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.729: corrupted inode contents [ 72.602915][ T5179] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.729: mark_inode_dirty error [ 72.634085][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.803017][ T5191] loop1: detected capacity change from 0 to 512 [ 72.810264][ T5191] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.822602][ T5191] EXT4-fs (loop1): 1 truncate cleaned up [ 72.828814][ T5191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.887895][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.965057][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 72.965143][ T29] audit: type=1400 audit(2000000007.330:947): avc: denied { create } for pid=5196 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.990758][ T29] audit: type=1400 audit(2000000007.330:948): avc: denied { bind } for pid=5196 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.009916][ T29] audit: type=1400 audit(2000000007.330:949): avc: denied { write } for pid=5196 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.029117][ T29] audit: type=1400 audit(2000000007.340:950): avc: denied { execmem } for pid=5198 comm="syz.1.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.158874][ T29] audit: type=1400 audit(2000000007.560:951): avc: denied { bind } for pid=5208 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.178267][ T29] audit: type=1400 audit(2000000007.560:952): avc: denied { node_bind } for pid=5208 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 73.180660][ T5207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=5207 comm=syz.1.740 [ 73.198208][ T29] audit: type=1400 audit(2000000007.560:953): avc: denied { connect } for pid=5208 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.230844][ T29] audit: type=1400 audit(2000000007.560:954): avc: denied { write } for pid=5208 comm="syz.4.741" laddr=fe80::13 faddr=fe80::42 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.332262][ T29] audit: type=1400 audit(2000000007.740:955): avc: denied { name_bind } for pid=5214 comm="syz.0.746" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 73.437182][ T29] audit: type=1400 audit(2000000007.840:956): avc: denied { create } for pid=5223 comm="syz.2.749" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.522631][ T5235] __nla_validate_parse: 3 callbacks suppressed [ 73.522645][ T5235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'. [ 73.554921][ T5235] IPVS: Error joining to the multicast group [ 73.611012][ T5246] netlink: 'syz.3.769': attribute type 8 has an invalid length. [ 73.798512][ T5275] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 73.805057][ T5275] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.812717][ T5275] vhci_hcd vhci_hcd.0: Device attached [ 73.820014][ T5276] vhci_hcd: connection closed [ 73.820092][ T3544] vhci_hcd: stop threads [ 73.829201][ T3544] vhci_hcd: release socket [ 73.833675][ T3544] vhci_hcd: disconnect device [ 74.093725][ T5306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 74.103629][ T5306] netlink: 312 bytes leftover after parsing attributes in process `syz.0.786'. [ 74.112639][ T5306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 74.355382][ T5335] hub 6-0:1.0: USB hub found [ 74.361701][ T5335] hub 6-0:1.0: 8 ports detected [ 74.395248][ T5347] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 74.520129][ T5355] loop0: detected capacity change from 0 to 512 [ 74.547275][ T5355] EXT4-fs: Ignoring removed bh option [ 74.566217][ T5355] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.593846][ T5355] EXT4-fs (loop0): 1 truncate cleaned up [ 74.654876][ T5355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.822170][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.001138][ T23] kernel write not supported for file /validatetrans (pid: 23 comm: kworker/1:0) [ 75.095626][ T5403] loop1: detected capacity change from 0 to 1024 [ 75.120190][ T5403] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.144940][ T5403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.184061][ T5414] netlink: 'syz.4.838': attribute type 2 has an invalid length. [ 75.191856][ T5414] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.838'. [ 75.209437][ T5403] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 75.221851][ T5403] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.221851][ T5403] [ 75.231597][ T5403] EXT4-fs (loop1): Total free blocks count 0 [ 75.237646][ T5403] EXT4-fs (loop1): Free/Dirty block details [ 75.243652][ T5403] EXT4-fs (loop1): free_blocks=0 [ 75.248662][ T5403] EXT4-fs (loop1): dirty_blocks=0 [ 75.253719][ T5403] EXT4-fs (loop1): Block reservation details [ 75.259806][ T5403] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 75.304543][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.463135][ T5436] netlink: 'syz.2.848': attribute type 29 has an invalid length. [ 75.508199][ T5444] openvswitch: netlink: Message has 6 unknown bytes. [ 75.551317][ T5451] netlink: 56 bytes leftover after parsing attributes in process `syz.0.855'. [ 75.560356][ T5451] netlink: 56 bytes leftover after parsing attributes in process `syz.0.855'. [ 75.569209][ T5451] netlink: 56 bytes leftover after parsing attributes in process `syz.0.855'. [ 75.841010][ T5479] binfmt_misc: register: failed to install interpreter file ./file0 [ 76.013922][ T5512] loop4: detected capacity change from 0 to 512 [ 76.041970][ T5512] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.074237][ T5512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.108333][ T5512] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.368372][ T5549] atomic_op ffff88811bccb528 conn xmit_atomic 0000000000000000 [ 76.419555][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.439021][ T5534] Set syz1 is full, maxelem 65536 reached [ 76.513471][ T5562] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.894'. [ 76.513647][ T5561] 9pnet_fd: Insufficient options for proto=fd [ 76.539804][ T5566] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 76.540022][ T5565] IPVS: stopping master sync thread 5566 ... [ 76.551817][ T5562] netlink: zone id is out of range [ 76.562148][ T5562] netlink: zone id is out of range [ 76.567294][ T5562] netlink: del zone limit has 8 unknown bytes [ 76.607095][ T5572] loop2: detected capacity change from 0 to 512 [ 76.616051][ T5572] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.623458][ T5572] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.652620][ T5578] netlink: 332 bytes leftover after parsing attributes in process `syz.4.907'. [ 76.662768][ T5572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.664142][ T5578] netlink: 'syz.4.907': attribute type 9 has an invalid length. [ 76.712065][ T5585] loop3: detected capacity change from 0 to 512 [ 76.719806][ T5572] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.731411][ T5585] EXT4-fs: test_dummy_encryption option not supported [ 76.756053][ T5585] loop3: detected capacity change from 0 to 512 [ 76.769420][ T5585] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 76.778926][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.789244][ T5585] EXT4-fs (loop3): invalid journal inode [ 76.802048][ T5585] EXT4-fs (loop3): can't get journal size [ 76.812348][ T5585] EXT4-fs (loop3): 1 truncate cleaned up [ 76.818353][ T5585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.843606][ T5585] EXT4-fs warning (device loop3): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 76.901874][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.021314][ T5624] syzkaller1: entered promiscuous mode [ 77.026848][ T5624] syzkaller1: entered allmulticast mode [ 77.151965][ T5639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.170869][ T5639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.266495][ T5661] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 77.438424][ T5689] hub 2-0:1.0: USB hub found [ 77.444446][ T5693] loop4: detected capacity change from 0 to 512 [ 77.447696][ T5689] hub 2-0:1.0: 8 ports detected [ 77.451436][ T5693] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.472893][ T5693] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.503238][ T5693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.528306][ T5693] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.552874][ T5702] binfmt_misc: register: failed to install interpreter file ./file0 [ 77.577514][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.590213][ T5708] loop2: detected capacity change from 0 to 512 [ 77.597102][ T5708] EXT4-fs: test_dummy_encryption option not supported [ 77.605289][ T5710] loop1: detected capacity change from 0 to 2048 [ 77.617035][ T5708] loop2: detected capacity change from 0 to 512 [ 77.624877][ T5708] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 77.634099][ T5708] EXT4-fs (loop2): invalid journal inode [ 77.640826][ T5708] EXT4-fs (loop2): can't get journal size [ 77.647409][ T5708] EXT4-fs (loop2): 1 truncate cleaned up [ 77.654037][ T5708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.670225][ T5710] Alternate GPT is invalid, using primary GPT. [ 77.670595][ T5708] EXT4-fs warning (device loop2): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 77.676486][ T5710] loop1: p1 p2 p3 [ 77.708499][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.747715][ T5723] IPv6: Can't replace route, no match found [ 77.837227][ T5741] SELinux: security_context_str_to_sid () failed with errno=-22 [ 77.839057][ T5738] sctp: [Deprecated]: syz.4.977 (pid 5738) Use of int in max_burst socket option. [ 77.839057][ T5738] Use struct sctp_assoc_value instead [ 77.917709][ T5755] loop3: detected capacity change from 0 to 512 [ 77.950945][ T5755] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.009915][ T5755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.022656][ T5755] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.146784][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.224517][ T5761] Set syz1 is full, maxelem 65536 reached [ 78.232024][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 78.232106][ T29] audit: type=1400 audit(2000000002.570:1192): avc: denied { read } for pid=5773 comm="syz.3.996" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.264471][ T29] audit: type=1400 audit(2000000002.570:1193): avc: denied { open } for pid=5773 comm="syz.3.996" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.288288][ T29] audit: type=1400 audit(2000000002.570:1194): avc: denied { ioctl } for pid=5773 comm="syz.3.996" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.332273][ T29] audit: type=1400 audit(2000000002.650:1195): avc: denied { append } for pid=5773 comm="syz.3.996" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 78.357182][ T29] audit: type=1326 audit(2000000002.700:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210ddae929 code=0x7ffc0000 [ 78.381112][ T29] audit: type=1326 audit(2000000002.700:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210ddae929 code=0x7ffc0000 [ 78.404556][ T29] audit: type=1326 audit(2000000002.700:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210ddae929 code=0x7ffc0000 [ 78.428080][ T29] audit: type=1326 audit(2000000002.700:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210ddae929 code=0x7ffc0000 [ 78.451461][ T29] audit: type=1326 audit(2000000002.700:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210ddae929 code=0x7ffc0000 [ 78.474884][ T29] audit: type=1326 audit(2000000002.700:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210ddae929 code=0x7ffc0000 [ 78.552163][ T5793] loop3: detected capacity change from 0 to 512 [ 78.558806][ T5793] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.565855][ T5793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.581323][ T5793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.594801][ T5793] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.620318][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.670268][ T5810] netlink: 'syz.4.1013': attribute type 1 has an invalid length. [ 78.736004][ T5826] netlink: 'syz.3.1021': attribute type 4 has an invalid length. [ 78.766194][ T5831] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 78.772742][ T5831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.780281][ T5831] vhci_hcd vhci_hcd.0: Device attached [ 78.787518][ T5833] vhci_hcd: connection closed [ 78.787619][ T4134] vhci_hcd: stop threads [ 78.796648][ T4134] vhci_hcd: release socket [ 78.801095][ T4134] vhci_hcd: disconnect device [ 78.826231][ T5838] syzkaller1: entered promiscuous mode [ 78.831864][ T5838] syzkaller1: entered allmulticast mode [ 78.927372][ T5852] loop2: detected capacity change from 0 to 512 [ 78.934991][ T5852] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.951180][ T5852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.964044][ T5852] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.062927][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.078329][ T5862] __nla_validate_parse: 7 callbacks suppressed [ 79.078339][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1037'. [ 79.381393][ T2964] IPVS: starting estimator thread 0... [ 79.469772][ T5872] IPVS: using max 2592 ests per chain, 129600 per kthread [ 79.743942][ T5897] SELinux: syz.1.1051 (5897) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 79.827988][ T5882] Set syz1 is full, maxelem 65536 reached [ 80.502258][ T5918] loop0: detected capacity change from 0 to 512 [ 80.510196][ T5918] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.539233][ T5918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.557392][ T5918] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.688676][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.711613][ T5930] loop4: detected capacity change from 0 to 512 [ 80.743016][ T5930] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.866768][ T5945] loop1: detected capacity change from 0 to 128 [ 80.988472][ T5954] loop4: detected capacity change from 0 to 512 [ 81.044895][ T5954] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.123874][ T5932] Set syz1 is full, maxelem 65536 reached [ 81.167332][ T5974] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 81.211910][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1087'. [ 81.220972][ T5981] netlink: 'syz.1.1087': attribute type 7 has an invalid length. [ 81.228688][ T5981] netlink: 'syz.1.1087': attribute type 8 has an invalid length. [ 81.236603][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 81.267774][ T5981] erspan0: entered promiscuous mode [ 81.277899][ T5981] gretap0: entered promiscuous mode [ 81.283762][ T5991] netlink: 'syz.4.1094': attribute type 10 has an invalid length. [ 81.291636][ T5991] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1094'. [ 81.303472][ T5981] erspan0: left promiscuous mode [ 81.310109][ T5981] gretap0: left promiscuous mode [ 81.324289][ T5991] team0: Port device geneve1 added [ 81.337356][ T5987] loop3: detected capacity change from 0 to 1024 [ 81.353316][ T5987] EXT4-fs: Ignoring removed orlov option [ 81.359033][ T5987] EXT4-fs: Ignoring removed bh option [ 81.366767][ T5998] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1096'. [ 81.370621][ T5987] EXT4-fs: Ignoring removed bh option [ 81.426228][ T6007] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1099'. [ 81.507912][ T6025] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 81.593144][ T6040] loop4: detected capacity change from 0 to 764 [ 81.613457][ T6040] Symlink component flag not implemented [ 81.623383][ T6040] Symlink component flag not implemented (7) [ 81.710904][ T6062] loop4: detected capacity change from 0 to 512 [ 81.724126][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 81.733492][ T6068] IPVS: Error joining to the multicast group [ 81.741797][ T6062] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.768697][ T6062] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1123: corrupted inode contents [ 81.782572][ T6062] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1123: mark_inode_dirty error [ 81.794471][ T6062] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1123: corrupted inode contents [ 81.809763][ T6062] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1123: mark_inode_dirty error [ 81.908846][ T6092] loop4: detected capacity change from 0 to 256 [ 81.919073][ T6092] FAT-fs (loop4): bogus number of FAT sectors [ 81.925416][ T6092] FAT-fs (loop4): Can't find a valid FAT filesystem [ 81.945137][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 81.958404][ T6096] IPVS: Error joining to the multicast group [ 82.074455][ T6113] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1147'. [ 82.103859][ T6116] loop4: detected capacity change from 0 to 512 [ 82.110871][ T6116] EXT4-fs: Ignoring removed bh option [ 82.116680][ T6116] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.134422][ T6116] EXT4-fs (loop4): 1 truncate cleaned up [ 82.514823][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'. [ 82.532604][ T6139] loop1: detected capacity change from 0 to 512 [ 82.572152][ T6139] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.597273][ T6139] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.613407][ T6143] loop0: detected capacity change from 0 to 256 [ 82.620500][ T6143] FAT-fs (loop0): bogus number of FAT sectors [ 82.626609][ T6143] FAT-fs (loop0): Can't find a valid FAT filesystem [ 82.762726][ T6153] SELinux: syz.3.1164 (6153) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.970377][ T6185] loop2: detected capacity change from 0 to 512 [ 82.977579][ T6185] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.992294][ T6182] hub 6-0:1.0: USB hub found [ 82.997035][ T6182] hub 6-0:1.0: 8 ports detected [ 83.002011][ T6185] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.116383][ T6195] loop2: detected capacity change from 0 to 256 [ 83.123569][ T6195] FAT-fs (loop2): bogus number of FAT sectors [ 83.129758][ T6195] FAT-fs (loop2): Can't find a valid FAT filesystem [ 83.238924][ T6204] netlink: 'syz.0.1195': attribute type 7 has an invalid length. [ 83.246766][ T6204] netlink: 'syz.0.1195': attribute type 8 has an invalid length. [ 83.273636][ T6204] erspan0: entered promiscuous mode [ 83.283487][ T6204] gretap0: entered promiscuous mode [ 83.301672][ T6204] erspan0: left promiscuous mode [ 83.312449][ T6204] gretap0: left promiscuous mode [ 83.616021][ T6230] loop0: detected capacity change from 0 to 512 [ 83.636593][ T6230] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.667016][ T6230] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.701652][ T6240] SELinux: syz.2.1201 (6240) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 83.748617][ T6242] loop3: detected capacity change from 0 to 512 [ 83.757809][ T6242] EXT4-fs: Ignoring removed bh option [ 83.774119][ T6242] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.790860][ T6247] loop1: detected capacity change from 0 to 512 [ 83.804086][ T6247] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.806939][ T6242] EXT4-fs (loop3): 1 truncate cleaned up [ 83.820820][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 83.820833][ T29] audit: type=1326 audit(2000000008.160:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78429ce929 code=0x7ffc0000 [ 83.850889][ T29] audit: type=1326 audit(2000000008.190:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78429ce929 code=0x7ffc0000 [ 83.873746][ T29] audit: type=1326 audit(2000000008.190:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f78429ce929 code=0x7ffc0000 [ 83.955882][ T6255] loop1: detected capacity change from 0 to 1024 [ 83.962931][ T6255] EXT4-fs: Ignoring removed orlov option [ 83.968651][ T6255] EXT4-fs: Ignoring removed bh option [ 83.974475][ T6255] EXT4-fs: Ignoring removed bh option [ 83.986050][ T6263] loop3: detected capacity change from 0 to 256 [ 83.992963][ T6263] FAT-fs (loop3): bogus number of FAT sectors [ 83.999057][ T6263] FAT-fs (loop3): Can't find a valid FAT filesystem [ 84.159939][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 84.172042][ T29] audit: type=1400 audit(2000000008.510:1351): avc: denied { append } for pid=6294 comm="syz.3.1221" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.245692][ T6300] loop0: detected capacity change from 0 to 128 [ 84.276203][ T29] audit: type=1326 audit(2000000008.610:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6305 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ecb6e929 code=0x7ffc0000 [ 84.301081][ T29] audit: type=1326 audit(2000000008.610:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6305 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f66ecb6e929 code=0x7ffc0000 [ 84.337603][ T29] audit: type=1326 audit(2000000008.670:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6305 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ecb6e929 code=0x7ffc0000 [ 84.361153][ T29] audit: type=1326 audit(2000000008.670:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6305 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ecb6e929 code=0x7ffc0000 [ 84.422254][ T6314] __nla_validate_parse: 6 callbacks suppressed [ 84.422268][ T6314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1238'. [ 84.424501][ T6313] loop1: detected capacity change from 0 to 1024 [ 84.428550][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1238'. [ 84.439280][ T6313] EXT4-fs: Ignoring removed nobh option [ 84.465782][ T6313] EXT4-fs: Ignoring removed bh option [ 84.494030][ T29] audit: type=1400 audit(2000000008.830:1356): avc: denied { map } for pid=6311 comm="syz.1.1229" path="/250/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.517160][ T29] audit: type=1400 audit(2000000008.830:1357): avc: denied { execute } for pid=6311 comm="syz.1.1229" path="/250/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.550395][ T6322] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 84.584430][ T6323] loop0: detected capacity change from 0 to 256 [ 84.592866][ T6323] FAT-fs (loop0): bogus number of FAT sectors [ 84.598991][ T6323] FAT-fs (loop0): Can't find a valid FAT filesystem [ 84.923923][ T6358] loop1: detected capacity change from 0 to 512 [ 84.950956][ T6358] EXT4-fs: Ignoring removed bh option [ 84.958793][ T6358] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.980893][ T6358] EXT4-fs (loop1): 1 truncate cleaned up [ 85.054078][ T6383] loop3: detected capacity change from 0 to 2048 [ 85.199378][ T6413] loop3: detected capacity change from 0 to 512 [ 85.210923][ T6413] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.232479][ T6413] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.257868][ T6428] SET target dimension over the limit! [ 85.336660][ T6442] loop2: detected capacity change from 0 to 1024 [ 85.343839][ T6442] EXT4-fs: Ignoring removed nobh option [ 85.349458][ T6442] EXT4-fs: Ignoring removed bh option [ 85.410716][ T6452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.430373][ T6452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.485393][ T6458] loop3: detected capacity change from 0 to 512 [ 85.493570][ T6458] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.500931][ T6458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.523350][ T6458] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.574662][ T6467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1295'. [ 85.584603][ T3323] ================================================================== [ 85.592706][ T3323] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 85.600456][ T3323] [ 85.602767][ T3323] write to 0xffff888237c25e68 of 1 bytes by task 6465 on cpu 0: [ 85.610384][ T3323] folios_put_refs+0x285/0x2d0 [ 85.615144][ T3323] folio_batch_move_lru+0x1fd/0x230 [ 85.620338][ T3323] folio_add_lru+0x14a/0x1f0 [ 85.624922][ T3323] shmem_get_folio_gfp+0x7ab/0xd60 [ 85.630030][ T3323] shmem_fallocate+0x57c/0x840 [ 85.634783][ T3323] vfs_fallocate+0x413/0x450 [ 85.639357][ T3323] file_ioctl+0x453/0x530 [ 85.643684][ T3323] do_vfs_ioctl+0x943/0x11d0 [ 85.648357][ T3323] __se_sys_ioctl+0x82/0x140 [ 85.652938][ T3323] __x64_sys_ioctl+0x43/0x50 [ 85.657610][ T3323] x64_sys_call+0x19a8/0x2fb0 [ 85.662274][ T3323] do_syscall_64+0xd2/0x200 [ 85.666761][ T3323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.672642][ T3323] [ 85.674951][ T3323] read to 0xffff888237c25e68 of 1 bytes by task 3323 on cpu 1: [ 85.682481][ T3323] __lru_add_drain_all+0x12b/0x3f0 [ 85.687590][ T3323] lru_add_drain_all+0x10/0x20 [ 85.692349][ T3323] invalidate_bdev+0x47/0x70 [ 85.696931][ T3323] ext4_put_super+0x624/0x7d0 [ 85.701599][ T3323] generic_shutdown_super+0xe6/0x210 [ 85.706878][ T3323] kill_block_super+0x2a/0x70 [ 85.711563][ T3323] ext4_kill_sb+0x42/0x80 [ 85.715879][ T3323] deactivate_locked_super+0x72/0x1c0 [ 85.721245][ T3323] deactivate_super+0x97/0xa0 [ 85.725913][ T3323] cleanup_mnt+0x269/0x2e0 [ 85.730322][ T3323] __cleanup_mnt+0x19/0x20 [ 85.734746][ T3323] task_work_run+0x12e/0x1a0 [ 85.739329][ T3323] exit_to_user_mode_loop+0xe4/0x100 [ 85.744604][ T3323] do_syscall_64+0x1d6/0x200 [ 85.749178][ T3323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.755065][ T3323] [ 85.757370][ T3323] value changed: 0x1f -> 0x01 [ 85.762024][ T3323] [ 85.764328][ T3323] Reported by Kernel Concurrency Sanitizer on: [ 85.770471][ T3323] CPU: 1 UID: 0 PID: 3323 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 85.783046][ T3323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.793186][ T3323] ==================================================================