last executing test programs: 4.529981612s ago: executing program 1 (id=1081): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.173969908s ago: executing program 1 (id=1073): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 2.891910127s ago: executing program 1 (id=1077): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 2.812298168s ago: executing program 4 (id=1078): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000000)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000002680)='./file2\x00', 0x2000c12, &(0x7f0000000340)={[{@utf8}, {@gid}, {@cruft}, {@nojoliet}, {}, {@session={'session', 0x3d, 0xc}}, {@hide}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@mode={'mode', 0x3d, 0x94b}}, {@check_relaxed}, {@hide}, {@unhide}]}, 0x4, 0xa10, &(0x7f0000002780)="$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") r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5404, 0x0, 0x2) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x3) 2.525638532s ago: executing program 4 (id=1083): pipe2$9p(0x0, 0xc040) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffff4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) io_uring_enter(0xffffffffffffffff, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './bus\x00'}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000000380)=""/189, 0x8) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) 2.445683134s ago: executing program 2 (id=1084): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000001040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) 1.725510794s ago: executing program 1 (id=1086): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) lstat(0x0, &(0x7f0000000340)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) lstat(0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, 0x0, r3, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getgid() 1.724926074s ago: executing program 2 (id=1099): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x9}, @in6={0xa, 0x4e23, 0x7, @loopback, 0xec7}], 0x38) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 1.631918856s ago: executing program 1 (id=1087): syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000740)='./file0\x00', 0x0, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@jqfmt_vfsv0}]}, 0xfd, 0x279, &(0x7f0000000780)="$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") mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) socket$inet(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 1.631431686s ago: executing program 4 (id=1088): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x48401) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40, 0x101) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 1.612498816s ago: executing program 0 (id=1090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) symlink(&(0x7f0000000c00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000c80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000001a80)=ANY=[@ANYBLOB="130000000040e8fe00000006007656a518025c6af5751501000018110000088cdcf1ba0680258e134e0f6e4515b3c6666f455831f04dd5ce63cf4951d49a", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0xab9d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open_tree(0xffffffffffffffff, &(0x7f0000001cc0)='./file0\x00', 0x80800) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0) 1.611600956s ago: executing program 4 (id=1091): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x102, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0004bc01215200c7d318b468c37d061759c5bc5faf8112da0db0373893f48a4c77fc87c27bfacdf973e29c4a4d20641044ce2793a305ba6987d79e9af0583b1d776c789cebe68d6aa558154da06a566fcc0f634bf8244439c533c75fac567ca394fd3e02166edb7c6accc7a138f7d1ea"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_emit_ethernet(0x46, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.574362207s ago: executing program 0 (id=1093): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000280)={[{@prjquota}, {@resuid={'resuid', 0x3d, r0}}, {@journal_path={'journal_path', 0x3d, './bus'}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsv1}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUvyMZ/KYYUgyMAlkIPMglh8MsWdmM6uZWQSGCXTTQuraiutatowlp7EJ1Gl3WXRRWlooXXRZ6D/QbppVQ6F03e5LFiWlTV1oCwUVXUmO/JArGjsC398PbnTuOTf6zrH4jq+OrnUDSK1ztX8yEUMR8UlEHKvvbj3gXP1h48HN6dqWiWr1yleZ5LjafvPQ5v87GhHrEdEfEf//d8QzmZ1xy6tr81PFYmG5sZ+vLCzly6trF+cWpmYLs4XF0YlLk5MTI+Njk/s21tsvP3f78vv/7X33u5fu333lww9q3RpqtLWOYz/Vh94TJ1rqjkTEPw8iWBfkGuMZ6HZH+EVqr99vIuJ8kv/HIpe8mkAaVKvV6o/VvnbN61Xg0Mom58CZ7HBE1MvZ7PBw/Rz+tzGYLZbKlb9eK60sztTPlY9HT/baXLEw0nivcDx6MrX90aT8cH9s2/54RHIO/GpuINkfni4VZx7vVAdsc3Rb/n+bq+c/kBLe8kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q+p9L/Ll2tbtfn37zPXV1fmS9cvzhTK88MLK9PD06XlGJ4t9b3X2fMVS6Wl0b/Fyo18pVCu5Mura1cXSiuLlatzC1OzvVHoOeDxAJ07cfbOZ5mIWP/7QLLV9Dba5CocbtUX6t8BAKRPrtsTENA1lv4gvbzHB3b5it4t+ts1LD1S1J8LCxygbLc7AHTNhdM+/4O0sv4P6WX9H9Jr6zm+swFIo+6s/wPdZP0f0muo5f4/mZb7f/2q5d5dIxHx64j4NNfT17zXF3AYZL/INHL/wrE/Dm1v7c18nywK9EbE829eef3GVKWyPFqr/3qzvvJGvb63G90HOpbk71jj0S9yAEi1jQc3p5vbZuXxg4/75b/qFyHsjH+ksTbZn3xGObiR2XKtQmafrl1YvxURp3aLn2nc77z+ycfgRm5H/JONx0z9KZL+Hknum/4o8e+902n80y3x/9AS/8wj/1QgHe7U5p+R3fI/m+R0bObf1vlnaJ+uj24//2U3579cm/nvbIcxnn3rxXtt49+KOLNr/Ga8/iTW9vi1vl3oMP79p574Xbu26tv159ktflOtlK8sLOXLq2sX5xamZguzhcXRiUuTkxMj42OT+WSNOt9cqd7pH6c+vrvX+AfbxN9r/LW6P3c4/h9+/9GT5/aI/6fzu7/+J/eIPxARf+kw/jdjnz/drq0Wf6bN+LPb47cs8NXqxjuMX37tP30dHgoAPAbl1bX5qWKxsKygoKCwWej2zAQctIdJ3+2eAAAAAAAAAAAAAJ16HJcTd3uMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHwU8BAAD//zAx0oQ=") renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2082, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4100}, {r4, 0x100}, {r3, 0x71c9}, {r2, 0x4288}, {r3, 0x34c}], 0x5, &(0x7f0000000a80)={0x0, 0x3938700}, &(0x7f0000001080)={[0x2]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.527189927s ago: executing program 0 (id=1094): syz_io_uring_setup(0x13c4, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x1}, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) tkill(r0, 0x8) socket$inet6(0xa, 0x3, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd50, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.025080325s ago: executing program 0 (id=1101): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7ffe, 0x40024e}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x2d50, &(0x7f0000001480)={0x0, 0xc9b0, 0x1, 0x80004, 0x224, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0xfc) 918.189716ms ago: executing program 0 (id=1102): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) write$vga_arbiter(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472796c6f636b20696f006f16e5e721ea9e256ce2f0e8ef76cd2c43d278f06067dda56d6334f43298f54c40aca7843f4d6a87ad03debff57d88bb1c86d7cfaa099bbf061b4091b6ddfdcfe3638e3b8ae5fc615c0c1e6fd1361ade934b3172f8da18d8e7b5282a13da5c56e0f6f7ce6560f2462ff0b5257c1ebdafe6c11338db4dc179d9085f2b348c08f28bbb658f15dfcc00d07c6f22f097756b2f5c1558b133412c5ee926a8a9338d08ef9a4402086f13498184a23fe37669eafd35fdc5ef6c2e72b8ef1b3c7916c9bc0d40ef09dead00000000"], 0xb) io_setup(0x6, &(0x7f0000001380)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) close(r1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "ffffffffffffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", "dd959210", "00f700"}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/resume', 0xa00c0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) 785.170378ms ago: executing program 1 (id=1104): pipe2$9p(0x0, 0xc040) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffff4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) io_uring_enter(0xffffffffffffffff, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './bus\x00'}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000000380)=""/189, 0x8) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) 708.07761ms ago: executing program 4 (id=1106): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0x40045304, &(0x7f0000000300)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) tkill(r0, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 706.2709ms ago: executing program 0 (id=1115): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 470.355403ms ago: executing program 4 (id=1107): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) flock(r0, 0x5) r1 = gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) 469.741683ms ago: executing program 3 (id=1118): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000080)=""/30, 0x1e}, {0x0}], 0x2, 0x1, 0x32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f00000004c0)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r5, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x2000800) getuid() 447.743754ms ago: executing program 3 (id=1108): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a04, 0x0, @perf_bp={0x0}, 0x1e005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000006280)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000d00)}, {&(0x7f0000000280)="20c9006de6e65a7f6a5a42aa6abb95cc561623a6bf8ffe608964205639ec6eecbbe5d9352cb8118ccdfefbb4754912ddbee0825d2de6dc55ff921e30a8e1ce5a4a1c3924fd87affe995f1be2349bcc1c7dca46cae010e3f490eb195032c2bc15af889b1356fb4bc2a1182be956df4f890cc5914293ad89deef9fa070726f3311b990007ece1fa244e08f926095edf3adf2041eeff6ed04fb078c4a3828c42409f023410d9e4e5e2744fbef73feaac1bc9ad0ead61c69d22b958634924a8dcf11a327e84f47", 0xc5}, {&(0x7f0000000580)="8287ca7ba57fef14946961b493a9c63b47b65a38c55921972462772038718d75a37cbdfd8770c7efea4616f243a5f4b05bb4e3cd458771e2fc9a1f82a6e735f409491bc33bf0a8a8d0c9422b09ce1507630c45c45c37b06eba024e9a67b0cbe6b66a01af1c23bf4523aea78e9a25109f2c470757ed4dd0ca65d6216210", 0x7d}, {&(0x7f0000000380)="5bca09232b5f61b8bfc86131002dfc6c2b96ceac279ab550437f933be1032a68b7a7d8857f6c4df76fbe987b3c69d67ef7c4426cf7a8d711773ed60c1eda8e7deb5e2ab2076660f895821c7285ec2ff8fc39f06e1e101211e75d495715546cab8d24dd16b4913d5aca1c67967a4f78b0ce3cc6c2f9164b401bafed79ef5443", 0x7f}, {&(0x7f0000002000)="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", 0xff0}, {&(0x7f00000066c0)="f77269eed8173bc89b95a151846f22854bfd55fc4355b6fdb412d53e1c3fdaac67f5b07964b8b9128794b7c734614a484843bd2849bebbe8d3e124a41a83a5fb71bf0cd8c1b4ab5255d3ac034593d7f27ba453dc1dc9807df4bf042951b4e78d2f57263f6ad8bd113423facfe7e28081b0952ece38290ecc01d9b56e3e5536934cf7bf7a62bfb367c27495c61211d7162dc039c7a6d0e19a1e1f62f29c59bd31681fcae975129098a4787e600e63417ad38d25758a45af642a240a5eed27bebf0645f79aa82780a0118c4b9efe5c09ade48ebacf839a1ee62cd646", 0xdb}], 0x6}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000004000)}, {&(0x7f0000000180)="91f38bd91af13d579a47d2c9b63ec8259ff6c466ca373135d21179c259e002546ce74fd74a77c69c89", 0x29}], 0x2, &(0x7f0000004100)}}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000004200)="44cf9047401647c24fa40ce70c51fa50417a02abd6d768945d5fa088e9c0325c879e65294ce4b3016d6a9fe1af634024fdb02eb781a698", 0x37}, {&(0x7f00000042c0)}, {&(0x7f0000004300)}], 0x3, &(0x7f0000004580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xbc}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x17}, @empty}}}], 0x60}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000006000)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000006140)=[{0x0}], 0x1}}], 0x6, 0x40080d0) shutdown(r1, 0x1) 427.156104ms ago: executing program 3 (id=1109): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt(r0, 0x5, 0x0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = fsopen(0x0, 0x1) fsmount(r4, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x14800, 0x0) ptrace(0x10, r2) ptrace$cont(0x7, r2, 0x1000000082, 0x0) sendmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000001500), 0x0, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001540)="a3fb692c31f2c387b58baa2739e1b981626b93ef8ed38d363ccb48b70dfbcdfd5738f9c9138fbd80b5057a9525cebcaae67af60041fb8dd065a66ffb1abacf90cc502b936e6bccb2c599bd18dc685471a2316bd3ee62f57ff2c7b80a143bf72d27b4ffd818550f0db0fc7eea1301fc4f6f0f109870f94573e7f460ac126bb5facaad482850793dad394d41f6ed37ea35cb5f14449523ed6c47cb4b66e34918fa71875cb85eba5d3799b000b67f8b", 0xae}, {&(0x7f00000016c0)="317e9426c93a328c88a29ba5bfe1d1d9a20352e2d3cc4f4acf1a885adabdf1d983f970af7c4ab6630fe71ab22708f4e65320fc9f74df93a3cf56a89bd54cb56c95bc66075e4a3f065c9936ace73051c12001182eeea7d91382ab9a8cbf3dc0ea62e62ab95377c67be301ff015c3a12944a9dfe81e582d330e49d", 0x7a}, {0x0}, {&(0x7f00000027c0)}, {&(0x7f0000002a80)="7297635c6bcd69ac8b2d8028fab77d859d376eb7fca6393a94dbd7aec024f3c9b7e40745eacf64c671a888c0058f6b", 0x2f}], 0x5, &(0x7f0000002980)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x24}}], 0x2, 0x2400c0c1) 391.548984ms ago: executing program 3 (id=1110): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bc3f95ab48b028f042eda08f0b06d2cf61cdee19222135b81d"], 0xfd, 0x1e8, &(0x7f0000000c80)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x290) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) getpid() mmap(&(0x7f00002ca000/0x2000)=nil, 0x2000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 317.454306ms ago: executing program 2 (id=1111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syslog(0x2, 0x0, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040084) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x11, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0xd}, 0x104010, 0x0, 0x0, 0x4, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}}, 0x14) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x7, {{0x2, 0x4e20, @private=0xa010100}}}, 0x88) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0xfffff, r3) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbe936e5922f9c00110101c225a07e3886a628b268817e1a3581cccc34d9a0112d54a55e10d02b7c1c59d56495e3fc7b5e3900d314b3ffb4fd79c56d5875c108de8964991229dc9e16b796b9e3874becec789cbdc54cb0f122face190f392d428fd75224761277063536ffe367f5626f104f948441108eca5ac5ec1c00000000000000000000000065ce5db0ecb9371d8000"], &(0x7f0000000100)={0x1, 0x4, [0xef1, 0x7ac, 0x81c, 0x2ae]}) 265.735026ms ago: executing program 3 (id=1112): r0 = socket$nl_audit(0x10, 0x3, 0x9) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x7f, @rand_addr=0x64010100}, 0x2, 0x3, 0x3, 0x3}}, 0x26) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000001c0)=0x6, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@local, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x633, 0x0, 0x80000008, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@local, 0x4d2, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x5, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 264.806826ms ago: executing program 2 (id=1113): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000a40)=""/4104, 0x1008}, {&(0x7f0000000940)=""/223, 0xdf}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 62.366419ms ago: executing program 2 (id=1114): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) write$vga_arbiter(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472796c6f636b20696f006f16e5e721ea9e256ce2f0e8ef76cd2c43d278f06067dda56d6334f43298f54c40aca7843f4d6a87ad03debff57d88bb1c86d7cfaa099bbf061b4091b6ddfdcfe3638e3b8ae5fc615c0c1e6fd1361ade934b3172f8da18d8e7b5282a13da5c56e0f6f7ce6560f2462ff0b5257c1ebdafe6c11338db4dc179d9085f2b348c08f28bbb658f15dfcc00d07c6f22f097756b2f5c1558b133412c5ee926a8a9338d08ef9a4402086f13498184a23fe37669eafd35fdc5ef6c2e72b8ef1b3c7916c9bc0d40ef09dead00000000"], 0xb) io_setup(0x6, &(0x7f0000001380)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) close(r1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "ffffffffffffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", "dd959210", "00f700"}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/resume', 0xa00c0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) 34.01515ms ago: executing program 3 (id=1116): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) 0s ago: executing program 2 (id=1117): r0 = gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) timerfd_create(0x8, 0x80000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) read(r2, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000140)={{0xfb}, 'port1\x00', 0xc0, 0x50000, 0x1, 0x4, 0x7, 0x3ffc000, 0xe8, 0x0, 0x5, 0x1b}) tkill(r0, 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112920000000000bf200000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x40000a, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): yz.0.159: attempt to access beyond end of device [ 38.999162][ T3889] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 39.016221][ T3889] syz.0.159: attempt to access beyond end of device [ 39.016221][ T3889] loop0: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 39.268717][ T3885] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.304451][ T3885] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 39.316822][ T3885] EXT4-fs (loop2): This should not happen!! Data will be lost [ 39.316822][ T3885] [ 39.326528][ T3885] EXT4-fs (loop2): Total free blocks count 0 [ 39.332566][ T3885] EXT4-fs (loop2): Free/Dirty block details [ 39.338462][ T3885] EXT4-fs (loop2): free_blocks=2415919104 [ 39.344598][ T3885] EXT4-fs (loop2): dirty_blocks=8224 [ 39.349925][ T3885] EXT4-fs (loop2): Block reservation details [ 39.355956][ T3885] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 39.379112][ T3885] syz.2.157 (3885) used greatest stack depth: 9512 bytes left [ 39.392840][ T3444] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 39.466206][ T3921] tipc: Enabled bearer , priority 0 [ 39.473553][ T3921] syzkaller0: entered promiscuous mode [ 39.479126][ T3921] syzkaller0: entered allmulticast mode [ 39.489029][ T3921] tipc: Resetting bearer [ 39.496611][ T3920] tipc: Resetting bearer [ 39.521291][ T3923] loop4: detected capacity change from 0 to 2048 [ 39.543345][ T3920] tipc: Disabling bearer [ 39.603016][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 39.603029][ T29] audit: type=1400 audit(1747221240.656:620): avc: denied { audit_write } for pid=3924 comm="syz.2.171" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 39.632245][ T3298] loop4: p1 < > p4 [ 39.705047][ T3298] loop4: p4 size 8388608 extends beyond EOD, truncated [ 39.715011][ T3923] loop4: p1 < > p4 [ 39.722331][ T3923] loop4: p4 size 8388608 extends beyond EOD, truncated [ 39.761281][ T3929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.175'. [ 39.783910][ T29] audit: type=1107 audit(1747221240.756:621): pid=3924 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='@' [ 39.939461][ T29] audit: type=1400 audit(1747221240.986:622): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.201511][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 40.215840][ T3943] udevd[3943]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 40.239129][ T29] audit: type=1326 audit(1747221241.286:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 40.262466][ T29] audit: type=1326 audit(1747221241.286:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 40.285716][ T29] audit: type=1326 audit(1747221241.286:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 40.308949][ T29] audit: type=1326 audit(1747221241.286:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 40.332234][ T29] audit: type=1326 audit(1747221241.286:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 40.355678][ T29] audit: type=1326 audit(1747221241.286:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 40.403428][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 40.415920][ T29] audit: type=1326 audit(1747221241.296:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 40.421750][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 40.533697][ T3962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.549660][ T3964] loop2: detected capacity change from 0 to 1024 [ 40.556193][ T3962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.576004][ T3964] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.188: Failed to acquire dquot type 0 [ 40.590854][ T3964] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 40.606002][ T3964] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.188: corrupted inode contents [ 40.615503][ T3394] hid (null): unknown global tag 0x93 [ 40.623739][ T3394] hid (null): unknown global tag 0xe [ 40.633041][ T3964] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.188: mark_inode_dirty error [ 40.645678][ T3394] hid-generic 0000:0401:0006.0001: unexpected long global item [ 40.654787][ T3964] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.188: corrupted inode contents [ 40.660076][ T3971] loop0: detected capacity change from 0 to 2048 [ 40.666832][ T3394] hid-generic 0000:0401:0006.0001: probe with driver hid-generic failed with error -22 [ 40.684587][ T3964] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.188: mark_inode_dirty error [ 40.697212][ T3964] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.188: corrupted inode contents [ 40.711359][ T3964] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 40.720690][ T3964] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.188: corrupted inode contents [ 40.738864][ T3964] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.188: mark_inode_dirty error [ 40.755112][ T3971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.767630][ T3964] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 40.777592][ T3971] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.796997][ T3964] EXT4-fs (loop2): 1 truncate cleaned up [ 40.805382][ T3964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.846648][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.846652][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.131207][ T4001] loop0: detected capacity change from 0 to 1024 [ 41.138404][ T4001] journal_path: Lookup failure for './file0' [ 41.144554][ T4001] EXT4-fs: error: could not find journal device path [ 41.155238][ T4001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 41.288393][ T3983] loop2: detected capacity change from 0 to 512 [ 41.337988][ T4007] netlink: 'syz.0.206': attribute type 33 has an invalid length. [ 41.345918][ T4007] netlink: 152 bytes leftover after parsing attributes in process `syz.0.206'. [ 41.357703][ T4007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 41.558540][ T4014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.784505][ T4014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.027375][ T4025] loop0: detected capacity change from 0 to 512 [ 42.066637][ T4025] SELinux: security_context_str_to_sid (sysadm_uaudit,dont_hash,fowner>00000000000000000000,hash,,errors=continue) failed with errno=-22 [ 42.201865][ T4028] syzkaller0: entered allmulticast mode [ 42.207647][ T4028] syzkaller0: entered promiscuous mode [ 42.232222][ T4028] syzkaller0 (unregistering): left promiscuous mode [ 42.238909][ T4028] syzkaller0 (unregistering): left allmulticast mode [ 42.247522][ T4012] Set syz1 is full, maxelem 65536 reached [ 42.248492][ T4029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 42.262157][ T4029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 42.348172][ T4036] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.374179][ T4038] loop2: detected capacity change from 0 to 1024 [ 42.382876][ T4038] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.392594][ T4038] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.405025][ T4038] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 42.413422][ T4038] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.413999][ T4036] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.421299][ T4038] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 42.440425][ T4038] EXT4-fs (loop2): Remounting filesystem read-only [ 42.447128][ T4038] EXT4-fs (loop2): 1 orphan inode deleted [ 42.453775][ T4038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.474373][ T4036] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.510133][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.591818][ T4036] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.607408][ T4052] loop2: detected capacity change from 0 to 256 [ 42.614534][ T4052] msdos: Unknown parameter '¼?•«H°(ðBí  ÒÏaÍî"!5¸' [ 42.723459][ T4055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4055 comm=syz.0.223 [ 43.112119][ T4066] vhci_hcd: default hub control req: 2007 v0005 i0001 l20 [ 43.394884][ T4036] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.524129][ T4036] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.578394][ T4036] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.616703][ T4070] netlink: 72 bytes leftover after parsing attributes in process `syz.3.228'. [ 43.625746][ T4070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 43.635671][ T4060] wireguard0: entered promiscuous mode [ 43.641405][ T4060] wireguard0: entered allmulticast mode [ 43.654019][ T4036] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.725047][ T4079] loop4: detected capacity change from 0 to 1024 [ 43.733382][ T4079] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 43.743212][ T4079] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 43.754337][ T4079] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 43.766433][ T4079] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #5: comm syz.4.233: unexpected bad inode w/o EXT4_IGET_BAD [ 43.781001][ T4079] EXT4-fs (loop4): no journal found [ 43.786299][ T4079] EXT4-fs (loop4): can't get journal size [ 43.797120][ T4079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.828128][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.949573][ T4094] loop2: detected capacity change from 0 to 2048 [ 43.994677][ T4094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.071584][ T4094] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 44.083917][ T4094] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.083917][ T4094] [ 44.093617][ T4094] EXT4-fs (loop2): Total free blocks count 0 [ 44.099691][ T4094] EXT4-fs (loop2): Free/Dirty block details [ 44.105601][ T4094] EXT4-fs (loop2): free_blocks=0 [ 44.110567][ T4094] EXT4-fs (loop2): dirty_blocks=0 [ 44.115651][ T4094] EXT4-fs (loop2): Block reservation details [ 44.121757][ T4094] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 44.304195][ T4108] netlink: 36 bytes leftover after parsing attributes in process `syz.4.242'. [ 44.341697][ T4108] bridge0: port 3(vlan2) entered blocking state [ 44.348000][ T4108] bridge0: port 3(vlan2) entered disabled state [ 44.394717][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.408910][ T4108] vlan2: entered allmulticast mode [ 44.415448][ T4108] vlan2: entered promiscuous mode [ 44.680637][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 44.680655][ T29] audit: type=1400 audit(1747221245.726:789): avc: denied { setopt } for pid=4112 comm="syz.2.243" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.800091][ T4120] loop3: detected capacity change from 0 to 512 [ 44.806647][ T29] audit: type=1326 audit(1747221245.846:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 44.829922][ T29] audit: type=1326 audit(1747221245.846:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 44.853239][ T29] audit: type=1326 audit(1747221245.846:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 44.876543][ T29] audit: type=1326 audit(1747221245.846:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 44.899904][ T29] audit: type=1326 audit(1747221245.846:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 44.923211][ T29] audit: type=1326 audit(1747221245.846:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 44.946553][ T29] audit: type=1326 audit(1747221245.846:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 44.969853][ T29] audit: type=1326 audit(1747221245.846:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcc59fae9a3 code=0x7ffc0000 [ 44.980811][ T4120] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.992890][ T29] audit: type=1400 audit(1747221245.846:798): avc: denied { create } for pid=4114 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.045415][ T4120] EXT4-fs (loop3): 1 truncate cleaned up [ 45.059949][ T4120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.091034][ T4129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.250'. [ 45.113636][ T4129] bridge_slave_0: left allmulticast mode [ 45.119392][ T4129] bridge_slave_0: left promiscuous mode [ 45.125006][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.137864][ T4129] bridge_slave_1: left allmulticast mode [ 45.143827][ T4129] bridge_slave_1: left promiscuous mode [ 45.149616][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.172127][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.233365][ T4129] : (slave bond_slave_0): Releasing backup interface [ 45.262589][ T4129] : (slave bond_slave_1): Releasing backup interface [ 45.275945][ T4129] team0: Port device team_slave_0 removed [ 45.313361][ T4129] team0: Port device team_slave_1 removed [ 45.321227][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.328659][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.343414][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.350874][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.372133][ T4129] vlan2: left allmulticast mode [ 45.377099][ T4129] vlan2: left promiscuous mode [ 45.382464][ T4129] bridge0: port 3(vlan2) entered disabled state [ 46.111911][ T4150] ref_ctr_offset mismatch. inode: 0xff offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xee0000000000 [ 46.124932][ T4150] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 46.133317][ T4150] ref_ctr decrement failed for inode: 0xff offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88812396d800 [ 46.174875][ T4150] uprobe: syz.1.258:4150 failed to unregister, leaking uprobe [ 46.257930][ T4159] loop3: detected capacity change from 0 to 128 [ 46.324373][ T4159] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.337752][ T4159] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.390176][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.436248][ T4168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.265'. [ 46.458499][ T4168] bridge_slave_0: left allmulticast mode [ 46.464265][ T4168] bridge_slave_0: left promiscuous mode [ 46.470027][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.485570][ T4168] bridge_slave_1: left allmulticast mode [ 46.491359][ T4168] bridge_slave_1: left promiscuous mode [ 46.497020][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.507981][ T4168] bond0: (slave bond_slave_0): Releasing backup interface [ 46.518087][ T4168] bond0: (slave bond_slave_1): Releasing backup interface [ 46.535073][ T4168] team0: Port device team_slave_0 removed [ 46.554904][ T4168] team0: Port device team_slave_1 removed [ 46.563532][ T4168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.571129][ T4168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.581205][ T4168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.588655][ T4168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.653041][ T4175] wireguard0: entered promiscuous mode [ 46.658574][ T4175] wireguard0: entered allmulticast mode [ 46.755441][ T4183] loop3: detected capacity change from 0 to 2048 [ 46.809730][ T3298] Alternate GPT is invalid, using primary GPT. [ 46.816136][ T3298] loop3: p1 p2 p3 [ 46.824180][ T4187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 46.836217][ T4183] Alternate GPT is invalid, using primary GPT. [ 46.842536][ T4183] loop3: p1 p2 p3 [ 46.889475][ T4189] xt_hashlimit: size too large, truncated to 1048576 [ 47.005119][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 47.017305][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 47.028166][ T3943] udevd[3943]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 47.233574][ T4205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 47.244110][ T4207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.253154][ T4207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.270547][ T4207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'. [ 47.274327][ T4209] 9pnet: Could not find request transport: f [ 47.279463][ T4207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'. [ 47.291333][ T4207] syz_tun: entered promiscuous mode [ 47.320979][ T4207] batadv_slave_1: entered promiscuous mode [ 47.335509][ T4207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'. [ 47.344557][ T4207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'. [ 47.689275][ T4221] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 47.695829][ T4221] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 47.703505][ T4221] vhci_hcd vhci_hcd.0: Device attached [ 47.718837][ T4222] vhci_hcd: connection closed [ 47.719264][ T3444] vhci_hcd: stop threads [ 47.728329][ T3444] vhci_hcd: release socket [ 47.732801][ T3444] vhci_hcd: disconnect device [ 47.751237][ T4224] wireguard0: entered promiscuous mode [ 47.756704][ T4224] wireguard0: entered allmulticast mode [ 47.953245][ T4228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.286'. [ 47.976955][ T4228] bond0: (slave bond_slave_0): Releasing backup interface [ 47.977789][ T4230] loop4: detected capacity change from 0 to 512 [ 48.009168][ T4228] bond0: (slave bond_slave_1): Releasing backup interface [ 48.016884][ T4230] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 48.030636][ T4228] team0: Port device team_slave_0 removed [ 48.037330][ T4230] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 48.055612][ T4230] System zones: 1-12 [ 48.059804][ T4230] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.066152][ T4230] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.287: Inode bitmap for bg 0 marked uninitialized [ 48.091312][ T4228] team0: Port device team_slave_1 removed [ 48.103429][ T4230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.145938][ T4228] team0: Port device geneve1 removed [ 48.191003][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 48.216541][ T4233] hsr_slave_0 (unregistering): left promiscuous mode [ 48.297491][ T4238] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 5: comm syz.4.287: lblock 0 mapped to illegal pblock 5 (length 1) [ 48.350784][ T4238] EXT4-fs warning (device loop4): dx_probe:793: inode #2: lblock 0: comm syz.4.287: error -117 reading directory block [ 48.415213][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 48.599282][ T4230] Set syz1 is full, maxelem 65536 reached [ 48.681660][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.931349][ T4266] 0ªX¹¦À: renamed from caif0 [ 48.947737][ T4266] 0ªX¹¦À: entered allmulticast mode [ 48.953039][ T4266] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 49.162353][ T4275] tipc: New replicast peer: 255.255.255.255 [ 49.168451][ T4275] tipc: Enabled bearer , priority 10 [ 49.236775][ T4277] loop3: detected capacity change from 0 to 2048 [ 49.262821][ T4282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49405 sclass=netlink_route_socket pid=4282 comm=syz.0.307 [ 49.377151][ T4293] bridge_slave_0: left allmulticast mode [ 49.383009][ T4293] bridge_slave_0: left promiscuous mode [ 49.388729][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.402347][ T4277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.416312][ T4293] bridge_slave_1: left allmulticast mode [ 49.422026][ T4293] bridge_slave_1: left promiscuous mode [ 49.427899][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.457215][ T4293] bond0: (slave bond_slave_0): Releasing backup interface [ 49.480092][ T4293] bond0: (slave bond_slave_1): Releasing backup interface [ 49.496015][ T4293] team0: Port device team_slave_0 removed [ 49.511840][ T3321] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 49.515692][ T4293] team0: Port device team_slave_1 removed [ 49.540366][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.547816][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.626559][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.634165][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.672035][ T4303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.692647][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 49.692663][ T29] audit: type=1400 audit(1747221250.656:955): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 49.719193][ T29] audit: type=1326 audit(1747221250.656:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f19133ee969 code=0x7ffc0000 [ 49.763388][ T4303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.818466][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.951489][ T29] audit: type=1400 audit(1747221250.836:957): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.973931][ T29] audit: type=1400 audit(1747221250.836:958): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 50.224423][ T29] audit: type=1400 audit(1747221251.066:959): avc: denied { create } for pid=4304 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.571556][ T29] audit: type=1400 audit(1747221251.626:960): avc: denied { bind } for pid=4316 comm="syz.4.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.590999][ T29] audit: type=1400 audit(1747221251.626:961): avc: denied { name_bind } for pid=4316 comm="syz.4.319" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 50.611732][ T29] audit: type=1400 audit(1747221251.626:962): avc: denied { node_bind } for pid=4316 comm="syz.4.319" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.698932][ T29] audit: type=1400 audit(1747221251.696:963): avc: denied { read } for pid=4316 comm="syz.4.319" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.719388][ T29] audit: type=1400 audit(1747221251.706:964): avc: denied { create } for pid=4321 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 50.784461][ T4326] program syz.0.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.804370][ T4326] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 50.812703][ T4326] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 50.999413][ T4335] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.007796][ T4335] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.016076][ T4335] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.024271][ T4335] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.047098][ T4335] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.055616][ T4335] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.064013][ T4335] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.072448][ T4335] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.224202][ T4340] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.276003][ T4340] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.362910][ T4340] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.405432][ T4348] netlink: 'syz.4.330': attribute type 1 has an invalid length. [ 51.424403][ T4340] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.477408][ T4352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.498640][ T4352] bond0: (slave bond1): making interface the new active one [ 51.513269][ T4352] bond0: (slave bond1): Enslaving as an active interface with an up link [ 51.532982][ T4340] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.546198][ T4348] macsec1: entered promiscuous mode [ 51.551477][ T4348] bond0: entered promiscuous mode [ 51.556521][ T4348] bond1: entered promiscuous mode [ 51.561778][ T4348] macsec1: entered allmulticast mode [ 51.567091][ T4348] bond0: entered allmulticast mode [ 51.572263][ T4348] bond1: entered allmulticast mode [ 51.583632][ T4340] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.596672][ T4340] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.622211][ T4340] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.095794][ T4375] syzkaller0: entered allmulticast mode [ 52.108843][ T4375] syzkaller0: entered promiscuous mode [ 52.118589][ T4375] syzkaller0 (unregistering): left promiscuous mode [ 52.125432][ T4375] syzkaller0 (unregistering): left allmulticast mode [ 52.496285][ T4384] loop1: detected capacity change from 0 to 512 [ 52.550928][ T4384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 52.563573][ T4384] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.381148][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 53.533808][ T4402] loop1: detected capacity change from 0 to 128 [ 53.545452][ T4404] __nla_validate_parse: 7 callbacks suppressed [ 53.545469][ T4404] netlink: 44 bytes leftover after parsing attributes in process `syz.0.351'. [ 53.600342][ T4402] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.635556][ T4402] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.685177][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.628296][ T4430] loop4: detected capacity change from 0 to 512 [ 54.679263][ T4430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.700547][ T4430] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.718298][ T4435] loop2: detected capacity change from 0 to 512 [ 54.744281][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 54.744296][ T29] audit: type=1400 audit(1747221255.786:1002): avc: denied { read write } for pid=4429 comm="syz.4.361" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.773008][ T29] audit: type=1400 audit(1747221255.786:1003): avc: denied { open } for pid=4429 comm="syz.4.361" path="/80/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.803272][ T4442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.363'. [ 54.804711][ T4435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.828984][ T4435] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.829501][ T4420] infiniband syz!: set down [ 54.845126][ T4420] infiniband syz!: added team_slave_0 [ 54.854791][ T29] audit: type=1400 audit(1747221255.856:1004): avc: denied { ioctl } for pid=4429 comm="syz.4.361" path="/80/bus/file1" dev="loop4" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.858271][ T4435] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.362: corrupted xattr block 19: overlapping e_value [ 54.879175][ T29] audit: type=1400 audit(1747221255.856:1005): avc: denied { ioctl } for pid=4433 comm="syz.1.354" path="socket:[8303]" dev="sockfs" ino=8303 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.879206][ T29] audit: type=1400 audit(1747221255.876:1006): avc: denied { sys_module } for pid=4433 comm="syz.1.354" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.981392][ T4435] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 55.005050][ T4435] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.362: corrupted xattr block 19: overlapping e_value [ 55.026989][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.037082][ T29] audit: type=1400 audit(1747221256.006:1007): avc: denied { ioctl } for pid=4432 comm="syz.2.362" path="socket:[7717]" dev="sockfs" ino=7717 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.039035][ T4435] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 55.087677][ T4448] IPv4: Oversized IP packet from 127.202.26.0 [ 55.087699][ T29] audit: type=1400 audit(1747221256.136:1008): avc: denied { execute } for pid=4432 comm="syz.2.362" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.117691][ T4435] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.362: corrupted xattr block 19: overlapping e_value [ 55.139285][ T4435] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 55.149649][ T4420] RDS/IB: syz!: added [ 55.154299][ T4420] smc: adding ib device syz! with port count 1 [ 55.161189][ T4420] smc: ib device syz! port 1 has pnetid [ 55.187634][ T4435] process 'syz.2.362' launched './file1' with NULL argv: empty string added [ 55.197399][ T4435] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.362: corrupted xattr block 19: overlapping e_value [ 55.212509][ T4450] netlink: 52 bytes leftover after parsing attributes in process `syz.4.365'. [ 55.230085][ T4435] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 55.249271][ T4435] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.362: corrupted xattr block 19: overlapping e_value [ 55.263867][ T29] audit: type=1400 audit(1747221256.306:1009): avc: denied { execute_no_trans } for pid=4432 comm="syz.2.362" path="/79/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.300680][ T4435] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 55.323743][ T4456] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 55.393441][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.426891][ T29] audit: type=1400 audit(1747221256.466:1010): avc: denied { setopt } for pid=4461 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.446332][ T29] audit: type=1400 audit(1747221256.466:1011): avc: denied { connect } for pid=4461 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.514055][ T4473] loop1: detected capacity change from 0 to 736 [ 55.546242][ T4473] rock: directory entry would overflow storage [ 55.552502][ T4473] rock: sig=0x5850, size=36, remaining=14 [ 55.720863][ T10] IPVS: starting estimator thread 0... [ 55.783782][ T4489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 55.808994][ T4484] IPVS: using max 2112 ests per chain, 105600 per kthread [ 55.917605][ T4495] tipc: Started in network mode [ 55.922569][ T4495] tipc: Node identity 8e7242057033, cluster identity 4711 [ 55.929847][ T4495] tipc: Enabled bearer , priority 0 [ 55.938861][ T4494] tipc: Resetting bearer [ 55.955803][ T4494] tipc: Disabling bearer [ 56.056795][ T4501] pim6reg1: entered promiscuous mode [ 56.062229][ T4501] pim6reg1: entered allmulticast mode [ 56.132456][ T4506] loop4: detected capacity change from 0 to 8192 [ 56.234187][ T4507] bridge0: entered promiscuous mode [ 56.239678][ T4507] macvlan2: entered promiscuous mode [ 56.245371][ T4507] bridge0: port 1(macvlan2) entered blocking state [ 56.251985][ T4507] bridge0: port 1(macvlan2) entered disabled state [ 56.272415][ T4507] macvlan2: entered allmulticast mode [ 56.277859][ T4507] bridge0: entered allmulticast mode [ 56.284325][ T4507] macvlan2: left allmulticast mode [ 56.289495][ T4507] bridge0: left allmulticast mode [ 56.307205][ T4507] bridge0: left promiscuous mode [ 56.471689][ T4509] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.486852][ T4512] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 56.502484][ T4511] loop2: detected capacity change from 0 to 512 [ 56.509103][ T4511] EXT4-fs: Ignoring removed i_version option [ 56.523966][ T4511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.538248][ T4511] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.560528][ T4509] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.615401][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.630475][ T4509] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.702381][ T4509] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.768711][ T4509] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.781735][ T4509] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.795322][ T4509] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.807496][ T4509] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.862234][ T4520] loop1: detected capacity change from 0 to 164 [ 56.872158][ T4520] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 56.882210][ T4523] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 56.890899][ T4520] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 56.901378][ T4520] Symlink component flag not implemented [ 56.907017][ T4520] Symlink component flag not implemented [ 56.913708][ T4520] Symlink component flag not implemented (7) [ 56.919804][ T4520] Symlink component flag not implemented (116) [ 56.956218][ T4526] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 56.963933][ T4526] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.394'. [ 56.980369][ T4527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 57.080103][ T4533] loop2: detected capacity change from 0 to 8192 [ 57.811200][ T4551] loop1: detected capacity change from 0 to 128 [ 57.868683][ T4551] vfat: Unknown parameter 'ÿÿ' [ 59.026532][ T4562] xt_hashlimit: size too large, truncated to 1048576 [ 59.383566][ T4573] loop3: detected capacity change from 0 to 1024 [ 59.391599][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 59.443690][ T4573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.453593][ T4573] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.470241][ T4573] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 59.505695][ T4573] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.410: lblock 2 mapped to illegal pblock 2 (length 1) [ 59.520643][ T4573] EXT4-fs (loop3): Remounting filesystem read-only [ 59.527660][ T4573] EXT4-fs (loop3): 1 orphan inode deleted [ 59.544842][ T4573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.565760][ T4573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.748943][ T29] kauditd_printk_skb: 1155 callbacks suppressed [ 59.748959][ T29] audit: type=1326 audit(1747221260.796:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc59f4ab39 code=0x7ffc0000 [ 59.778980][ T29] audit: type=1326 audit(1747221260.806:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc59fa5927 code=0x7ffc0000 [ 59.802316][ T29] audit: type=1326 audit(1747221260.806:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc59f4ab39 code=0x7ffc0000 [ 59.814397][ T4604] loop1: detected capacity change from 0 to 512 [ 59.826043][ T29] audit: type=1326 audit(1747221260.806:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc59fa5927 code=0x7ffc0000 [ 59.826073][ T29] audit: type=1326 audit(1747221260.806:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc59f4ab39 code=0x7ffc0000 [ 59.826102][ T29] audit: type=1326 audit(1747221260.806:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc59fa5927 code=0x7ffc0000 [ 59.826194][ T29] audit: type=1326 audit(1747221260.806:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc59f4ab39 code=0x7ffc0000 [ 59.826217][ T29] audit: type=1326 audit(1747221260.806:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc59fa5927 code=0x7ffc0000 [ 59.826284][ T29] audit: type=1326 audit(1747221260.806:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc59f4ab39 code=0x7ffc0000 [ 59.826340][ T29] audit: type=1326 audit(1747221260.806:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc59fa5927 code=0x7ffc0000 [ 59.996257][ T4604] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.004503][ T4604] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.016422][ T4604] EXT4-fs (loop1): 1 truncate cleaned up [ 60.023686][ T4604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.048928][ T4604] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 60.073645][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.136058][ T4619] lo speed is unknown, defaulting to 1000 [ 60.167279][ T4619] lo speed is unknown, defaulting to 1000 [ 60.180955][ T4619] lo speed is unknown, defaulting to 1000 [ 60.187640][ T4619] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 60.234002][ T4619] lo speed is unknown, defaulting to 1000 [ 60.241098][ T4619] lo speed is unknown, defaulting to 1000 [ 60.247468][ T4619] lo speed is unknown, defaulting to 1000 [ 60.254618][ T4619] lo speed is unknown, defaulting to 1000 [ 60.261321][ T4619] lo speed is unknown, defaulting to 1000 [ 60.362093][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 60.363182][ T4631] syzkaller0: entered promiscuous mode [ 60.376476][ T4631] syzkaller0: entered allmulticast mode [ 60.629505][ T4641] netlink: 'syz.2.427': attribute type 1 has an invalid length. [ 60.637179][ T4641] netlink: 224 bytes leftover after parsing attributes in process `syz.2.427'. [ 60.700705][ T4651] netlink: 'syz.3.432': attribute type 27 has an invalid length. [ 60.702111][ T4652] loop2: detected capacity change from 0 to 512 [ 60.722660][ T4652] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.427: bg 0: block 393: padding at end of block bitmap is not set [ 60.763344][ T4652] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 60.775034][ T4652] EXT4-fs (loop2): 2 truncates cleaned up [ 60.781363][ T4652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.805704][ T4651] 0ªX¹¦À: left allmulticast mode [ 60.886167][ T4651] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.895375][ T4651] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.904523][ T4651] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.913771][ T4651] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.959768][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.054882][ T4669] binfmt_misc: register: failed to install interpreter file ./file2 [ 61.223781][ T4672] loop2: detected capacity change from 0 to 8192 [ 61.269230][ T4672] loop2: p1 p3 p4 [ 61.273095][ T4672] loop2: p1 size 8390912 extends beyond EOD, truncated [ 61.280420][ T4672] loop2: p3 size 589824 extends beyond EOD, truncated [ 61.313951][ T4683] syzkaller0: entered promiscuous mode [ 61.319549][ T4683] syzkaller0: entered allmulticast mode [ 61.390810][ T4685] lo speed is unknown, defaulting to 1000 [ 61.521479][ T4700] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 61.657450][ T4712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 61.666742][ T4709] syzkaller0: entered promiscuous mode [ 61.666819][ T4709] syzkaller0: entered allmulticast mode [ 61.841802][ T4720] loop1: detected capacity change from 0 to 2048 [ 61.977990][ T4724] binfmt_misc: register: failed to install interpreter file ./file0 [ 61.990105][ T4720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.084430][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.153308][ T4729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.463'. [ 62.162247][ T4729] netlink: 16 bytes leftover after parsing attributes in process `syz.3.463'. [ 62.171155][ T4729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.463'. [ 62.191871][ T4731] loop1: detected capacity change from 0 to 512 [ 62.203439][ T4731] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.225174][ T4731] EXT4-fs (loop1): 1 truncate cleaned up [ 62.230977][ T4733] loop4: detected capacity change from 0 to 1024 [ 62.237511][ T4733] EXT4-fs: Ignoring removed nobh option [ 62.242448][ T4731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.260247][ T4729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.463'. [ 62.271162][ T4733] ext2: Unknown parameter 'dont_hash' [ 62.280243][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.309310][ T4733] loop4: detected capacity change from 0 to 128 [ 62.320993][ T4733] syz.4.464: attempt to access beyond end of device [ 62.320993][ T4733] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 62.345952][ T4738] loop1: detected capacity change from 0 to 512 [ 62.352963][ T4733] syz.4.464: attempt to access beyond end of device [ 62.352963][ T4733] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 62.401292][ T4733] syz.4.464: attempt to access beyond end of device [ 62.401292][ T4733] loop4: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 62.868651][ T4758] netlink: 'gtp': attribute type 7 has an invalid length. [ 62.875875][ T4758] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 63.041895][ T4769] netlink: 60 bytes leftover after parsing attributes in process `syz.1.477'. [ 63.190816][ T4787] bond1: entered promiscuous mode [ 63.195968][ T4787] bond1: entered allmulticast mode [ 63.201546][ T4787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.256068][ T4790] syzkaller0: entered promiscuous mode [ 63.261598][ T4790] syzkaller0: entered allmulticast mode [ 63.307344][ T4795] netlink: 'syz.2.487': attribute type 13 has an invalid length. [ 63.342161][ T4795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.394365][ T4800] pim6reg1: entered promiscuous mode [ 63.399868][ T4800] pim6reg1: entered allmulticast mode [ 63.517070][ T4807] syzkaller1: entered promiscuous mode [ 63.522699][ T4807] syzkaller1: entered allmulticast mode [ 63.607366][ T4809] loop2: detected capacity change from 0 to 1024 [ 63.614210][ T4809] EXT4-fs: Ignoring removed nobh option [ 63.619830][ T4809] EXT4-fs: Ignoring removed bh option [ 63.631026][ T4809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.685653][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.885476][ T4824] loop2: detected capacity change from 0 to 512 [ 63.899908][ T4824] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 63.907906][ T4824] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 63.916096][ T4824] System zones: 0-1, 15-15, 18-18, 34-34 [ 63.922123][ T4824] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.928860][ T4824] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 63.943618][ T4824] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 63.951241][ T4824] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.500: bg 0: block 40: padding at end of block bitmap is not set [ 63.966008][ T4824] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 63.974931][ T4824] EXT4-fs (loop2): 1 truncate cleaned up [ 63.981063][ T4824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.997680][ T4835] loop3: detected capacity change from 0 to 512 [ 64.005241][ T4835] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 64.015237][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.015822][ T4835] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.031517][ T4835] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.503: Block bitmap for bg 0 marked uninitialized [ 64.045059][ T4835] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 64.054676][ T4835] EXT4-fs (loop3): 1 orphan inode deleted [ 64.060845][ T4835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 64.086680][ T4835] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 64.097310][ T4839] syzkaller0: entered promiscuous mode [ 64.102810][ T4839] syzkaller0: entered allmulticast mode [ 64.108749][ T4835] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 64.130694][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.195880][ T4847] syzkaller0: entered allmulticast mode [ 64.203321][ T4847] syzkaller0: entered promiscuous mode [ 64.208850][ T4847] syzkaller0: left allmulticast mode [ 64.224089][ T4847] syzkaller0: left promiscuous mode [ 64.269741][ T4852] netlink: 'syz.4.510': attribute type 8 has an invalid length. [ 64.278275][ T4852] bridge0: entered allmulticast mode [ 64.300372][ T4852] loop4: detected capacity change from 0 to 512 [ 64.302097][ T4855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.318335][ T4852] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.323085][ T4857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.330581][ T4852] EXT4-fs (loop4): 1 truncate cleaned up [ 64.336939][ T4857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.350577][ T4852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.360588][ T4857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.392051][ T4855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.429556][ T4861] SELinux: failed to load policy [ 64.430542][ T4857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.464023][ T4863] ip6gre1: entered allmulticast mode [ 64.482920][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.483805][ T4865] loop2: detected capacity change from 0 to 512 [ 64.506206][ T4855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.532938][ T4871] loop4: detected capacity change from 0 to 1024 [ 64.540673][ T4865] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.542581][ T4871] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.517: Failed to acquire dquot type 0 [ 64.556158][ T4865] EXT4-fs (loop2): mount failed [ 64.567844][ T4871] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 64.586444][ T4871] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.517: corrupted inode contents [ 64.589703][ T4855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.603522][ T4871] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.517: mark_inode_dirty error [ 64.620038][ T4871] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.517: corrupted inode contents [ 64.632290][ T4871] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.517: mark_inode_dirty error [ 64.643745][ T4871] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.517: corrupted inode contents [ 64.655796][ T4871] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 64.664545][ T4871] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.517: corrupted inode contents [ 64.676511][ T4871] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.517: mark_inode_dirty error [ 64.691816][ T4871] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 64.704221][ T4855] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.717249][ T4871] EXT4-fs (loop4): 1 truncate cleaned up [ 64.723834][ T4855] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.732592][ T4871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.740823][ T4855] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.759108][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 64.759123][ T29] audit: type=1326 audit(1747221265.806:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 64.776734][ T4855] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.789316][ T4879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.811127][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.821114][ T29] audit: type=1326 audit(1747221265.856:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 64.838956][ T4879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.844460][ T29] audit: type=1326 audit(1747221265.856:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 64.875488][ T29] audit: type=1326 audit(1747221265.856:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 64.898999][ T29] audit: type=1326 audit(1747221265.856:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 64.922368][ T29] audit: type=1326 audit(1747221265.856:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 64.933976][ T4882] loop4: detected capacity change from 0 to 128 [ 64.945658][ T29] audit: type=1326 audit(1747221265.856:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 64.945688][ T29] audit: type=1326 audit(1747221265.856:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 64.998620][ T29] audit: type=1326 audit(1747221265.856:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 64.998718][ T29] audit: type=1326 audit(1747221265.856:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 65.003548][ T4882] syz.4.521: attempt to access beyond end of device [ 65.003548][ T4882] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 65.060752][ T4882] syz.4.521: attempt to access beyond end of device [ 65.060752][ T4882] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 65.079447][ T4882] syz.4.521: attempt to access beyond end of device [ 65.079447][ T4882] loop4: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 65.504547][ T4915] __nla_validate_parse: 3 callbacks suppressed [ 65.504561][ T4915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.534'. [ 65.520038][ T4915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.534'. [ 65.520680][ T4908] loop3: detected capacity change from 0 to 256 [ 65.533101][ T4915] team0: entered promiscuous mode [ 65.541186][ T4915] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 65.548822][ T4915] Cannot create hsr debugfs directory [ 65.558650][ T4915] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 65.573750][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 65.763365][ T4934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.543'. [ 65.808148][ T4936] loop3: detected capacity change from 0 to 512 [ 65.814856][ T4936] SELinux: security_context_str_to_sid (sysadm_uaudit,dont_hash,fowner>00000000000000000000,hash,,errors=continue) failed with errno=-22 [ 65.832982][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 65.841937][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 65.857642][ T4939] loop4: detected capacity change from 0 to 2048 [ 65.871695][ T4939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.187421][ T4950] lo speed is unknown, defaulting to 1000 [ 66.453835][ T4939] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 1 with error 28 [ 66.466142][ T4939] EXT4-fs (loop4): This should not happen!! Data will be lost [ 66.466142][ T4939] [ 66.475815][ T4939] EXT4-fs (loop4): Total free blocks count 0 [ 66.481801][ T4939] EXT4-fs (loop4): Free/Dirty block details [ 66.487687][ T4939] EXT4-fs (loop4): free_blocks=0 [ 66.492638][ T4939] EXT4-fs (loop4): dirty_blocks=0 [ 66.497717][ T4939] EXT4-fs (loop4): Block reservation details [ 66.503732][ T4939] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 66.511863][ T4953] netlink: 36 bytes leftover after parsing attributes in process `syz.2.548'. [ 66.523383][ T4953] bridge0: port 1(vlan0) entered blocking state [ 66.529881][ T4953] bridge0: port 1(vlan0) entered disabled state [ 66.537471][ T4953] vlan0: entered allmulticast mode [ 66.545926][ T4953] dummy0: entered allmulticast mode [ 66.552882][ T4953] vlan0: entered promiscuous mode [ 66.557939][ T4953] dummy0: entered promiscuous mode [ 66.587554][ T3392] hid (null): unknown global tag 0x93 [ 66.593044][ T3392] hid (null): unknown global tag 0xe [ 66.601222][ T3392] hid-generic 0000:0401:0006.0002: unexpected long global item [ 66.608914][ T3392] hid-generic 0000:0401:0006.0002: probe with driver hid-generic failed with error -22 [ 66.629721][ T4958] pim6reg1: entered promiscuous mode [ 66.635068][ T4958] pim6reg1: entered allmulticast mode [ 66.642633][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.787073][ T4964] lo speed is unknown, defaulting to 1000 [ 66.893302][ T2968] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.909028][ T2968] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.060655][ T2968] hid-generic 0021:0009:0000.0004: unknown main item tag 0x0 [ 67.068118][ T2968] hid-generic 0021:0009:0000.0004: unknown main item tag 0x0 [ 67.075592][ T2968] hid-generic 0021:0009:0000.0004: unknown main item tag 0x0 [ 67.083017][ T2968] hid-generic 0021:0009:0000.0004: unknown main item tag 0x0 [ 67.090509][ T2968] hid-generic 0021:0009:0000.0004: unknown main item tag 0x0 [ 67.097960][ T2968] hid-generic 0021:0009:0000.0004: unknown main item tag 0x0 [ 67.124269][ T4992] SELinux: syz.3.563 (4992) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 67.138528][ T2968] hid-generic 0021:0009:0000.0004: hidraw1: HID v0.07 Device [syz0] on syz1 [ 67.166842][ T4994] ref_ctr_offset mismatch. inode: 0x256 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xee0000000000 [ 67.179016][ T4994] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 67.187400][ T4994] ref_ctr decrement failed for inode: 0x256 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888104cfb700 [ 67.198641][ T4994] uprobe: syz.3.564:4994 failed to unregister, leaking uprobe [ 67.399939][ T5015] loop3: detected capacity change from 0 to 512 [ 67.425056][ T5015] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.436210][ T5015] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.574: bg 0: block 248: padding at end of block bitmap is not set [ 67.456911][ T5015] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.574: Failed to acquire dquot type 1 [ 67.471696][ T5015] EXT4-fs (loop3): 1 truncate cleaned up [ 67.481378][ T5015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.503310][ T5015] syz.3.574 (5015) used greatest stack depth: 9032 bytes left [ 67.522679][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.099960][ T5042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 68.108822][ T5042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 68.139061][ T5042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 68.207302][ T5046] veth1_macvtap: left promiscuous mode [ 68.354014][ T5050] 9pnet: Could not find request transport: f [ 68.463479][ T5057] netlink: 'syz.1.589': attribute type 3 has an invalid length. [ 68.474639][ T5059] loop4: detected capacity change from 0 to 512 [ 68.499834][ T5059] EXT4-fs (loop4): too many log groups per flexible block group [ 68.507562][ T5059] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 68.557156][ T5059] EXT4-fs (loop4): mount failed [ 68.901804][ T5089] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 68.994459][ T5102] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 69.001008][ T5102] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 69.009250][ T5102] vhci_hcd vhci_hcd.0: Device attached [ 69.020720][ T5103] vhci_hcd: connection closed [ 69.020943][ T41] vhci_hcd: stop threads [ 69.029969][ T41] vhci_hcd: release socket [ 69.034384][ T41] vhci_hcd: disconnect device [ 69.164375][ T2968] hid-generic 0021:0009:0000.0005: unknown main item tag 0x0 [ 69.171881][ T2968] hid-generic 0021:0009:0000.0005: unknown main item tag 0x0 [ 69.179525][ T2968] hid-generic 0021:0009:0000.0005: unknown main item tag 0x0 [ 69.186922][ T2968] hid-generic 0021:0009:0000.0005: unknown main item tag 0x0 [ 69.194424][ T2968] hid-generic 0021:0009:0000.0005: unknown main item tag 0x0 [ 69.201858][ T2968] hid-generic 0021:0009:0000.0005: unknown main item tag 0x0 [ 69.239851][ T2968] hid-generic 0021:0009:0000.0005: hidraw0: HID v0.07 Device [syz0] on syz1 [ 69.751305][ T5131] syz_tun (unregistering): left allmulticast mode [ 70.001696][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 70.001711][ T29] audit: type=1400 audit(1747221271.056:2673): avc: denied { read } for pid=5138 comm="syz.4.615" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.036540][ T29] audit: type=1400 audit(1747221271.086:2674): avc: denied { open } for pid=5138 comm="syz.4.615" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.061787][ T29] audit: type=1400 audit(1747221271.116:2675): avc: denied { bind } for pid=5140 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.082291][ T29] audit: type=1400 audit(1747221271.116:2676): avc: denied { setopt } for pid=5140 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.123305][ T29] audit: type=1400 audit(1747221271.176:2677): avc: denied { bind } for pid=5138 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.146297][ T5139] hsr_slave_0 (unregistering): left promiscuous mode [ 70.216981][ T5154] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 70.223601][ T5154] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 70.232368][ T5154] vhci_hcd vhci_hcd.0: Device attached [ 70.241583][ T5155] vhci_hcd: connection closed [ 70.247547][ T12] vhci_hcd: stop threads [ 70.256641][ T12] vhci_hcd: release socket [ 70.261141][ T12] vhci_hcd: disconnect device [ 70.286928][ T29] audit: type=1400 audit(1747221271.336:2678): avc: denied { read } for pid=5158 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.307119][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.316027][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.411904][ T5162] loop3: detected capacity change from 0 to 2048 [ 70.440515][ T5162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.579448][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.597928][ T29] audit: type=1400 audit(1747221271.646:2679): avc: denied { create } for pid=5167 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.957116][ T5182] __nla_validate_parse: 7 callbacks suppressed [ 70.957172][ T5182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 70.973687][ T29] audit: type=1400 audit(1747221272.006:2680): avc: denied { create } for pid=5172 comm="syz.0.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.217196][ T29] audit: type=1400 audit(1747221272.266:2681): avc: denied { sys_module } for pid=5186 comm="syz.2.632" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 71.299274][ T29] audit: type=1400 audit(1747221272.306:2682): avc: denied { setopt } for pid=5186 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.539666][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'. [ 71.554493][ T5196] hsr_slave_1 (unregistering): left promiscuous mode [ 71.867034][ T5218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.641'. [ 71.938599][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.947799][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.094603][ T5228] loop4: detected capacity change from 0 to 2048 [ 72.110570][ T5228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.136228][ T3320] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 72.154034][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.247979][ T5240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 72.354824][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.364029][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.537225][ T5247] netlink: 188 bytes leftover after parsing attributes in process `syz.1.650'. [ 74.082931][ T5283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.663'. [ 74.536714][ T5293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 74.712803][ T5307] netlink: 1536 bytes leftover after parsing attributes in process `syz.0.667'. [ 74.745319][ T3394] hid-generic 0021:0009:0000.0006: unknown main item tag 0x0 [ 74.752860][ T3394] hid-generic 0021:0009:0000.0006: unknown main item tag 0x0 [ 74.760401][ T3394] hid-generic 0021:0009:0000.0006: unknown main item tag 0x0 [ 74.767788][ T3394] hid-generic 0021:0009:0000.0006: unknown main item tag 0x0 [ 74.775197][ T3394] hid-generic 0021:0009:0000.0006: unknown main item tag 0x0 [ 74.782613][ T3394] hid-generic 0021:0009:0000.0006: unknown main item tag 0x0 [ 74.793412][ T3394] hid-generic 0021:0009:0000.0006: hidraw0: HID v0.07 Device [syz0] on syz1 [ 74.944851][ T5312] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.000800][ T5312] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.071699][ T5312] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.140966][ T5312] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.217063][ T5312] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.228578][ T5312] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.242055][ T5312] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.253703][ T5312] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.302557][ T5317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 75.313793][ T5317] hsr_slave_1 (unregistering): left promiscuous mode [ 75.321141][ T5319] loop4: detected capacity change from 0 to 736 [ 75.338032][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 75.338047][ T29] audit: type=1400 audit(1747221276.386:2740): avc: denied { mount } for pid=5318 comm="syz.4.683" name="/" dev="loop4" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 75.345378][ T5319] rock: directory entry would overflow storage [ 75.372899][ T5319] rock: sig=0x5850, size=36, remaining=14 [ 75.387929][ T29] audit: type=1326 audit(1747221276.436:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 75.412566][ T29] audit: type=1326 audit(1747221276.436:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 75.435933][ T29] audit: type=1326 audit(1747221276.436:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5322bbe9a3 code=0x7ffc0000 [ 75.459199][ T29] audit: type=1326 audit(1747221276.446:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5322bbd41f code=0x7ffc0000 [ 75.482383][ T29] audit: type=1326 audit(1747221276.446:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5322bbe9f7 code=0x7ffc0000 [ 75.505636][ T29] audit: type=1326 audit(1747221276.466:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5322bbd2d0 code=0x7ffc0000 [ 75.528940][ T29] audit: type=1326 audit(1747221276.466:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5322bbd5ca code=0x7ffc0000 [ 75.560737][ T29] audit: type=1326 audit(1747221276.486:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 75.584226][ T29] audit: type=1326 audit(1747221276.516:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 75.614549][ T5323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.674'. [ 76.479887][ T10] IPVS: starting estimator thread 0... [ 76.569693][ T5352] IPVS: using max 2736 ests per chain, 136800 per kthread [ 76.793803][ T5364] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 76.871965][ T5367] tipc: Started in network mode [ 76.877006][ T5367] tipc: Node identity 26ed7aea748e, cluster identity 4711 [ 76.884261][ T5367] tipc: Enabled bearer , priority 0 [ 76.903457][ T5366] tipc: Resetting bearer [ 76.941187][ T5366] tipc: Disabling bearer [ 77.068990][ T5373] bridge0: entered promiscuous mode [ 77.080824][ T5373] macvlan0: entered promiscuous mode [ 77.093388][ T5373] bridge0: port 2(macvlan0) entered blocking state [ 77.100054][ T5373] bridge0: port 2(macvlan0) entered disabled state [ 77.119000][ T5373] macvlan0: entered allmulticast mode [ 77.124451][ T5373] bridge0: entered allmulticast mode [ 77.140583][ T5386] __nla_validate_parse: 2 callbacks suppressed [ 77.140597][ T5386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.698'. [ 77.163333][ T5373] macvlan0: left allmulticast mode [ 77.168492][ T5373] bridge0: left allmulticast mode [ 77.186224][ T5373] bridge0: left promiscuous mode [ 77.293716][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 77.315790][ T5388] hsr_slave_1 (unregistering): left promiscuous mode [ 77.379798][ T5391] netlink: 1536 bytes leftover after parsing attributes in process `syz.2.702'. [ 78.322659][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'. [ 78.322740][ T5405] loop4: detected capacity change from 0 to 128 [ 78.342010][ T5405] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.355726][ T5405] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.463066][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.489288][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 78.516584][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.719'. [ 78.553086][ T5414] syz_tun (unregistering): left promiscuous mode [ 78.665119][ T5421] loop4: detected capacity change from 0 to 512 [ 78.672035][ T5421] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 78.682924][ T5421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 78.691231][ T5421] System zones: 1-12 [ 78.695340][ T5421] EXT4-fs (loop4): orphan cleanup on readonly fs [ 78.698004][ T5423] tipc: Enabled bearer , priority 0 [ 78.702245][ T5421] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.711: Inode bitmap for bg 0 marked uninitialized [ 78.721166][ T5422] tipc: Resetting bearer [ 78.721497][ T5421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.744737][ T5422] tipc: Disabling bearer [ 78.770509][ T5421] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 5: comm syz.4.711: lblock 0 mapped to illegal pblock 5 (length 1) [ 78.784652][ T5421] EXT4-fs warning (device loop4): dx_probe:793: inode #2: lblock 0: comm syz.4.711: error -117 reading directory block [ 78.807846][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.852351][ T5426] bridge0: entered promiscuous mode [ 78.857663][ T5426] macvlan0: entered promiscuous mode [ 78.863901][ T5426] bridge0: port 1(macvlan0) entered blocking state [ 78.870455][ T5426] bridge0: port 1(macvlan0) entered disabled state [ 78.877106][ T5426] macvlan0: entered allmulticast mode [ 78.882519][ T5426] bridge0: entered allmulticast mode [ 78.888259][ T5426] macvlan0: left allmulticast mode [ 78.893412][ T5426] bridge0: left allmulticast mode [ 78.898925][ T5426] bridge0: left promiscuous mode [ 78.972551][ T5430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.714'. [ 79.039057][ T5436] netlink: 32 bytes leftover after parsing attributes in process `syz.4.716'. [ 79.068599][ T5437] sd 0:0:1:0: device reset [ 79.076666][ T5428] lo speed is unknown, defaulting to 1000 [ 79.249943][ T5446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'. [ 79.385354][ T5458] syzkaller0: entered promiscuous mode [ 79.390888][ T5458] syzkaller0: entered allmulticast mode [ 79.405863][ T5462] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 79.711569][ T5473] sd 0:0:1:0: device reset [ 79.766088][ T5472] lo speed is unknown, defaulting to 1000 [ 79.854345][ T5478] SELinux: Context system_u:object_r:dhcpd_state_t:s0 is not valid (left unmapped). [ 79.935118][ T5480] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.020490][ T5480] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.138596][ T5492] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.160665][ T5480] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.209932][ T5492] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.251408][ T5480] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.309924][ T5492] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.348974][ T5480] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.370283][ T5492] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.400038][ T5480] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.412475][ T5480] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.424400][ T5480] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.461041][ T5492] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.472568][ T5492] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.505583][ T5492] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.514981][ T5517] loop4: detected capacity change from 0 to 128 [ 80.526206][ T5492] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.663481][ T5521] netlink: 'syz.4.747': attribute type 1 has an invalid length. [ 80.850827][ T5527] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.922820][ T5527] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.961120][ T5527] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.030613][ T5527] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.088548][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 81.088565][ T29] audit: type=1326 audit(1747221282.136:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7ec2e969 code=0x7ffc0000 [ 81.120005][ T29] audit: type=1326 audit(1747221282.136:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7ec2e969 code=0x7ffc0000 [ 81.148399][ T29] audit: type=1326 audit(1747221282.206:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba7ec2e969 code=0x7ffc0000 [ 81.171849][ T29] audit: type=1326 audit(1747221282.206:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7ec2e969 code=0x7ffc0000 [ 81.200059][ T29] audit: type=1326 audit(1747221282.206:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba7ec2e969 code=0x7ffc0000 [ 81.223465][ T29] audit: type=1326 audit(1747221282.206:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 81.246779][ T29] audit: type=1326 audit(1747221282.206:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 81.270327][ T29] audit: type=1326 audit(1747221282.206:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7ec2e969 code=0x7ffc0000 [ 81.293732][ T29] audit: type=1326 audit(1747221282.206:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 81.317074][ T29] audit: type=1326 audit(1747221282.206:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322bbe969 code=0x7ffc0000 [ 81.387155][ T5548] delete_channel: no stack [ 81.645825][ T5574] loop4: detected capacity change from 0 to 2048 [ 81.652603][ T5574] EXT4-fs: inline encryption not supported [ 81.658607][ T5574] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.665662][ T5574] EXT4-fs: dax option not supported [ 81.689389][ T5572] netlink: 'syz.1.765': attribute type 1 has an invalid length. [ 82.081257][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'. [ 82.208240][ T5597] xt_nat: multiple ranges no longer supported [ 82.500248][ T5608] loop4: detected capacity change from 0 to 1764 [ 82.580416][ T5609] sd 0:0:1:0: device reset [ 82.596478][ T5608] lo speed is unknown, defaulting to 1000 [ 82.765074][ T5614] siw: device registration error -23 [ 83.096752][ T5626] xt_hashlimit: size too large, truncated to 1048576 [ 83.105460][ T5628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.784'. [ 83.109953][ T5624] loop4: detected capacity change from 0 to 1024 [ 83.114394][ T5628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.784'. [ 83.129589][ T5628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.784'. [ 83.146635][ T5628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.784'. [ 83.218780][ T5624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.280589][ T5632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 83.299891][ T5624] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.331713][ T5624] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 83.345651][ T5624] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.783: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.379843][ T5624] EXT4-fs (loop4): Remounting filesystem read-only [ 83.386456][ T5624] EXT4-fs (loop4): 1 orphan inode deleted [ 83.419911][ T5624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.450402][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.482031][ T5638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 83.539281][ T5640] netlink: 'syz.1.789': attribute type 27 has an invalid length. [ 83.609797][ T5642] netlink: 'syz.0.787': attribute type 1 has an invalid length. [ 83.742142][ T5640] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.750628][ T5640] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.759093][ T5640] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.767628][ T5640] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.802254][ T5640] bond1: left promiscuous mode [ 83.807110][ T5640] bond1: left allmulticast mode [ 83.875562][ T5527] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.960935][ T5527] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.003554][ T5527] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.043104][ T5667] siw: device registration error -23 [ 84.043794][ T5527] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.150507][ T5677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 84.209783][ T5680] xt_hashlimit: size too large, truncated to 1048576 [ 84.252809][ T5681] sd 0:0:1:0: device reset [ 84.364899][ T5685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 84.376126][ T5692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 84.396730][ T5669] lo speed is unknown, defaulting to 1000 [ 84.432160][ T5693] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5693 comm=syz.0.803 [ 84.811408][ T5707] binfmt_misc: register: failed to install interpreter file ./file2 [ 85.034152][ T5713] siw: device registration error -23 [ 85.110423][ T5715] netlink: 'syz.2.810': attribute type 1 has an invalid length. [ 86.349932][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 86.349947][ T29] audit: type=1400 audit(1747221286.856:3242): avc: denied { bind } for pid=5727 comm="syz.0.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.375447][ T29] audit: type=1400 audit(1747221286.856:3243): avc: denied { node_bind } for pid=5727 comm="syz.0.814" saddr=100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 86.396861][ T29] audit: type=1326 audit(1747221287.396:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 86.493191][ T29] audit: type=1326 audit(1747221287.406:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 86.516553][ T29] audit: type=1326 audit(1747221287.416:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 86.539982][ T29] audit: type=1326 audit(1747221287.426:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 86.563420][ T29] audit: type=1326 audit(1747221287.446:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 86.586907][ T29] audit: type=1326 audit(1747221287.456:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 86.725186][ T29] audit: type=1326 audit(1747221287.776:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19133ee969 code=0x7ffc0000 [ 86.795310][ T5748] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 86.803788][ T29] audit: type=1326 audit(1747221287.806:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19133ee969 code=0x7ffc0000 [ 86.855775][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'. [ 87.008657][ T5764] loop4: detected capacity change from 0 to 128 [ 87.030780][ T5769] sd 0:0:1:0: device reset [ 87.047732][ T5764] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.103730][ T5762] lo speed is unknown, defaulting to 1000 [ 87.279330][ T5764] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.743435][ T5786] x_tables: duplicate underflow at hook 2 [ 87.916289][ T5789] lo speed is unknown, defaulting to 1000 [ 88.097125][ T5796] netlink: 'syz.3.836': attribute type 1 has an invalid length. [ 88.167933][ T5796] __nla_validate_parse: 1 callbacks suppressed [ 88.167946][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 88.500929][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 88.628654][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.382635][ T5841] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 89.497753][ T5852] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 89.509470][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 89.592104][ T5859] loop4: detected capacity change from 0 to 128 [ 89.641539][ T5863] loop4: detected capacity change from 0 to 1024 [ 89.648490][ T5863] EXT4-fs: Ignoring removed nobh option [ 89.654139][ T5863] EXT4-fs: Ignoring removed bh option [ 89.680708][ T5863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.740556][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.759713][ T5872] syzkaller1: entered promiscuous mode [ 89.765225][ T5872] syzkaller1: entered allmulticast mode [ 89.936717][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 89.993254][ T5890] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 90.004502][ T5890] program syz.0.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.038146][ T5892] netlink: 'syz.4.865': attribute type 4 has an invalid length. [ 90.090598][ T5896] tipc: Enabled bearer , priority 0 [ 90.097940][ T5895] tipc: Resetting bearer [ 90.111464][ T5895] tipc: Disabling bearer [ 90.161303][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 90.261144][ T5904] tipc: Enabled bearer , priority 0 [ 90.268557][ T5904] syzkaller0: entered promiscuous mode [ 90.274164][ T5904] syzkaller0: entered allmulticast mode [ 90.282344][ T5906] netlink: 'syz.4.871': attribute type 13 has an invalid length. [ 90.284285][ T5904] tipc: Resetting bearer [ 90.330211][ T5906] 8021q: adding VLAN 0 to HW filter on device  [ 90.340736][ T5906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.356627][ T5902] tipc: Resetting bearer [ 90.366922][ T5902] tipc: Disabling bearer [ 90.402791][ T5912] syzkaller1: entered promiscuous mode [ 90.408314][ T5912] syzkaller1: entered allmulticast mode [ 90.419374][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 90.452518][ T5918] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 90.627790][ T5937] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.641844][ T5939] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.691006][ T5944] syzkaller0: entered promiscuous mode [ 90.696581][ T5944] syzkaller0: entered allmulticast mode [ 90.718817][ T5937] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.750623][ T5939] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.780701][ T5937] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.830746][ T5939] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.880912][ T5937] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.920390][ T5939] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.965857][ T5937] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.977380][ T5937] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.988735][ T5937] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.000382][ T5937] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.016092][ T5939] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.027790][ T5939] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.039180][ T5939] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.052132][ T5939] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.181609][ T5960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.198734][ T5960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.881594][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 91.881607][ T29] audit: type=1400 audit(1747222060.937:3486): avc: denied { create } for pid=5966 comm="syz.4.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.900454][ T5967] syzkaller0: entered promiscuous mode [ 91.912799][ T5967] syzkaller0: entered allmulticast mode [ 91.923582][ T29] audit: type=1400 audit(1747222060.977:3487): avc: denied { create } for pid=5966 comm="syz.4.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.943750][ T29] audit: type=1400 audit(1747222060.977:3488): avc: denied { map_create } for pid=5968 comm="syz.1.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.962844][ T29] audit: type=1400 audit(1747222060.977:3489): avc: denied { prog_load } for pid=5966 comm="syz.4.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.981854][ T29] audit: type=1400 audit(1747222060.977:3490): avc: denied { bpf } for pid=5966 comm="syz.4.904" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.002355][ T29] audit: type=1400 audit(1747222060.977:3491): avc: denied { perfmon } for pid=5966 comm="syz.4.904" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.023206][ T29] audit: type=1400 audit(1747222060.977:3492): avc: denied { write } for pid=5968 comm="syz.1.891" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 92.046722][ T29] audit: type=1400 audit(1747222060.977:3493): avc: denied { open } for pid=5968 comm="syz.1.891" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 92.070596][ T29] audit: type=1400 audit(1747222060.977:3494): avc: denied { prog_run } for pid=5966 comm="syz.4.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 92.090222][ T29] audit: type=1400 audit(1747222060.987:3495): avc: denied { create } for pid=5968 comm="syz.1.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.152999][ T5978] bond1: entered promiscuous mode [ 92.158116][ T5978] bond1: entered allmulticast mode [ 92.163677][ T5976] netlink: 'syz.0.893': attribute type 13 has an invalid length. [ 92.179307][ T5978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.228529][ T5976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.365030][ T5986] syzkaller0: entered allmulticast mode [ 92.376353][ T5986] syzkaller0: entered promiscuous mode [ 92.388625][ T5986] syzkaller0 (unregistering): left promiscuous mode [ 92.395342][ T5986] syzkaller0 (unregistering): left allmulticast mode [ 92.481842][ T5993] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 92.492827][ T5993] program syz.3.903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.509707][ T5995] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.564382][ T5995] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.630745][ T5995] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.671507][ T5995] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.758602][ T6007] ref_ctr_offset mismatch. inode: 0x394 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xee0000000000 [ 92.801933][ T6007] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 92.810353][ T6007] ref_ctr decrement failed for inode: 0x394 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88812396e300 [ 92.834217][ T6007] uprobe: syz.4.909:6007 failed to unregister, leaking uprobe [ 93.027394][ T6033] netlink: 'syz.1.912': attribute type 13 has an invalid length. [ 93.063785][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.072086][ T6033] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.081679][ T6033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.157704][ T6035] syzkaller0: entered promiscuous mode [ 93.163241][ T6035] syzkaller0: entered allmulticast mode [ 93.328214][ T6041] syzkaller0: entered allmulticast mode [ 93.334192][ T6041] syzkaller0: entered promiscuous mode [ 93.348729][ T6041] syzkaller0 (unregistering): left promiscuous mode [ 93.355553][ T6041] syzkaller0 (unregistering): left allmulticast mode [ 93.493657][ T6043] bond1: entered promiscuous mode [ 93.498812][ T6043] bond1: entered allmulticast mode [ 93.506972][ T6043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.536177][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 93.815083][ T6061] tipc: Enabled bearer , priority 0 [ 93.823736][ T6060] tipc: Resetting bearer [ 93.844547][ T6060] tipc: Disabling bearer [ 93.957333][ T6066] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 94.003544][ T6066] netlink: 1704 bytes leftover after parsing attributes in process `syz.1.936'. [ 94.124896][ T6095] netlink: zone id is out of range [ 94.130156][ T6095] netlink: zone id is out of range [ 94.135289][ T6095] netlink: zone id is out of range [ 94.140422][ T6095] netlink: zone id is out of range [ 94.145535][ T6095] netlink: zone id is out of range [ 94.150672][ T6095] netlink: zone id is out of range [ 94.155796][ T6095] netlink: zone id is out of range [ 94.277035][ T6102] syzkaller0: entered promiscuous mode [ 94.282862][ T6102] syzkaller0: entered allmulticast mode [ 94.315495][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 94.324415][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 94.429210][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 94.457012][ T6109] syzkaller0: entered promiscuous mode [ 94.462712][ T6109] syzkaller0: entered allmulticast mode [ 94.470676][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.938'. [ 94.558177][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 94.570792][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 94.589485][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 94.617736][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 94.664344][ T5995] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.706172][ T5995] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.718953][ T5995] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.730615][ T5995] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.010503][ T6134] lo speed is unknown, defaulting to 1000 [ 95.390175][ T6143] loop4: detected capacity change from 0 to 512 [ 95.404719][ T6143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.461665][ T6143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.474371][ T6143] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.486912][ T6143] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.947: corrupted xattr block 19: overlapping e_value [ 95.500858][ T6143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 95.510965][ T6143] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.947: corrupted xattr block 19: overlapping e_value [ 95.525030][ T6143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 95.559974][ T6143] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.947: corrupted xattr block 19: overlapping e_value [ 95.575226][ T6143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 95.639599][ T6143] EXT4-fs error (device loop4): ext4_xattr_block_find:1869: inode #15: comm syz.4.947: corrupted xattr block 19: overlapping e_value [ 95.680158][ T6153] sit0: entered allmulticast mode [ 95.686945][ T6153] sit0: entered promiscuous mode [ 95.750716][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.795808][ T6160] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 95.922615][ T6170] loop4: detected capacity change from 0 to 2048 [ 96.095897][ T6176] lo speed is unknown, defaulting to 1000 [ 96.133986][ T6170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.931820][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 96.931832][ T29] audit: type=1400 audit(1747222065.987:3675): avc: denied { create } for pid=6192 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.201278][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.219115][ T29] audit: type=1400 audit(1747222066.017:3676): avc: denied { write } for pid=6192 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.238469][ T29] audit: type=1400 audit(1747222066.217:3677): avc: denied { write } for pid=6194 comm="syz.1.964" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.258967][ T29] audit: type=1400 audit(1747222066.217:3678): avc: denied { connect } for pid=6194 comm="syz.1.964" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.279705][ T29] audit: type=1400 audit(1747222066.217:3679): avc: denied { name_connect } for pid=6194 comm="syz.1.964" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 97.301907][ T29] audit: type=1326 audit(1747222066.237:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 97.325504][ T29] audit: type=1326 audit(1747222066.237:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 97.348914][ T29] audit: type=1326 audit(1747222066.237:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 97.372366][ T29] audit: type=1326 audit(1747222066.237:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 97.395737][ T29] audit: type=1326 audit(1747222066.247:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 97.485615][ T6207] IPv6: sit1: Disabled Multicast RS [ 97.631513][ T6215] netlink: 'syz.3.971': attribute type 7 has an invalid length. [ 97.745773][ T6217] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 97.924897][ T6236] netlink: 'syz.1.976': attribute type 13 has an invalid length. [ 98.222820][ T6265] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.231161][ T6265] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.239353][ T6265] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.247914][ T6265] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.258031][ T6266] $Hÿ: renamed from bond0 [ 98.264326][ T6266] $Hÿ: entered promiscuous mode [ 98.565020][ T6272] lo speed is unknown, defaulting to 1000 [ 100.290438][ T6334] tipc: New replicast peer: 255.255.255.255 [ 100.296632][ T6334] tipc: Enabled bearer , priority 10 [ 100.322042][ T6332] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.352914][ T6339] loop4: detected capacity change from 0 to 512 [ 100.373387][ T6339] EXT4-fs (loop4): orphan cleanup on readonly fs [ 100.389031][ T6339] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1014: bad orphan inode 13 [ 100.399444][ T6339] ext4_test_bit(bit=12, block=18) = 1 [ 100.404929][ T6339] is_bad_inode(inode)=0 [ 100.409095][ T6339] NEXT_ORPHAN(inode)=2130706432 [ 100.410998][ T6344] __nla_validate_parse: 16 callbacks suppressed [ 100.411014][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 100.414153][ T6339] max_ino=32 [ 100.432394][ T6339] i_nlink=1 [ 100.441625][ T6339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.531274][ T6332] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.544278][ T6339] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 100.609752][ T6339] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1014: bg 0: block 248: padding at end of block bitmap is not set [ 100.625234][ T6339] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1014: Failed to acquire dquot type 1 [ 100.664072][ T6332] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.676166][ T6339] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.706229][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.128728][ T6359] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 101.201389][ T6332] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.293001][ T6332] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.381290][ T5646] tipc: Node number set to 1382251242 [ 101.388961][ T6332] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.408781][ T6332] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.435693][ T6332] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.544457][ T6374] tipc: New replicast peer: 255.255.255.255 [ 101.550676][ T6374] tipc: Enabled bearer , priority 10 [ 101.771822][ T6392] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1031'. [ 102.249835][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 102.249880][ T29] audit: type=1326 audit(1747222071.296:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19133ee969 code=0x7ffc0000 [ 102.280757][ T29] audit: type=1326 audit(1747222071.336:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f19133ee969 code=0x7ffc0000 [ 102.304339][ T29] audit: type=1326 audit(1747222071.336:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19133ee969 code=0x7ffc0000 [ 102.329074][ T29] audit: type=1326 audit(1747222071.336:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f19133ee969 code=0x7ffc0000 [ 102.352553][ T29] audit: type=1326 audit(1747222071.336:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19133ee969 code=0x7ffc0000 [ 102.376023][ T29] audit: type=1326 audit(1747222071.336:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f19133ee969 code=0x7ffc0000 [ 102.399341][ T29] audit: type=1326 audit(1747222071.336:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19133ee969 code=0x7ffc0000 [ 102.422884][ T29] audit: type=1326 audit(1747222071.336:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f19133ee969 code=0x7ffc0000 [ 102.446335][ T29] audit: type=1326 audit(1747222071.336:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f19133ee9a3 code=0x7ffc0000 [ 102.469660][ T29] audit: type=1326 audit(1747222071.336:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f19133ed41f code=0x7ffc0000 [ 102.548709][ T6366] syz.4.1020 (6366) used greatest stack depth: 7032 bytes left [ 102.560363][ T3394] tipc: Node number set to 1552012484 [ 102.565879][ T6409] loop4: detected capacity change from 0 to 128 [ 102.575506][ T6409] FAT-fs (loop4): Directory bread(block 32) failed [ 102.605392][ T6412] tipc: New replicast peer: 255.255.255.255 [ 102.611523][ T6412] tipc: Enabled bearer , priority 10 [ 102.666961][ T6414] hub 2-0:1.0: USB hub found [ 102.671910][ T6409] FAT-fs (loop4): Directory bread(block 33) failed [ 102.678486][ T6414] hub 2-0:1.0: 8 ports detected [ 102.687076][ T6409] FAT-fs (loop4): Directory bread(block 34) failed [ 102.696191][ T6409] FAT-fs (loop4): Directory bread(block 35) failed [ 102.717185][ T6409] FAT-fs (loop4): Directory bread(block 36) failed [ 102.730412][ T6409] FAT-fs (loop4): Directory bread(block 37) failed [ 102.818362][ T6409] FAT-fs (loop4): Directory bread(block 38) failed [ 102.833263][ T6419] binfmt_misc: register: failed to install interpreter file ./file2 [ 102.849157][ T6409] FAT-fs (loop4): Directory bread(block 39) failed [ 102.855950][ T6409] FAT-fs (loop4): Directory bread(block 40) failed [ 102.873173][ T6409] FAT-fs (loop4): Directory bread(block 41) failed [ 102.992144][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1037'. [ 103.001161][ T6409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1037'. [ 103.456480][ T6436] siw: device registration error -23 [ 103.741218][ T3394] tipc: Node number set to 4265689605 [ 104.133028][ T6458] binfmt_misc: register: failed to install interpreter file ./file2 [ 104.215756][ T6463] sit0: entered allmulticast mode [ 104.223061][ T6463] sit0: entered promiscuous mode [ 104.299076][ T6471] netlink: 'syz.0.1062': attribute type 10 has an invalid length. [ 104.375006][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.382865][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.390678][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.402860][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.410735][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.418466][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.426279][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.434054][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.441905][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.449729][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.457537][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.465325][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.473094][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.480967][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.492683][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.500428][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.508280][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.516057][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.523852][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.531620][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.539574][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.547466][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.555420][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.563182][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.571072][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.578817][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.586596][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.594341][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.602352][ T3394] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 104.611562][ T3394] hid-generic 0000:0000:20000000.0007: hidraw0: HID v0.01 Device [syz0] on syz1 [ 104.651003][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'. [ 104.751974][ T6494] netlink: 'syz.4.1070': attribute type 1 has an invalid length. [ 104.784682][ T6494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.971140][ T6502] loop4: detected capacity change from 0 to 512 [ 105.018472][ T6502] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.173807][ T6502] EXT4-fs (loop4): 1 truncate cleaned up [ 105.212660][ T6502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.373037][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.554371][ T6531] loop4: detected capacity change from 0 to 1024 [ 106.584142][ T6526] sit0: entered allmulticast mode [ 106.594764][ T6526] sit0: entered promiscuous mode [ 106.612628][ T6531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.643493][ T6531] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.712600][ T6531] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 106.751674][ T6531] EXT4-fs (loop4): Remounting filesystem read-only [ 106.808076][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.364448][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 107.364465][ T29] audit: type=1326 audit(1747222076.415:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7ec2e969 code=0x7ffc0000 [ 107.395137][ T29] audit: type=1326 audit(1747222076.415:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6547 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7ec2e969 code=0x7ffc0000 [ 107.615941][ T6555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'. [ 107.625038][ T6555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1098'. [ 107.635589][ T29] audit: type=1400 audit(1747222076.695:4328): avc: denied { append } for pid=6553 comm="syz.1.1086" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 107.661300][ T9] page_pool_release_retry() stalled pool shutdown: id 27, 1 inflight 60 sec [ 107.739729][ T6571] netlink: 'syz.0.1090': attribute type 10 has an invalid length. [ 107.845154][ T29] audit: type=1326 audit(1747222076.895:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 107.868986][ T29] audit: type=1326 audit(1747222076.895:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 107.928618][ T29] audit: type=1326 audit(1747222076.895:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 107.952077][ T29] audit: type=1326 audit(1747222076.895:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 107.975614][ T29] audit: type=1326 audit(1747222076.895:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 107.999050][ T29] audit: type=1326 audit(1747222076.955:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 108.022424][ T29] audit: type=1326 audit(1747222076.955:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc59fae969 code=0x7ffc0000 [ 108.200418][ T6579] lo speed is unknown, defaulting to 1000 [ 108.318130][ T6584] lo speed is unknown, defaulting to 1000 [ 108.639681][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1105'. [ 108.648777][ T6603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1105'. [ 109.136184][ T6627] syzkaller0: entered promiscuous mode [ 109.141722][ T6627] syzkaller0: entered allmulticast mode [ 109.400708][ T6636] ================================================================== [ 109.408888][ T6636] BUG: KCSAN: data-race in __tty_hangup / io_poll_task_func [ 109.416178][ T6636] [ 109.418495][ T6636] write to 0xffff888123a03308 of 8 bytes by task 6633 on cpu 0: [ 109.426118][ T6636] __tty_hangup+0x1c2/0x510 [ 109.430621][ T6636] tty_vhangup+0x17/0x20 [ 109.434866][ T6636] pty_close+0x266/0x290 [ 109.439110][ T6636] tty_release+0x1ff/0xb10 [ 109.443532][ T6636] __fput+0x29b/0x650 [ 109.447621][ T6636] ____fput+0x1c/0x30 [ 109.451603][ T6636] task_work_run+0x131/0x1a0 [ 109.456195][ T6636] resume_user_mode_work+0x6a/0x70 [ 109.461304][ T6636] syscall_exit_to_user_mode+0x77/0xb0 [ 109.466759][ T6636] do_syscall_64+0xdd/0x1a0 [ 109.471264][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.477152][ T6636] [ 109.479467][ T6636] read to 0xffff888123a03308 of 8 bytes by task 6636 on cpu 1: [ 109.487001][ T6636] io_poll_task_func+0x114/0xa20 [ 109.491935][ T6636] io_handle_tw_list+0xcc/0x1c0 [ 109.496786][ T6636] tctx_task_work_run+0x6d/0x1a0 [ 109.501728][ T6636] tctx_task_work+0x3f/0x80 [ 109.506233][ T6636] task_work_run+0x131/0x1a0 [ 109.510820][ T6636] get_signal+0xe13/0xf70 [ 109.515142][ T6636] arch_do_signal_or_restart+0x97/0x480 [ 109.520699][ T6636] syscall_exit_to_user_mode+0x68/0xb0 [ 109.526152][ T6636] do_syscall_64+0xdd/0x1a0 [ 109.530663][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.536559][ T6636] [ 109.538872][ T6636] value changed: 0xffffffff8589eb18 -> 0xffffffff8589ea10 [ 109.545974][ T6636] [ 109.548289][ T6636] Reported by Kernel Concurrency Sanitizer on: [ 109.554476][ T6636] CPU: 1 UID: 0 PID: 6636 Comm: syz.3.1116 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 109.566904][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 109.576974][ T6636] ==================================================================