last executing test programs: 1m11.913523495s ago: executing program 1 (id=309): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1) getuid() 1m11.055197796s ago: executing program 1 (id=332): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) close(r3) 1m10.878408609s ago: executing program 1 (id=337): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x6) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0x26, 0x4, 0x28, 0x200000d, r4}}], 0x20, 0x2400e044}, 0x46) 1m9.97711001s ago: executing program 1 (id=359): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x28020480) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m9.96559621s ago: executing program 1 (id=360): r0 = epoll_create1(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) socket$inet(0x2, 0x3, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 1m9.810664192s ago: executing program 1 (id=366): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) dup3(0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@quota}]}, 0x1, 0x448, &(0x7f00000009c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)='./file1\x00') 1m9.755411962s ago: executing program 32 (id=366): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) dup3(0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@quota}]}, 0x1, 0x448, &(0x7f00000009c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)='./file1\x00') 53.536991032s ago: executing program 3 (id=689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101942, 0x0) pwrite64(r2, 0x0, 0x0, 0x9000) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x2}}}}}}, 0x0) 53.471865312s ago: executing program 3 (id=690): syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0x200000}, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 53.378962433s ago: executing program 3 (id=692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xc) fchdir(r3) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 53.354375464s ago: executing program 3 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) 53.273635065s ago: executing program 3 (id=695): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r2, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 52.723545682s ago: executing program 3 (id=697): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@nodiscard}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2800715, &(0x7f0000000840)={[{@commit={'commit', 0x3d, 0xf2a}}, {@noblock_validity}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@quota}, {@barrier_val={'barrier', 0x3d, 0xf8c}}, {@nobarrier}, {@orlov}, {@nomblk_io_submit}, {@nogrpid}, {@inlinecrypt}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0xff}}]}, 0x1, 0x443, &(0x7f0000000380)="$eJzs281vFOUfAPDvzLbAD37QioiCoFU0Nr70DVQOXjSaeNDERA94rG0hlYUaWhMhjRZj8GhIvBuPJv4FnvRi1JOJV70bEqKNCeipZmZnynbplr7sssh+Psmkz7PzTJ/nuzPPzjPPsxtA1xqIiN6I+H9E/BoRfRGRNBYYqP25vjg/8ffi/EQSS0tv/pHk5a4tzk+URcvjdhWZwTQi/SSpHdxg9vyF0+PV6tS5Ij88d+a94dnzF56ZPjN+aurU1Nmx48ePHR19/rmxZ1sSZxbXtYMfzhw68Orbl1+fOHH5nR+/ztq7/3Btf30crTKQBf7nUq5x3+OtrqzDdtelk54ONoQNqUREdrrSvP/3RSVunLy+eOXjjjYOaKvs3rS9+e6FJeAulkSnWwB0Rnmjz55/y+02DT3uCFdfrD0AZXFfz7dyNNSTPxNFMT/SLgMRcWLhny+yLdo0DwEAUO/bbPzz9GrjvzT2R8RIUW5PsYbSHxH3RMTeiLg3IvZFxH0Redn7I+KBDdbfuDR08/gnvbLp4NYhG/+9UKxtlVtRb1mkv1Lkdufx9yYnp6tTI8V7Mhi927P86Bp1fPfyL58121c//su2rP5yLFi040pPwwTd5PjFrYS8wtWLEQd7Vos/WV4JSCLiQEQc3Ni/3lMmpp/86lCzQreOfw0tWGda+jLiidr5X9gRK+MvJWuvTw7viOrUyHB5Vdzsp58vvdGs/i3F3wLZ+d+58vpvKNH3V1K/Xju78Tou/fZp02eazV3/c+PbkrfyNettxWsfjM/NnRuN2Ja8ludXvD5249gyX5bP4h88snr/31sck8X/YERkF/HhiHgoIh4u2v5IRDwaEUfWiP+Hlx57d/Pxt1cW/+Sqn3/L13//yvO/8UTl9PffNKt/fef/WJ4aLF7Jzv+t4lpvA7fy3gEAAMB/RZp/9z9Jh5bTaTo0VPsO/77YmVZnZueeOjnz/tnJ2m8E+qM3LWe6+urmQ0eTheI/1vJjxVxxuf9oMW/8eeV/eX5oYqY62eHYodvtatL/M79XOt06oO38Xgu6V2P/TzvUDuD2c/+H7qX/Q/fS/6F7rdb/P2rIWwuAu5P7P3Qv/R+6l/4P3Uv/h660ld/1S3RzItI7ohkSbUp0+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4NAAD///sx7LM=") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x1, 0x100}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 52.723224702s ago: executing program 4 (id=698): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) 52.691034932s ago: executing program 33 (id=697): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@nodiscard}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2800715, &(0x7f0000000840)={[{@commit={'commit', 0x3d, 0xf2a}}, {@noblock_validity}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@quota}, {@barrier_val={'barrier', 0x3d, 0xf8c}}, {@nobarrier}, {@orlov}, {@nomblk_io_submit}, {@nogrpid}, {@inlinecrypt}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0xff}}]}, 0x1, 0x443, &(0x7f0000000380)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x1, 0x100}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 52.410542935s ago: executing program 4 (id=706): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x7) ptrace(0x4208, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f, 0x0, 0x0, @void, @value}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 52.381997855s ago: executing program 4 (id=709): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 52.364113726s ago: executing program 4 (id=710): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) 52.345055916s ago: executing program 4 (id=711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x10000002}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0xfff1, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}}, 0x0) 52.158150738s ago: executing program 4 (id=716): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r4}) 52.134309559s ago: executing program 34 (id=716): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r4}) 1.140209085s ago: executing program 2 (id=2161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981"], 0x1000f) 981.414118ms ago: executing program 5 (id=2165): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0) 905.137418ms ago: executing program 7 (id=2166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x3, 0xff, 0x5e, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) 727.72272ms ago: executing program 5 (id=2168): utime(0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r0 = syz_io_uring_setup(0x1727, &(0x7f0000000080)={0x0, 0xc78d, 0x0, 0x400002, 0x3a6}, &(0x7f0000000040)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) unshare(0x28000600) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x1ae0, 0x4, 0x48, 0x0, 0x0) 609.029202ms ago: executing program 0 (id=2170): r0 = socket$nl_route(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x2000000, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 566.737802ms ago: executing program 7 (id=2173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="0802010000200000e0ffffffffffffff7dfa00000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 468.907423ms ago: executing program 5 (id=2174): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000003c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x9, 0x7}]}) 465.277753ms ago: executing program 0 (id=2175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 369.021835ms ago: executing program 7 (id=2177): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 368.640665ms ago: executing program 7 (id=2178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31b00) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) 368.283495ms ago: executing program 0 (id=2179): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0xb, 0x4) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r1, &(0x7f00000084c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/16, 0x10}, 0xa}], 0x1, 0x45833af92e4b39fd, 0x0) 362.578855ms ago: executing program 5 (id=2180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) close_range(r2, 0xffffffffffffffff, 0x400000000000000) 336.093165ms ago: executing program 7 (id=2181): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 261.166996ms ago: executing program 6 (id=2183): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty, 0x0, 0x0, 0x1000000}}) 255.214886ms ago: executing program 5 (id=2184): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) lgetxattr(0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x4002}, 0x80) 254.999176ms ago: executing program 2 (id=2185): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000339a00000000000000000000850000002e00000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, 0x0, &(0x7f0000000140)) 247.491317ms ago: executing program 6 (id=2186): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 215.439687ms ago: executing program 2 (id=2187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"}) syz_open_pts(r2, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r4 = eventfd(0x10) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000180)='0', 0x1, 0xceaa, 0x0, 0x5, r4}]) close_range(r2, 0xffffffffffffffff, 0x0) 169.190827ms ago: executing program 7 (id=2188): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) 168.716898ms ago: executing program 0 (id=2189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40000000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 168.294027ms ago: executing program 6 (id=2190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 139.230158ms ago: executing program 5 (id=2191): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r5, 0x0, 0x25a5, 0x0) 124.599358ms ago: executing program 6 (id=2192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r2) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 77.157999ms ago: executing program 2 (id=2193): getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x946a, 0x4, 0xfffffff7, 0x2}, &(0x7f0000000040)=0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000e00000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000a01010200000000000000000d0001007564703a73"], 0x54}}, 0x0) 56.823659ms ago: executing program 2 (id=2194): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) io_submit(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004014}, 0x2040000) 37.077969ms ago: executing program 2 (id=2195): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 36.826799ms ago: executing program 6 (id=2196): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x11}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x9}}]}, 0x90}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.708989ms ago: executing program 0 (id=2197): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r1, 0x5) accept4(r1, &(0x7f0000000040)=@x25, 0x0, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 6 (id=2198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x8c7) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): syz.0.214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.852878][ T3981] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 46.904988][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.954507][ T3985] mmap: syz.3.215 (3985) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.010560][ T3988] SELinux: ebitmap: truncated map [ 47.032664][ T3988] SELinux: failed to load policy [ 47.056039][ T3995] loop3: detected capacity change from 0 to 512 [ 47.064737][ T3995] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.078828][ T3995] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 47.089309][ T3995] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 47.100282][ T3995] System zones: 0-2, 18-18, 34-34 [ 47.108223][ T3995] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 47.127566][ T3995] EXT4-fs (loop3): 1 truncate cleaned up [ 47.134613][ T3995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.160700][ T4004] loop0: detected capacity change from 0 to 128 [ 47.172156][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.184220][ T4002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 47.193819][ T4004] wireguard0: entered promiscuous mode [ 47.200368][ T4004] wireguard0: entered allmulticast mode [ 47.213847][ T4002] hsr_slave_0: left promiscuous mode [ 47.215028][ T4007] loop3: detected capacity change from 0 to 512 [ 47.226953][ T4002] hsr_slave_1: left promiscuous mode [ 47.227286][ T4007] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.240425][ T4007] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.250434][ T4007] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 47.259339][ T4007] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 47.268719][ T4007] EXT4-fs (loop3): 1 truncate cleaned up [ 47.278499][ T4007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.314126][ T4007] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 47.343554][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.494702][ T4024] netlink: 44 bytes leftover after parsing attributes in process `syz.3.232'. [ 47.514044][ T4024] netlink: 44 bytes leftover after parsing attributes in process `syz.3.232'. [ 47.640040][ T4031] netlink: 96 bytes leftover after parsing attributes in process `syz.1.235'. [ 47.707144][ T4038] SELinux: failed to load policy [ 47.759060][ T30] kauditd_printk_skb: 190 callbacks suppressed [ 47.759078][ T30] audit: type=1326 audit(1746049047.995:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7eff95ede969 code=0x7ffc0000 [ 47.805236][ T30] audit: type=1326 audit(1746049048.035:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7eff95ede969 code=0x7ffc0000 [ 47.832806][ T30] audit: type=1326 audit(1746049048.045:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7eff95ede969 code=0x7ffc0000 [ 47.868326][ T4043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 47.878963][ T4043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 47.923820][ T30] audit: type=1326 audit(1746049048.105:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7eff95ede969 code=0x7ffc0000 [ 47.950492][ T30] audit: type=1400 audit(1746049048.135:827): avc: denied { ioctl } for pid=4054 comm="syz.4.243" path="" dev="cgroup2" ino=146 ioctlcmd=0x2406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.977254][ T30] audit: type=1400 audit(1746049048.175:828): avc: denied { bind } for pid=4059 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 47.999880][ T30] audit: type=1400 audit(1746049048.185:829): avc: denied { name_bind } for pid=4059 comm="syz.1.245" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 48.023236][ T30] audit: type=1400 audit(1746049048.185:830): avc: denied { node_bind } for pid=4059 comm="syz.1.245" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 48.047472][ T30] audit: type=1400 audit(1746049048.185:831): avc: denied { listen } for pid=4059 comm="syz.1.245" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 48.070747][ T30] audit: type=1400 audit(1746049048.185:832): avc: denied { connect } for pid=4059 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 48.120131][ T4065] loop0: detected capacity change from 0 to 736 [ 48.292127][ T4075] ALSA: seq fatal error: cannot create timer (-19) [ 48.524516][ T4102] SELinux: Context Ü is not valid (left unmapped). [ 48.748503][ T4107] syzkaller0: entered promiscuous mode [ 48.754987][ T4107] syzkaller0: entered allmulticast mode [ 49.069041][ T4123] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 49.077165][ T10] IPVS: starting estimator thread 0... [ 49.162138][ T4130] loop3: detected capacity change from 0 to 128 [ 49.169603][ T4126] IPVS: using max 2352 ests per chain, 117600 per kthread [ 49.170965][ T4130] msdos: Unknown parameter '¤+Â…©' [ 49.396276][ T4150] pim6reg1: entered promiscuous mode [ 49.403249][ T4150] pim6reg1: entered allmulticast mode [ 49.431798][ T4154] loop9: detected capacity change from 0 to 7 [ 49.438859][ T4154] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.447586][ T4154] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.456856][ T4154] loop9: unable to read partition table [ 49.462853][ T4154] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 49.462853][ T4154] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 49.555381][ T4160] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 49.755670][ T4183] lo speed is unknown, defaulting to 1000 [ 49.977809][ T4201] loop1: detected capacity change from 0 to 128 [ 50.002179][ T4201] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.017330][ T4201] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.096539][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.196905][ T4221] loop1: detected capacity change from 0 to 2048 [ 50.206455][ T4223] pim6reg: entered allmulticast mode [ 50.239853][ T4221] loop1: p1 < > p3 [ 50.244958][ T4221] loop1: p3 size 134217728 extends beyond EOD, truncated [ 50.280105][ T4227] SELinux: security_context_str_to_sid () failed with errno=-22 [ 50.358962][ T4233] loop3: detected capacity change from 0 to 128 [ 50.382592][ T4233] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.397250][ T4233] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.445041][ T4233] EXT4-fs error (device loop3): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.3.314: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 50.482358][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.800946][ T4257] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 50.800946][ T4257] program syz.0.324 not setting count and/or reply_len properly [ 50.824998][ T4254] loop4: detected capacity change from 0 to 1024 [ 50.836401][ T4254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.867461][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.915094][ T4265] loop4: detected capacity change from 0 to 512 [ 50.923672][ T4265] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.327: casefold flag without casefold feature [ 50.938816][ T4265] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.327: couldn't read orphan inode 15 (err -117) [ 50.951490][ T4265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.983074][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.097940][ T4279] validate_nla: 6 callbacks suppressed [ 51.097957][ T4279] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 51.120355][ T4279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.144613][ T4279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.161384][ T4279] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 51.175532][ T4279] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 51.195758][ T4287] ip6erspan0: entered promiscuous mode [ 51.204761][ T4287] bond1: (slave ip6erspan0): making interface the new active one [ 51.213807][ T4287] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 51.406857][ T4307] loop4: detected capacity change from 0 to 128 [ 51.417883][ T4307] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.432444][ T4307] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.473240][ T4307] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.4.344: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 51.511884][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.792569][ T4330] !: renamed from dummy0 (while UP) [ 51.995862][ T4334] lo speed is unknown, defaulting to 1000 [ 52.262543][ T4355] lo speed is unknown, defaulting to 1000 [ 52.378207][ T27] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.462821][ T27] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.496962][ T4372] loop4: detected capacity change from 0 to 164 [ 52.506212][ T4372] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 52.539066][ T27] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.554248][ T4363] lo speed is unknown, defaulting to 1000 [ 52.605530][ T27] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.687650][ T4363] chnl_net:caif_netlink_parms(): no params data found [ 52.716787][ T27] bridge_slave_1: left allmulticast mode [ 52.722914][ T27] bridge_slave_1: left promiscuous mode [ 52.728878][ T27] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.739385][ T27] bridge_slave_0: left allmulticast mode [ 52.745729][ T27] bridge_slave_0: left promiscuous mode [ 52.751855][ T27] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.786494][ T30] kauditd_printk_skb: 223 callbacks suppressed [ 52.786512][ T30] audit: type=1400 audit(1746049053.025:1056): avc: denied { block_suspend } for pid=4389 comm="syz.3.377" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.851597][ T30] audit: type=1326 audit(1746049053.065:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.3.377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2d225e969 code=0x0 [ 52.878982][ T30] audit: type=1400 audit(1746049053.095:1058): avc: denied { write } for pid=4391 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.902123][ T30] audit: type=1400 audit(1746049053.095:1059): avc: denied { read } for pid=4391 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.950227][ T30] audit: type=1400 audit(1746049053.185:1060): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.976211][ T27] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.987640][ T27] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.998817][ T27] bond0 (unregistering): Released all slaves [ 53.043439][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.052162][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.060006][ T4363] bridge_slave_0: entered allmulticast mode [ 53.067160][ T4363] bridge_slave_0: entered promiscuous mode [ 53.075170][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.083143][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.091086][ T4363] bridge_slave_1: entered allmulticast mode [ 53.098191][ T4363] bridge_slave_1: entered promiscuous mode [ 53.123754][ T27] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.132047][ T27] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.142021][ T27] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.151607][ T27] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.164283][ T27] veth1_macvtap: left promiscuous mode [ 53.172782][ T27] veth0_macvtap: left promiscuous mode [ 53.178820][ T27] veth1_vlan: left promiscuous mode [ 53.184894][ T27] veth0_vlan: left promiscuous mode [ 53.252967][ T27] team0 (unregistering): Port device team_slave_1 removed [ 53.264451][ T27] team0 (unregistering): Port device team_slave_0 removed [ 53.272663][ T30] audit: type=1400 audit(1746049053.515:1061): avc: denied { create } for pid=4406 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.296657][ T30] audit: type=1400 audit(1746049053.515:1062): avc: denied { ioctl } for pid=4406 comm="syz.0.382" path="socket:[7440]" dev="sockfs" ino=7440 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.328827][ T4363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.344120][ T4408] syzkaller1: entered promiscuous mode [ 53.350165][ T4408] syzkaller1: entered allmulticast mode [ 53.360179][ T4363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.389062][ T4363] team0: Port device team_slave_0 added [ 53.397858][ T4363] team0: Port device team_slave_1 added [ 53.415244][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.423061][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.452788][ T4363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.466134][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.474095][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.503300][ T4363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.550579][ T4416] syzkaller0: entered promiscuous mode [ 53.557139][ T4416] syzkaller0: entered allmulticast mode [ 53.567776][ T4363] hsr_slave_0: entered promiscuous mode [ 53.575673][ T4363] hsr_slave_1: entered promiscuous mode [ 53.584797][ T4420] loop0: detected capacity change from 0 to 512 [ 53.595423][ T4420] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 53.606744][ T4420] System zones: 1-12 [ 53.612698][ T4420] EXT4-fs error (device loop0): dx_probe:793: inode #2: comm syz.0.386: Directory hole found for htree index block 0 [ 53.631998][ T4420] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 53.641705][ T4420] EXT4-fs error (device loop0): dx_probe:793: inode #2: comm syz.0.386: Directory hole found for htree index block 0 [ 53.665675][ T4420] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 53.676231][ T4420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.727913][ T4363] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 53.738930][ T4363] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.749954][ T4363] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.764209][ T4363] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 53.768503][ T30] audit: type=1326 audit(1746049054.005:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c133e969 code=0x7ffc0000 [ 53.801049][ T30] audit: type=1326 audit(1746049054.005:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19c133e969 code=0x7ffc0000 [ 53.836022][ T30] audit: type=1326 audit(1746049054.015:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f19c1335927 code=0x7ffc0000 [ 53.949304][ T4363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.985299][ T4433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.003676][ T4363] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.013327][ T4433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.036997][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.044570][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.056297][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.064189][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.113205][ T4363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.170325][ T4438] netlink: 'syz.2.392': attribute type 11 has an invalid length. [ 54.184285][ T4438] __nla_validate_parse: 11 callbacks suppressed [ 54.184311][ T4438] netlink: 448 bytes leftover after parsing attributes in process `syz.2.392'. [ 54.275478][ T4363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.424848][ T4363] veth0_vlan: entered promiscuous mode [ 54.437268][ T4363] veth1_vlan: entered promiscuous mode [ 54.445487][ T4423] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 54.468855][ T4464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 54.475740][ T4363] veth0_macvtap: entered promiscuous mode [ 54.488654][ T4363] veth1_macvtap: entered promiscuous mode [ 54.503038][ T4464] team0 (unregistering): Port device team_slave_0 removed [ 54.512801][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.514397][ T4464] team0 (unregistering): Port device team_slave_1 removed [ 54.551625][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.563260][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.574952][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.586140][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.596918][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.608019][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.619572][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.632117][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.644294][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.685986][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.697554][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.708592][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.720325][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.732115][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.743926][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.754638][ T4363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.765956][ T4363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.777821][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.794981][ T4473] netlink: 60 bytes leftover after parsing attributes in process `syz.4.400'. [ 54.811513][ T4363] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.821398][ T4363] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.831038][ T4363] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.840663][ T4363] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.965135][ T4480] 9pnet: p9_errstr2errno: server reported unknown error [ 55.136502][ T4485] geneve2: entered promiscuous mode [ 55.238403][ T4490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 55.343176][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.351134][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.423700][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.434869][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.465700][ T4478] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.476251][ T4478] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.486519][ T4478] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.498230][ T4478] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.784470][ T4512] netlink: 'syz.4.414': attribute type 11 has an invalid length. [ 55.794064][ T4512] netlink: 448 bytes leftover after parsing attributes in process `syz.4.414'. [ 55.844555][ T4514] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 55.908760][ T4518] tipc: Started in network mode [ 55.914269][ T4518] tipc: Node identity ac14140f, cluster identity 4711 [ 55.942028][ T4518] tipc: New replicast peer: 255.0.0.255 [ 55.948445][ T4518] tipc: Enabled bearer , priority 10 [ 55.970303][ T4524] netlink: 24 bytes leftover after parsing attributes in process `syz.5.420'. [ 55.982315][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.420'. [ 56.136663][ T4533] lo speed is unknown, defaulting to 1000 [ 56.162256][ T4535] ref_ctr increment failed for inode: 0x1de offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888100058580 [ 56.197867][ T4522] lo speed is unknown, defaulting to 1000 [ 56.208629][ T4534] uprobe: syz.0.425:4534 failed to unregister, leaking uprobe [ 56.310739][ T4538] netlink: 'syz.0.426': attribute type 11 has an invalid length. [ 56.328652][ T4538] netlink: 448 bytes leftover after parsing attributes in process `syz.0.426'. [ 56.554036][ T4545] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 56.682292][ T4533] lo speed is unknown, defaulting to 1000 [ 57.070041][ T2968] tipc: Node number set to 2886997007 [ 57.087359][ T4557] IPv4: Oversized IP packet from 127.202.26.0 [ 57.117366][ T4555] loop3: detected capacity change from 0 to 8192 [ 57.215028][ T4563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.239626][ T4563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.253842][ T4561] loop4: detected capacity change from 0 to 2048 [ 57.330088][ T4561] loop4: p1 < > p4 [ 57.335542][ T4561] loop4: p4 size 8388608 extends beyond EOD, truncated [ 57.335720][ T4566] loop0: detected capacity change from 0 to 512 [ 57.373817][ T4566] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 57.391351][ T4570] loop4: detected capacity change from 0 to 512 [ 57.399370][ T4566] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.438: invalid indirect mapped block 2683928664 (level 1) [ 57.419742][ T4566] EXT4-fs (loop0): Remounting filesystem read-only [ 57.427974][ T4570] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.439: corrupted in-inode xattr: invalid ea_ino [ 57.443785][ T4566] EXT4-fs (loop0): 1 truncate cleaned up [ 57.451866][ T4566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.452247][ T4570] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.439: couldn't read orphan inode 15 (err -117) [ 57.477801][ T4566] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 57.506781][ T4570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.611750][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.797072][ T30] kauditd_printk_skb: 224 callbacks suppressed [ 57.797087][ T30] audit: type=1400 audit(1746049058.035:1290): avc: denied { write } for pid=4569 comm="syz.4.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.207420][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.297683][ T1038] kernel write not supported for file bpf-prog (pid: 1038 comm: kworker/1:2) [ 58.438076][ T30] audit: type=1400 audit(1746049058.675:1291): avc: denied { read } for pid=4595 comm="syz.5.448" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.598187][ T4600] pim6reg1: entered promiscuous mode [ 58.603967][ T4600] pim6reg1: entered allmulticast mode [ 58.790046][ T30] audit: type=1400 audit(1746049059.025:1292): avc: denied { create } for pid=4605 comm="syz.5.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.810710][ T30] audit: type=1400 audit(1746049059.025:1293): avc: denied { connect } for pid=4605 comm="syz.5.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.832920][ T30] audit: type=1400 audit(1746049059.035:1294): avc: denied { write } for pid=4605 comm="syz.5.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.884516][ T30] audit: type=1400 audit(1746049059.125:1295): avc: denied { read write } for pid=4609 comm="syz.0.455" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.910540][ T30] audit: type=1400 audit(1746049059.125:1296): avc: denied { open } for pid=4609 comm="syz.0.455" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.915637][ T4610] program syz.0.455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.956278][ T4612] loop5: detected capacity change from 0 to 512 [ 58.984054][ T30] audit: type=1326 audit(1746049059.215:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9b87e969 code=0x7fc00000 [ 59.038317][ T30] audit: type=1400 audit(1746049059.275:1298): avc: denied { create } for pid=4613 comm="syz.5.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 59.098134][ T4622] loop0: detected capacity change from 0 to 512 [ 59.116785][ T30] audit: type=1400 audit(1746049059.355:1299): avc: denied { ioctl } for pid=4613 comm="syz.5.458" path="socket:[7861]" dev="sockfs" ino=7861 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 59.145186][ T4622] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.460: Invalid inode bitmap blk 4 in block_group 0 [ 59.161177][ T4622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.235187][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.270390][ T4633] loop4: detected capacity change from 0 to 512 [ 59.285821][ T4633] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.295833][ T4633] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 59.306242][ T4633] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 59.316206][ T4633] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 59.327034][ T4633] System zones: 0-2, 18-18, 34-34 [ 59.333355][ T4633] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 59.364039][ T4633] EXT4-fs (loop4): 1 truncate cleaned up [ 59.370703][ T4633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.414099][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.504396][ T4647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 59.567631][ T4657] loop4: detected capacity change from 0 to 256 [ 59.895279][ T4674] loop3: detected capacity change from 0 to 512 [ 59.948700][ T4681] loop4: detected capacity change from 0 to 512 [ 59.962933][ T4674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.988197][ T4681] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 59.998385][ T4674] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.011534][ T4681] System zones: 1-12 [ 60.016272][ T4681] EXT4-fs error (device loop4): dx_probe:793: inode #2: comm syz.4.486: Directory hole found for htree index block 0 [ 60.053643][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.085411][ T4681] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 60.115538][ T4681] EXT4-fs error (device loop4): dx_probe:793: inode #2: comm syz.4.486: Directory hole found for htree index block 0 [ 60.131989][ T4681] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 60.162270][ T4681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.330579][ T4704] random: crng reseeded on system resumption [ 60.358885][ T4706] wireguard0: entered promiscuous mode [ 60.364970][ T4706] wireguard0: entered allmulticast mode [ 60.454608][ T2968] Process accounting resumed [ 60.567098][ T4721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.502'. [ 60.737149][ T4730] ip6erspan0: entered promiscuous mode [ 60.828489][ T4712] Process accounting resumed [ 61.009527][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.088611][ T4736] SELinux: ebitmap: truncated map [ 61.096807][ T4736] SELinux: failed to load policy [ 61.298085][ T4744] loop5: detected capacity change from 0 to 736 [ 61.399550][ T4748] netlink: 164 bytes leftover after parsing attributes in process `syz.2.523'. [ 61.636580][ T4761] netlink: 'syz.0.518': attribute type 11 has an invalid length. [ 61.648117][ T4761] netlink: 448 bytes leftover after parsing attributes in process `syz.0.518'. [ 61.664399][ T4764] netlink: 28 bytes leftover after parsing attributes in process `syz.5.520'. [ 62.054904][ T4797] loop5: detected capacity change from 0 to 512 [ 62.089155][ T4797] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 62.232755][ T4797] EXT4-fs (loop5): 1 truncate cleaned up [ 62.239376][ T4797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.271663][ T4813] pim6reg1: entered promiscuous mode [ 62.276892][ T4797] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.5.535: corrupted xattr block 33: invalid header [ 62.277568][ T4813] pim6reg1: entered allmulticast mode [ 62.322142][ T4797] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.535: corrupted xattr block 33: invalid header [ 62.336592][ T4797] EXT4-fs warning (device loop5): ext4_evict_inode:279: xattr delete (err -117) [ 62.363496][ T4363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.394809][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.545'. [ 62.440465][ T4829] IPv6: sit1: Disabled Multicast RS [ 62.897796][ T4854] netlink: 28 bytes leftover after parsing attributes in process `syz.4.556'. [ 62.907684][ T4854] netlink: 28 bytes leftover after parsing attributes in process `syz.4.556'. [ 63.012191][ T4864] loop4: detected capacity change from 0 to 512 [ 63.042651][ T4866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 63.053319][ T4866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 63.053505][ T4864] __quota_error: 350 callbacks suppressed [ 63.053549][ T4864] Quota error (device loop4): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 63.081756][ T4864] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 63.093785][ T4864] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.557: Failed to acquire dquot type 1 [ 63.125703][ T4864] EXT4-fs (loop4): 1 truncate cleaned up [ 63.133148][ T4870] 9pnet: p9_errstr2errno: server reported unknown error [ 63.133899][ T4864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.156053][ T4864] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.208422][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.435403][ T4888] loop5: detected capacity change from 0 to 512 [ 63.452665][ T4888] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 63.462120][ T4888] System zones: 1-12 [ 63.473764][ T4888] EXT4-fs error (device loop5): dx_probe:793: inode #2: comm syz.5.567: Directory hole found for htree index block 0 [ 63.488275][ T4888] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 63.499315][ T4888] EXT4-fs error (device loop5): dx_probe:793: inode #2: comm syz.5.567: Directory hole found for htree index block 0 [ 63.514240][ T4888] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 63.524451][ T4888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.556141][ T30] audit: type=1326 audit(1746049063.795:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd131e969 code=0x7ffc0000 [ 63.585297][ T30] audit: type=1326 audit(1746049063.825:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9cd1315927 code=0x7ffc0000 [ 63.611155][ T30] audit: type=1326 audit(1746049063.825:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9cd12bab39 code=0x7ffc0000 [ 63.636417][ T30] audit: type=1326 audit(1746049063.825:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd131e969 code=0x7ffc0000 [ 63.662153][ T30] audit: type=1326 audit(1746049063.825:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cd131e969 code=0x7ffc0000 [ 63.688380][ T30] audit: type=1326 audit(1746049063.825:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd131e969 code=0x7ffc0000 [ 63.713601][ T30] audit: type=1326 audit(1746049063.825:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd131e969 code=0x7ffc0000 [ 63.739123][ T30] audit: type=1326 audit(1746049063.825:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4886 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9cd131e969 code=0x7ffc0000 [ 63.948078][ T4915] veth3: entered promiscuous mode [ 63.953627][ T4915] veth3: entered allmulticast mode [ 64.018530][ T4923] loop4: detected capacity change from 0 to 1024 [ 64.026698][ T4923] EXT4-fs: Ignoring removed bh option [ 64.032275][ T4923] EXT4-fs: Ignoring removed orlov option [ 64.055757][ T4923] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.583: Allocating blocks 385-513 which overlap fs metadata [ 64.072604][ T4923] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.583: Allocating blocks 385-513 which overlap fs metadata [ 64.090558][ T4923] EXT4-fs (loop4): pa ffff8881065a0690: logic 16, phys. 129, len 24 [ 64.099124][ T4923] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 64.278508][ T4945] loop3: detected capacity change from 0 to 1024 [ 64.286342][ T4945] EXT4-fs: Ignoring removed nobh option [ 64.292744][ T4945] EXT4-fs: Ignoring removed bh option [ 64.352567][ T4945] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 64.430286][ T3313] Trying to write to read-only block-device loop3 [ 64.502155][ T4955] loop3: detected capacity change from 0 to 512 [ 64.511667][ T4955] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 64.520664][ T4955] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 64.533325][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 64.542777][ T3386] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.601282][ T4962] loop5: detected capacity change from 0 to 1024 [ 64.603854][ T4964] loop3: detected capacity change from 0 to 512 [ 64.609127][ T4962] EXT4-fs: Ignoring removed bh option [ 64.620197][ T4964] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 64.622372][ T4962] EXT4-fs: Ignoring removed orlov option [ 64.655051][ T4962] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.598: Allocating blocks 385-513 which overlap fs metadata [ 64.674497][ T4962] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.598: Allocating blocks 385-513 which overlap fs metadata [ 64.693084][ T4962] EXT4-fs (loop5): pa ffff8881066000e0: logic 16, phys. 129, len 24 [ 64.700249][ T4968] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 64.702985][ T4962] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 64.751568][ T4970] loop3: detected capacity change from 0 to 2048 [ 64.790056][ T4970] loop3: p1 < > p4 [ 64.794847][ T4970] loop3: p4 size 8388608 extends beyond EOD, truncated [ 64.858864][ T4976] SELinux: failed to load policy [ 64.875199][ T4981] loop5: detected capacity change from 0 to 512 [ 64.891516][ T4981] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.068337][ T4996] loop4: detected capacity change from 0 to 512 [ 65.089805][ T4996] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.611: casefold flag without casefold feature [ 65.105047][ T4996] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.611: couldn't read orphan inode 15 (err -117) [ 65.181072][ T5005] loop5: detected capacity change from 0 to 512 [ 65.198915][ T5005] EXT4-fs: inline encryption not supported [ 65.207090][ T5005] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 65.219773][ T5005] EXT4-fs (loop5): 1 truncate cleaned up [ 65.324473][ T5015] __nla_validate_parse: 3 callbacks suppressed [ 65.324490][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 65.325549][ T5013] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 65.349792][ T5013] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 65.376451][ T5017] loop4: detected capacity change from 0 to 256 [ 65.424912][ T5023] 9pnet: p9_errstr2errno: server reported unknown error [ 65.561243][ T5031] tipc: Failed to remove unknown binding: 66,1,1/2886997007:26896381/26896382 [ 65.571139][ T5031] tipc: Failed to remove unknown binding: 66,1,1/2886997007:26896381/26896382 [ 65.686575][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 65.826667][ T5047] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 65.884516][ T5055] 9pnet: p9_errstr2errno: server reported unknown error [ 66.113743][ T5076] loop4: detected capacity change from 0 to 128 [ 66.128051][ T5076] wireguard0: entered promiscuous mode [ 66.134099][ T5076] wireguard0: entered allmulticast mode [ 66.161089][ T5080] netlink: 'syz.2.657': attribute type 4 has an invalid length. [ 66.169327][ T5080] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.657'. [ 66.284256][ T5088] loop4: detected capacity change from 0 to 512 [ 66.303182][ T5088] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 66.312389][ T5088] EXT4-fs (loop4): orphan cleanup on readonly fs [ 66.320241][ T5088] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.650: Failed to acquire dquot type 1 [ 66.333240][ T5088] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.650: bg 0: block 40: padding at end of block bitmap is not set [ 66.349673][ T5088] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 66.360507][ T5088] EXT4-fs (loop4): 1 truncate cleaned up [ 66.923735][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 66.961914][ T5096] bridge_slave_0: left allmulticast mode [ 66.967812][ T5096] bridge_slave_0: left promiscuous mode [ 66.974675][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.984306][ T5096] bridge_slave_1: left allmulticast mode [ 66.991431][ T5096] bridge_slave_1: left promiscuous mode [ 66.997681][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.007841][ T5096] bond0: (slave bond_slave_0): Releasing backup interface [ 67.025730][ T5096] bond0: (slave bond_slave_1): Releasing backup interface [ 67.052934][ T5096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.061658][ T5096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.072759][ T5096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.074450][ T5098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 67.080503][ T5096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.147630][ T5100] 9pnet: p9_errstr2errno: server reported unknown error [ 67.177735][ T5103] loop3: detected capacity change from 0 to 2048 [ 67.185912][ T5103] ext4: Unknown parameter 'noacl' [ 67.200421][ T5105] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 67.233161][ T5111] loop3: detected capacity change from 0 to 1024 [ 67.243056][ T5111] EXT4-fs: Ignoring removed bh option [ 67.250094][ T5111] EXT4-fs: Ignoring removed orlov option [ 67.268210][ T5115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.325153][ T5115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.376574][ T5123] SELinux: failed to load policy [ 67.387832][ T5115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.401962][ T5126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.660'. [ 67.452646][ T5115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.506777][ T5136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.531474][ T5115] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.544729][ T5115] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.555767][ T5136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.569836][ T5115] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.583949][ T5115] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.641907][ T5141] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 67.651284][ T5141] tipc: Enabled bearer , priority 10 [ 68.031423][ T5155] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 68.052784][ T5157] usb usb6: usbfs: process 5157 (syz.4.681) did not claim interface 0 before use [ 68.122351][ T30] kauditd_printk_skb: 739 callbacks suppressed [ 68.122370][ T30] audit: type=1400 audit(1746049068.365:2395): avc: denied { write } for pid=3316 comm="syz-executor" name="129" dev="tmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 68.158306][ T30] audit: type=1400 audit(1746049068.365:2396): avc: denied { remove_name } for pid=3316 comm="syz-executor" name="binderfs" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 68.187255][ T30] audit: type=1400 audit(1746049068.365:2397): avc: denied { rmdir } for pid=3316 comm="syz-executor" name="129" dev="tmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 68.233901][ T5161] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 68.280077][ T5164] loop4: detected capacity change from 0 to 512 [ 68.316005][ T5164] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.359010][ T5164] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.684: corrupted inode contents [ 68.400933][ T5164] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.684: mark_inode_dirty error [ 68.417665][ T5164] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.684: corrupted inode contents [ 68.443438][ T5164] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.684: mark_inode_dirty error [ 68.494208][ T5172] siw: device registration error -23 [ 68.519375][ T30] audit: type=1400 audit(1746049068.755:2398): avc: denied { ioctl } for pid=5162 comm="syz.4.684" path="/148/file0/file1" dev="loop4" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.091752][ T30] audit: type=1400 audit(1746049069.315:2399): avc: denied { ioctl } for pid=5190 comm="syz.4.696" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.162210][ T5191] loop4: detected capacity change from 0 to 8192 [ 69.200618][ T5191] loop4: p1 p2 p3 p4 [ 69.205130][ T5191] loop4: p1 size 108922248 extends beyond EOD, truncated [ 69.213646][ T5191] loop4: p2 start 861536256 is beyond EOD, truncated [ 69.221484][ T5191] loop4: p3 start 851968 is beyond EOD, truncated [ 69.228717][ T5191] loop4: p4 size 65536 extends beyond EOD, truncated [ 69.380016][ T30] audit: type=1400 audit(1746049069.625:2400): avc: denied { listen } for pid=5194 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.417925][ T30] audit: type=1400 audit(1746049069.645:2401): avc: denied { accept } for pid=5194 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.420798][ T5197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5197 comm=syz.2.699 [ 69.472078][ T30] audit: type=1400 audit(1746049069.695:2402): avc: denied { read write } for pid=5199 comm="syz.0.702" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 69.498759][ T30] audit: type=1400 audit(1746049069.695:2403): avc: denied { open } for pid=5199 comm="syz.0.702" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 69.609692][ T4063] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.622834][ T5201] lo speed is unknown, defaulting to 1000 [ 69.699363][ T4063] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.813967][ T5230] bridge_slave_0: left allmulticast mode [ 69.820121][ T5230] bridge_slave_0: left promiscuous mode [ 69.826290][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.837086][ T5230] bridge_slave_1: left allmulticast mode [ 69.843008][ T5230] bridge_slave_1: left promiscuous mode [ 69.849115][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.857575][ T5230] bond0: (slave bond_slave_0): Releasing backup interface [ 69.866303][ T5230] bond0: (slave bond_slave_1): Releasing backup interface [ 69.875781][ T5230] team0: Port device team_slave_0 removed [ 69.883028][ T5230] team0: Port device team_slave_1 removed [ 69.889861][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.897676][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.909805][ T4063] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.942661][ T5236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.715'. [ 69.991343][ T5236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.011359][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.715'. [ 70.025358][ T4063] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.048635][ T5236] bond1 (unregistering): Released all slaves [ 70.059320][ T5232] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 70.065876][ T5232] syzkaller0: Linktype set failed because interface is up [ 70.069688][ T3380] syzkaller0: tun_net_xmit 76 [ 70.079185][ T3381] syzkaller0: tun_net_xmit 76 [ 70.082417][ T5201] chnl_net:caif_netlink_parms(): no params data found [ 70.174551][ T5239] lo speed is unknown, defaulting to 1000 [ 70.182152][ T4063] bridge_slave_1: left allmulticast mode [ 70.188023][ T4063] bridge_slave_1: left promiscuous mode [ 70.194344][ T4063] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.205706][ T4063] bridge_slave_0: left allmulticast mode [ 70.211989][ T4063] bridge_slave_0: left promiscuous mode [ 70.218444][ T4063] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.322112][ T4063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.332430][ T4063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.342621][ T4063] bond0 (unregistering): Released all slaves [ 70.356579][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.364110][ T5201] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.372445][ T5201] bridge_slave_0: entered allmulticast mode [ 70.380065][ T5201] bridge_slave_0: entered promiscuous mode [ 70.392448][ T5201] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.400721][ T5201] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.408341][ T5201] bridge_slave_1: entered allmulticast mode [ 70.415744][ T5201] bridge_slave_1: entered promiscuous mode [ 70.447748][ T5201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.469120][ T5201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.494748][ T4063] hsr_slave_0: left promiscuous mode [ 70.500548][ T4063] hsr_slave_1: left promiscuous mode [ 70.506844][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.517894][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.526420][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.534416][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.544704][ T4063] veth1_macvtap: left promiscuous mode [ 70.550273][ T4063] veth0_macvtap: left promiscuous mode [ 70.556233][ T4063] veth1_vlan: left promiscuous mode [ 70.562063][ T4063] veth0_vlan: left promiscuous mode [ 70.645397][ T41] smc: removing ib device syz0 [ 70.652642][ T5201] team0: Port device team_slave_0 added [ 70.659215][ T3386] lo speed is unknown, defaulting to 1000 [ 70.665165][ T3386] syz0: Port: 1 Link DOWN [ 70.672671][ T5201] team0: Port device team_slave_1 added [ 70.699825][ T5201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.707319][ T5201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.734935][ T5201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.755527][ T5201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.763352][ T5201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.790671][ T5201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.846610][ T5201] hsr_slave_0: entered promiscuous mode [ 70.853322][ T5201] hsr_slave_1: entered promiscuous mode [ 70.859590][ T5201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.868177][ T5201] Cannot create hsr debugfs directory [ 70.877459][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 70.935921][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.943394][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.951653][ T5239] bridge_slave_0: entered allmulticast mode [ 70.958956][ T5239] bridge_slave_0: entered promiscuous mode [ 70.968496][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.976949][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.985305][ T5239] bridge_slave_1: entered allmulticast mode [ 70.992298][ T5239] bridge_slave_1: entered promiscuous mode [ 71.026508][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.038416][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.068017][ T5239] team0: Port device team_slave_0 added [ 71.075712][ T5239] team0: Port device team_slave_1 added [ 71.093569][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.101226][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.132158][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.147784][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.155133][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.183381][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.222734][ T5270] loop5: detected capacity change from 0 to 736 [ 71.231362][ T5270] iso9660: Unknown parameter '§ÐQþ{Uº²a×ÓNÉDÙÂ?»sæM00000000000000000000' [ 71.244608][ T5239] hsr_slave_0: entered promiscuous mode [ 71.251712][ T5239] hsr_slave_1: entered promiscuous mode [ 71.257618][ T30] audit: type=1326 audit(1746049071.495:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd131e969 code=0x7ffc0000 [ 71.258523][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.291437][ T5239] Cannot create hsr debugfs directory [ 71.291547][ T5201] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 71.308039][ T5201] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 71.334098][ T4063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.352926][ T5201] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 71.377461][ T5201] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 71.399054][ T4063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.422962][ T5284] loop5: detected capacity change from 0 to 512 [ 71.431035][ T5284] EXT4-fs: Ignoring removed nobh option [ 71.441388][ T5284] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 71.450931][ T5284] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.728: attempt to clear invalid blocks 2 len 1 [ 71.466736][ T5284] EXT4-fs (loop5): Remounting filesystem read-only [ 71.475763][ T5284] EXT4-fs (loop5): 1 truncate cleaned up [ 71.486491][ T4063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.500109][ T5284] EXT4-fs mount: 19 callbacks suppressed [ 71.500129][ T5284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.588524][ T4063] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.601781][ T4363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.643293][ T5290] pim6reg1: entered promiscuous mode [ 71.649267][ T5290] pim6reg1: entered allmulticast mode [ 71.693431][ T5201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.716804][ T5201] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.736223][ T5239] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 71.750786][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.758839][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.770684][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.778620][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.816011][ T5239] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 71.835890][ T5292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.846307][ T5292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.932017][ T4063] bond0 (unregistering): Released all slaves [ 71.950428][ T5239] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 71.966419][ T5239] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 71.991335][ T4063] tipc: Disabling bearer [ 71.996829][ T4063] tipc: Disabling bearer [ 72.002810][ T4063] tipc: Left network mode [ 72.051196][ T4063] hsr_slave_0: left promiscuous mode [ 72.057242][ T4063] hsr_slave_1: left promiscuous mode [ 72.072182][ T4063] veth1_vlan: left promiscuous mode [ 72.077848][ T4063] veth0_vlan: left promiscuous mode [ 72.246968][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.274633][ T5201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.296026][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.314947][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.322762][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.350408][ T5239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.362392][ T5239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.407392][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.415691][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.480552][ T5330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'. [ 72.516841][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.595533][ T5201] veth0_vlan: entered promiscuous mode [ 72.622406][ T5349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.744'. [ 72.624574][ T5201] veth1_vlan: entered promiscuous mode [ 72.681425][ T5357] hub 9-0:1.0: USB hub found [ 72.721117][ T5357] hub 9-0:1.0: 8 ports detected [ 72.740884][ T5201] veth0_macvtap: entered promiscuous mode [ 72.748917][ T5201] veth1_macvtap: entered promiscuous mode [ 72.772768][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.784217][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.795955][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.807165][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.838994][ T5201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.868628][ T5368] pim6reg1: entered promiscuous mode [ 72.875807][ T5368] pim6reg1: entered allmulticast mode [ 72.907826][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.913802][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 72.919489][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.939536][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.951232][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.963161][ T5201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.977293][ T5239] veth0_vlan: entered promiscuous mode [ 72.990101][ T5376] syz.0.752 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 72.991403][ T5201] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.011092][ T5201] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.022672][ T5201] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.032356][ T5201] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.032618][ T5374] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 73.065253][ T5239] veth1_vlan: entered promiscuous mode [ 73.112737][ T5239] veth0_macvtap: entered promiscuous mode [ 73.125474][ T5239] veth1_macvtap: entered promiscuous mode [ 73.149233][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.161569][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.173548][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.185251][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.196276][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.207804][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.229187][ T5390] loop6: detected capacity change from 0 to 512 [ 73.236609][ T5390] EXT4-fs: Ignoring removed orlov option [ 73.246610][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.258756][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.270614][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.280991][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.284048][ T5390] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.701: corrupted in-inode xattr: invalid ea_ino [ 73.292164][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.292266][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.330222][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.342003][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.353467][ T5239] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.362958][ T5239] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.371476][ T5390] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.701: couldn't read orphan inode 15 (err -117) [ 73.372590][ T5239] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.394966][ T5239] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.412457][ T5390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.535929][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 73.535946][ T30] audit: type=1400 audit(1746049073.755:2436): avc: denied { map } for pid=5399 comm="syz.2.759" path="socket:[12748]" dev="sockfs" ino=12748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 73.611870][ T5201] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.625201][ T5402] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.665572][ T5404] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004 [ 73.695435][ T30] audit: type=1400 audit(1746049073.935:2437): avc: denied { create } for pid=5403 comm="syz.7.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.719242][ T5402] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.734331][ T30] audit: type=1400 audit(1746049073.935:2438): avc: denied { write } for pid=5403 comm="syz.7.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.801744][ T30] audit: type=1326 audit(1746049074.015:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bc49e969 code=0x7ffc0000 [ 73.826819][ T30] audit: type=1326 audit(1746049074.015:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bc49e969 code=0x7ffc0000 [ 73.883199][ T5411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.764'. [ 73.893569][ T5411] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 73.898061][ T30] audit: type=1326 audit(1746049074.075:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f19bc49e969 code=0x7ffc0000 [ 73.929566][ T30] audit: type=1326 audit(1746049074.075:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bc49e969 code=0x7ffc0000 [ 73.954724][ T30] audit: type=1326 audit(1746049074.075:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bc49e969 code=0x7ffc0000 [ 73.979904][ T30] audit: type=1326 audit(1746049074.095:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f19bc49e969 code=0x7ffc0000 [ 74.005054][ T30] audit: type=1326 audit(1746049074.105:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bc49e969 code=0x7ffc0000 [ 74.032341][ T5402] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.062431][ T5414] loop6: detected capacity change from 0 to 512 [ 74.070409][ T5414] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.079998][ T5414] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 74.100218][ T5414] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 74.113828][ T5402] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.139570][ T5414] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 74.149001][ T5414] System zones: 0-2, 18-18, 34-34 [ 74.160724][ T5414] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 74.209103][ T5414] EXT4-fs (loop6): 1 truncate cleaned up [ 74.219153][ T5414] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.251747][ T5402] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.263363][ T5414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.280669][ T5402] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.318379][ T5402] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.336427][ T5423] netlink: 'syz.5.768': attribute type 1 has an invalid length. [ 74.383667][ T5402] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.627994][ T5441] loop7: detected capacity change from 0 to 1024 [ 74.636365][ T5441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.645824][ T5441] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.666206][ T5444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.779'. [ 74.677456][ T5441] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.699440][ T5447] xt_hashlimit: max too large, truncated to 1048576 [ 74.806613][ T5239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.852302][ T5453] pim6reg1: entered promiscuous mode [ 74.858019][ T5453] pim6reg1: entered allmulticast mode [ 74.877455][ T5453] pim6reg1: left promiscuous mode [ 74.905218][ T5465] tipc: Started in network mode [ 74.910716][ T5465] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 74.920511][ T5465] tipc: Enabling of bearer rejected, failed to enable media [ 74.929657][ T5453] pim6reg1: entered promiscuous mode [ 74.935346][ T5453] pim6reg1: left allmulticast mode [ 75.005185][ T5475] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004 [ 75.149128][ T5492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.796'. [ 75.194155][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.202248][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.210840][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.229211][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.237096][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.245278][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.253222][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.261114][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.269966][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.279315][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.287007][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.295072][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.304036][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.312289][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.320305][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.328431][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.336559][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.345115][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.353455][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.361481][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.370019][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.377995][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.385888][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.394522][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.402545][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.410522][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.418572][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.426550][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.435452][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 75.485972][ T5508] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004 [ 75.504231][ T5511] loop5: detected capacity change from 0 to 512 [ 75.525068][ T5512] Cannot find set identified by id 0 to match [ 75.548604][ T5516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 75.600928][ T5516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.619928][ T5511] EXT4-fs (loop5): 1 orphan inode deleted [ 75.656209][ T4063] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 75.669282][ T5511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.695214][ T5511] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.710424][ T5516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.756747][ T4363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.831393][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.817'. [ 75.843582][ T5532] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 75.855470][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.7.818'. [ 75.951878][ T5536] SELinux: failed to load policy [ 76.348348][ T5560] loop5: detected capacity change from 0 to 2048 [ 76.409730][ T5560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.550713][ T5565] loop6: detected capacity change from 0 to 1024 [ 76.572392][ T5565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.682715][ T5201] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.696454][ T5574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 76.994743][ T5593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5593 comm=syz.0.837 [ 77.294901][ T4363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.322030][ T5601] pim6reg1: entered promiscuous mode [ 77.327551][ T5601] pim6reg1: entered allmulticast mode [ 77.401578][ T5603] SELinux: failed to load policy [ 77.524791][ T5614] tipc: Enabled bearer , priority 0 [ 77.533300][ T5613] tipc: Resetting bearer [ 77.553406][ T5613] tipc: Disabling bearer [ 77.645935][ T5622] pim6reg1: entered promiscuous mode [ 77.651487][ T5622] pim6reg1: entered allmulticast mode [ 77.786124][ T5625] tipc: Started in network mode [ 77.791638][ T5625] tipc: Node identity f68c766d0493, cluster identity 4711 [ 77.799807][ T5625] tipc: Enabled bearer , priority 0 [ 77.820970][ T5624] tipc: Resetting bearer [ 77.845474][ T5624] tipc: Disabling bearer [ 78.179537][ T5641] netlink: 3 bytes leftover after parsing attributes in process `syz.7.859'. [ 78.189709][ T5641] 0ªX¹¦À: renamed from caif0 [ 78.197888][ T5641] 0ªX¹¦À: entered allmulticast mode [ 78.203564][ T5641] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 78.301045][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.309591][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.317305][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.325666][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.334680][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.342539][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.350192][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.358372][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.366673][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.374674][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.382656][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.390360][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.398150][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.405888][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.414862][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.422772][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.430860][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.439819][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.447909][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.456239][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.464334][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.472763][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.480487][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.488819][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.497459][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.505614][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.513675][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.521931][ T3457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.530536][ T3457] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 78.608822][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.868'. [ 78.621507][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.868'. [ 78.685412][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 78.685430][ T30] audit: type=1400 audit(1746049078.925:2530): avc: denied { tracepoint } for pid=5668 comm="syz.2.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 78.933965][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.881'. [ 78.966865][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.881'. [ 79.035933][ T30] audit: type=1400 audit(1746049079.275:2531): avc: denied { setopt } for pid=5699 comm="syz.7.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.103810][ T5706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'. [ 79.124632][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.891'. [ 79.144452][ T5706] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.153948][ T5706] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.163645][ T5706] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.172837][ T5706] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.185178][ T5706] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.194546][ T5706] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.203980][ T5706] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.213502][ T5706] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.242848][ T5712] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 79.295187][ T5718] loop6: detected capacity change from 0 to 1024 [ 79.322599][ T5718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.351249][ T30] audit: type=1400 audit(1746049079.595:2532): avc: denied { append } for pid=5717 comm="syz.6.894" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.404511][ T5728] pim6reg1: entered promiscuous mode [ 79.410937][ T5728] pim6reg1: entered allmulticast mode [ 79.421415][ T5201] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.666511][ T5747] infiniband syz!: set active [ 79.673836][ T5747] infiniband syz!: added team_slave_0 [ 79.690745][ T5747] RDS/IB: syz!: added [ 79.695499][ T5747] smc: adding ib device syz! with port count 1 [ 79.704066][ T5747] smc: ib device syz! port 1 has pnetid [ 79.719368][ T5754] loop5: detected capacity change from 0 to 128 [ 79.841957][ T5754] FAT-fs (loop5): bogus number of reserved sectors [ 79.849124][ T5754] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 79.859809][ T5754] FAT-fs (loop5): Can't find a valid FAT filesystem [ 79.994330][ T5760] loop5: detected capacity change from 0 to 1024 [ 80.042119][ T5760] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.261621][ T4363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.416461][ T30] audit: type=1400 audit(1746049080.655:2533): avc: denied { write } for pid=5776 comm="syz.7.918" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 80.565431][ T5784] netlink: 24 bytes leftover after parsing attributes in process `syz.7.921'. [ 80.653688][ T5792] openvswitch: netlink: Message has 6 unknown bytes. [ 81.198794][ T5809] sit0: entered promiscuous mode [ 81.222117][ T5809] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 81.230190][ T5809] netlink: 1 bytes leftover after parsing attributes in process `syz.2.933'. [ 81.260950][ T5811] netlink: 'syz.7.935': attribute type 7 has an invalid length. [ 81.269010][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.7.935'. [ 81.453618][ T5824] loop7: detected capacity change from 0 to 1024 [ 81.532206][ T5824] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.565092][ T30] audit: type=1326 audit(1746049081.805:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c133e969 code=0x7ffc0000 [ 81.591511][ T30] audit: type=1326 audit(1746049081.805:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c133e969 code=0x7ffc0000 [ 81.616617][ T30] audit: type=1326 audit(1746049081.805:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f19c133e969 code=0x7ffc0000 [ 81.641220][ T30] audit: type=1326 audit(1746049081.805:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5831 comm="syz.0.934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19c133e969 code=0x0 [ 81.764364][ T5239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.873834][ T30] audit: type=1400 audit(1746049082.115:2538): avc: denied { append } for pid=5847 comm="syz.2.947" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.941921][ T30] audit: type=1400 audit(1746049082.185:2539): avc: denied { create } for pid=5853 comm="syz.7.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 82.030981][ T5858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5858 comm=syz.2.952 [ 82.373875][ T5873] loop7: detected capacity change from 0 to 2048 [ 82.462599][ T5873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.600137][ T5890] loop6: detected capacity change from 0 to 512 [ 82.628767][ T5890] EXT4-fs (loop6): orphan cleanup on readonly fs [ 82.636284][ T5890] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.965: bad orphan inode 13 [ 82.663809][ T5890] ext4_test_bit(bit=12, block=18) = 1 [ 82.669356][ T5890] is_bad_inode(inode)=0 [ 82.674089][ T5890] NEXT_ORPHAN(inode)=2130706432 [ 82.679144][ T5890] max_ino=32 [ 82.682863][ T5890] i_nlink=1 [ 82.699227][ T5890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.770771][ T5887] bond1: entered promiscuous mode [ 82.776374][ T5887] bond1: entered allmulticast mode [ 82.784636][ T5890] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 82.805024][ T5887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.820346][ T5890] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.965: bg 0: block 248: padding at end of block bitmap is not set [ 82.839342][ T5890] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.965: Failed to acquire dquot type 1 [ 82.871872][ T5890] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.965808][ T5900] loop5: detected capacity change from 0 to 128 [ 82.991174][ T5201] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.112017][ T5904] serio: Serial port pts0 [ 83.410513][ T5239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.622037][ T5951] all: renamed from lo [ 83.793600][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 83.793615][ T30] audit: type=1400 audit(1746049084.035:2546): avc: denied { execute_no_trans } for pid=5971 comm="syz.0.996" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.997993][ T30] audit: type=1400 audit(1746049084.235:2547): avc: denied { create } for pid=5987 comm="syz.6.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.025441][ T30] audit: type=1400 audit(1746049084.235:2548): avc: denied { connect } for pid=5987 comm="syz.6.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.046952][ T30] audit: type=1400 audit(1746049084.235:2549): avc: denied { ioctl } for pid=5987 comm="syz.6.1004" path="socket:[14868]" dev="sockfs" ino=14868 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.158319][ T5994] __nla_validate_parse: 3 callbacks suppressed [ 84.158335][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1007'. [ 84.337828][ T6009] tipc: New replicast peer: 10.1.1.2 [ 84.343335][ T6009] tipc: Enabled bearer , priority 10 [ 84.498314][ T6021] batman_adv: batadv0: Adding interface: ip6gretap1 [ 84.505301][ T6021] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.534433][ T30] audit: type=1400 audit(1746049084.755:2550): avc: denied { nlmsg_write } for pid=6027 comm="syz.5.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 84.557139][ T6021] batman_adv: batadv0: Interface activated: ip6gretap1 [ 84.609604][ T6037] pim6reg1: entered promiscuous mode [ 84.615290][ T6037] pim6reg1: entered allmulticast mode [ 84.732020][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'. [ 84.785345][ T6053] syzkaller1: entered promiscuous mode [ 84.792007][ T6053] syzkaller1: entered allmulticast mode [ 84.814784][ T30] audit: type=1400 audit(1746049085.055:2551): avc: denied { execute } for pid=6057 comm="+}[@" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 85.476157][ T5582] tipc: Node number set to 4062148205 [ 85.651733][ T6080] netlink: 'syz.5.1046': attribute type 4 has an invalid length. [ 85.660595][ T6080] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1046'. [ 85.687722][ T6080] : renamed from bond0 [ 85.710414][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1047'. [ 85.989442][ T30] audit: type=1400 audit(1746049086.165:2552): avc: denied { read } for pid=6090 comm="syz.2.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.131729][ T6101] pim6reg1: entered promiscuous mode [ 86.137792][ T6101] pim6reg1: entered allmulticast mode [ 86.533468][ T6132] veth1_to_team: entered promiscuous mode [ 86.591417][ T6132] team0: Port device team_slave_1 removed [ 86.605195][ T30] audit: type=1400 audit(1746049086.845:2553): avc: denied { nlmsg_write } for pid=6131 comm="syz.2.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 86.719255][ T6137] Driver unsupported XDP return value 0 on prog (id 956) dev N/A, expect packet loss! [ 86.794254][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1073'. [ 86.878641][ T6152] loop7: detected capacity change from 0 to 512 [ 86.893066][ T6152] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 86.906305][ T6152] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.924880][ T6152] EXT4-fs (loop7): mount failed [ 86.973018][ T6164] netlink: 404 bytes leftover after parsing attributes in process `syz.5.1081'. [ 87.041808][ T6173] netlink: 'syz.7.1087': attribute type 1 has an invalid length. [ 87.058960][ T6171] SELinux: ebitmap start bit (9) is not a multiple of the map unit size (64) [ 87.070160][ T6171] SELinux: failed to load policy [ 87.075633][ T6173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.099657][ T30] audit: type=1326 audit(1746049087.335:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.6.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bc49e969 code=0x7ffc0000 [ 87.129813][ T6173] bond1: (slave veth5): Enslaving as an active interface with a down link [ 87.167196][ T6173] vlan2: entered allmulticast mode [ 87.172708][ T6173] bond1: entered allmulticast mode [ 87.181009][ T6173] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 87.202699][ T6178] tipc: Enabled bearer , priority 0 [ 87.213150][ T6177] tipc: Resetting bearer [ 87.237737][ T6177] tipc: Disabling bearer [ 87.272286][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.282006][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.442652][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1097'. [ 87.452100][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1097'. [ 87.462014][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1097'. [ 87.477112][ T6202] loop5: detected capacity change from 0 to 512 [ 87.484886][ T6202] EXT4-fs: Ignoring removed i_version option [ 87.503774][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1097'. [ 87.527851][ T6202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.543099][ T6202] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.599802][ T6210] loop6: detected capacity change from 0 to 128 [ 87.739007][ T4363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.837213][ T6230] loop6: detected capacity change from 0 to 164 [ 87.845894][ T6230] Unable to read rock-ridge attributes [ 87.861603][ T6230] Unable to read rock-ridge attributes [ 87.871961][ T6230] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 87.877142][ T6232] sit0: left promiscuous mode [ 87.911237][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.919105][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.952420][ T6232] wg2: left promiscuous mode [ 87.957657][ T6232] wg2: left allmulticast mode [ 87.978840][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.024188][ T6232] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.033208][ T6232] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.042698][ T6232] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.052659][ T6232] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.068960][ T6232] ip6erspan0: left promiscuous mode [ 88.076868][ T6232] veth3: left promiscuous mode [ 88.082147][ T6232] veth3: left allmulticast mode [ 88.677865][ T6262] loop5: detected capacity change from 0 to 8192 [ 88.862520][ T6262] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 88.871138][ T6262] FAT-fs (loop5): Filesystem has been set read-only [ 88.881309][ T6263] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 88.999099][ T6277] 9pnet: p9_errstr2errno: server reported unknown error [ 89.030060][ T6273] loop6: detected capacity change from 0 to 8192 [ 89.127375][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 89.127391][ T30] audit: type=1400 audit(1746049089.365:2604): avc: denied { read } for pid=6287 comm="syz.2.1132" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.164443][ T30] audit: type=1400 audit(1746049089.405:2605): avc: denied { open } for pid=6287 comm="syz.2.1132" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.190234][ T30] audit: type=1400 audit(1746049089.405:2606): avc: denied { write } for pid=6287 comm="syz.2.1132" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.370108][ T6308] __nla_validate_parse: 6 callbacks suppressed [ 89.370128][ T6308] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1139'. [ 89.422678][ T30] audit: type=1400 audit(1746049089.665:2607): avc: denied { setopt } for pid=6312 comm="syz.2.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.487651][ T30] audit: type=1400 audit(1746049089.725:2608): avc: denied { nlmsg_read } for pid=6316 comm="syz.6.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 89.540619][ T6319] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1144'. [ 89.579826][ T30] audit: type=1400 audit(1746049089.815:2609): avc: denied { mount } for pid=6322 comm="syz.2.1146" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.614798][ T30] audit: type=1326 audit(1746049089.845:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c133e969 code=0x7ffc0000 [ 89.639869][ T30] audit: type=1326 audit(1746049089.845:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f19c133e969 code=0x7ffc0000 [ 89.664941][ T30] audit: type=1326 audit(1746049089.845:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c133e969 code=0x7ffc0000 [ 89.691006][ T30] audit: type=1326 audit(1746049089.845:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c133e969 code=0x7ffc0000 [ 89.727130][ T6328] ref_ctr_offset mismatch. inode: 0x48a offset: 0x0 ref_ctr_offset(old): 0x230000 ref_ctr_offset(new): 0x0 [ 89.739630][ T6328] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 89.748607][ T6328] ref_ctr decrement failed for inode: 0x48a offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88813b0ba100 [ 89.760482][ T6328] uprobe: syz.2.1148:6328 failed to unregister, leaking uprobe [ 89.797203][ T6330] ref_ctr increment failed for inode: 0x4bb offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005f380 [ 89.814295][ T6329] uprobe: syz.0.1149:6329 failed to unregister, leaking uprobe [ 89.868455][ T6340] x_tables: duplicate underflow at hook 2 [ 89.885817][ T6337] tipc: Enabled bearer , priority 0 [ 89.895325][ T6335] tipc: Resetting bearer [ 89.924482][ T6335] tipc: Disabling bearer [ 90.199963][ T6367] Falling back ldisc for ttyS3. [ 90.225349][ T6353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.238001][ T6353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.250277][ T6375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.259698][ T6375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.324227][ T6379] loop5: detected capacity change from 0 to 4096 [ 90.345987][ T6379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.394925][ T4363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.416739][ T6384] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 90.462055][ T6390] ref_ctr_offset mismatch. inode: 0x1ff offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 90.492780][ T6392] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1179'. [ 90.532920][ T6399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1181'. [ 91.017062][ T6463] pim6reg1: entered promiscuous mode [ 91.022909][ T6463] pim6reg1: entered allmulticast mode [ 91.127348][ T6480] xt_hashlimit: max too large, truncated to 1048576 [ 91.414910][ T6511] SELinux: syz.5.1230 (6511) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 91.683999][ T6547] xt_CT: No such helper "pptp" [ 91.778202][ T6554] syzkaller0: entered promiscuous mode [ 91.785586][ T6554] syzkaller0: entered allmulticast mode [ 92.159012][ T6613] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 92.400842][ T6652] pim6reg1: entered promiscuous mode [ 92.406664][ T6652] pim6reg1: entered allmulticast mode [ 94.130069][ T30] kauditd_printk_skb: 994 callbacks suppressed [ 94.130087][ T30] audit: type=1400 audit(1746049094.375:3608): avc: denied { create } for pid=6791 comm="syz.6.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 94.161883][ T30] audit: type=1400 audit(1746049094.405:3609): avc: denied { node_bind } for pid=6793 comm="syz.7.1363" saddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=0 [ 94.185250][ T30] audit: type=1400 audit(1746049094.405:3610): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.212124][ T30] audit: type=1400 audit(1746049094.405:3611): avc: denied { name_bind } for pid=6793 comm="syz.7.1363" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 94.282410][ T30] audit: type=1400 audit(1746049094.405:3612): avc: denied { name_bind } for pid=6793 comm="syz.7.1363" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 94.306023][ T30] audit: type=1400 audit(1746049094.405:3613): avc: denied { name_bind } for pid=6793 comm="syz.7.1363" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 94.329155][ T30] audit: type=1400 audit(1746049094.405:3614): avc: denied { create } for pid=6793 comm="syz.7.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=0 [ 94.350801][ T30] audit: type=1400 audit(1746049094.415:3615): avc: denied { read write } for pid=5239 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.376270][ T30] audit: type=1400 audit(1746049094.425:3616): avc: denied { prog_load } for pid=6795 comm="syz.7.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.396862][ T30] audit: type=1400 audit(1746049094.425:3617): avc: denied { create } for pid=6795 comm="syz.7.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 94.514336][ T6817] pim6reg1: entered promiscuous mode [ 94.520714][ T6817] pim6reg1: entered allmulticast mode [ 94.855292][ T6847] syzkaller0: entered allmulticast mode [ 95.555201][ T6897] binfmt_misc: register: failed to install interpreter file ./file2 [ 95.624522][ T6903] SELinux: syz.0.1413 (6903) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 96.775869][ T7005] capability: warning: `syz.7.1462' uses 32-bit capabilities (legacy support in use) [ 97.003431][ T7035] binfmt_misc: register: failed to install interpreter file ./file2 [ 97.712708][ T7094] binfmt_misc: register: failed to install interpreter file ./file2 [ 98.286669][ T7151] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 98.495485][ T7169] pim6reg1: entered promiscuous mode [ 98.501447][ T7169] pim6reg1: entered allmulticast mode [ 98.980368][ T7200] pim6reg1: entered promiscuous mode [ 98.985949][ T7200] pim6reg1: entered allmulticast mode [ 99.139633][ T30] kauditd_printk_skb: 925 callbacks suppressed [ 99.139651][ T30] audit: type=1400 audit(1746049099.385:4543): avc: denied { prog_load } for pid=7202 comm="syz.0.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.205718][ T30] audit: type=1400 audit(1746049099.415:4544): avc: denied { create } for pid=7208 comm="syz.7.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 99.227923][ T30] audit: type=1400 audit(1746049099.415:4545): avc: denied { prog_load } for pid=7204 comm="syz.6.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.248238][ T30] audit: type=1400 audit(1746049099.415:4547): avc: denied { create } for pid=7204 comm="syz.6.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 99.269676][ T30] audit: type=1400 audit(1746049099.415:4546): avc: denied { map_create } for pid=7208 comm="syz.7.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.290720][ T30] audit: type=1400 audit(1746049099.425:4548): avc: denied { create } for pid=7204 comm="syz.6.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 99.312383][ T30] audit: type=1400 audit(1746049099.435:4549): avc: denied { map_create } for pid=7208 comm="syz.7.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.335872][ T30] audit: type=1400 audit(1746049099.445:4550): avc: denied { prog_load } for pid=7208 comm="syz.7.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.358025][ T30] audit: type=1400 audit(1746049099.445:4551): avc: denied { create } for pid=7208 comm="syz.7.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 99.379698][ T30] audit: type=1400 audit(1746049099.445:4552): avc: denied { prog_load } for pid=7208 comm="syz.7.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.931185][ T7243] pim6reg1: entered promiscuous mode [ 99.936925][ T7243] pim6reg1: entered allmulticast mode [ 100.638227][ T7284] pim6reg1: entered promiscuous mode [ 100.644639][ T7284] pim6reg1: entered allmulticast mode [ 104.150290][ T30] kauditd_printk_skb: 481 callbacks suppressed [ 104.150305][ T30] audit: type=1400 audit(1746049104.395:5034): avc: denied { name_bind } for pid=7418 comm="syz.2.1652" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 104.203041][ T30] audit: type=1400 audit(1746049104.405:5035): avc: denied { read write } for pid=4363 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.228155][ T30] audit: type=1400 audit(1746049104.415:5036): avc: denied { map_create } for pid=7422 comm="syz.5.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.248695][ T30] audit: type=1400 audit(1746049104.425:5037): avc: denied { prog_load } for pid=7422 comm="syz.5.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.268398][ T30] audit: type=1400 audit(1746049104.425:5038): avc: denied { read write } for pid=7422 comm="syz.5.1656" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 104.388108][ T30] audit: type=1400 audit(1746049104.445:5039): avc: denied { read write } for pid=4363 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.413693][ T30] audit: type=1400 audit(1746049104.455:5040): avc: denied { create } for pid=7424 comm="syz.5.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 104.436290][ T30] audit: type=1400 audit(1746049104.455:5041): avc: denied { create } for pid=7424 comm="syz.5.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 104.459570][ T30] audit: type=1400 audit(1746049104.455:5042): avc: denied { prog_load } for pid=7424 comm="syz.5.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.481998][ T30] audit: type=1400 audit(1746049104.455:5043): avc: denied { read write } for pid=7424 comm="syz.5.1657" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 107.339800][ T7570] Falling back ldisc for ttyS3. [ 109.232526][ T30] kauditd_printk_skb: 581 callbacks suppressed [ 109.232540][ T30] audit: type=1400 audit(1746049109.475:5625): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 109.353309][ T30] audit: type=1400 audit(1746049109.595:5626): avc: denied { read write } for pid=4363 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 109.407086][ T30] audit: type=1400 audit(1746049109.645:5627): avc: denied { read write } for pid=5239 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 109.457685][ T30] audit: type=1400 audit(1746049109.675:5628): avc: denied { prog_load } for pid=7677 comm="syz.6.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.477268][ T30] audit: type=1400 audit(1746049109.685:5629): avc: denied { prog_load } for pid=7678 comm="syz.7.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.496983][ T30] audit: type=1400 audit(1746049109.685:5630): avc: denied { prog_load } for pid=7678 comm="syz.7.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.516238][ T30] audit: type=1400 audit(1746049109.685:5631): avc: denied { prog_load } for pid=7678 comm="syz.7.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.536447][ T30] audit: type=1400 audit(1746049109.685:5632): avc: denied { prog_load } for pid=7678 comm="syz.7.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.558150][ T30] audit: type=1326 audit(1746049109.685:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.7.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffee9e969 code=0x7ffc0000 [ 109.582545][ T30] audit: type=1326 audit(1746049109.685:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.7.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffee9e969 code=0x7ffc0000 [ 110.370126][ T7709] Falling back ldisc for ttyS3. [ 111.229648][ T7746] Falling back ldisc for ttyS3. [ 112.954824][ T7818] SELinux: syz.0.1836 (7818) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 114.247108][ T30] kauditd_printk_skb: 448 callbacks suppressed [ 114.247145][ T30] audit: type=1400 audit(1746049114.485:6083): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 114.308895][ T30] audit: type=1400 audit(1746049114.535:6084): avc: denied { read } for pid=7892 comm="syz.2.1878" dev="nsfs" ino=4026532670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 114.331740][ T30] audit: type=1400 audit(1746049114.535:6085): avc: denied { map_create } for pid=7892 comm="syz.2.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.351305][ T30] audit: type=1400 audit(1746049114.535:6086): avc: denied { prog_load } for pid=7892 comm="syz.2.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.370769][ T30] audit: type=1400 audit(1746049114.545:6087): avc: denied { prog_load } for pid=7890 comm="syz.6.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.390922][ T30] audit: type=1400 audit(1746049114.545:6088): avc: denied { prog_load } for pid=7890 comm="syz.6.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.410872][ T30] audit: type=1400 audit(1746049114.545:6089): avc: denied { create } for pid=7889 comm="syz.7.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 114.431716][ T30] audit: type=1400 audit(1746049114.545:6090): avc: denied { prog_load } for pid=7896 comm="syz.0.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.451469][ T30] audit: type=1326 audit(1746049114.545:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.7.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffee9e969 code=0x7ffc0000 [ 114.475679][ T30] audit: type=1326 audit(1746049114.545:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.7.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffee9e969 code=0x7ffc0000 [ 114.479005][ T7901] SELinux: syz.6.1870 (7901) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 114.573589][ T7908] SELinux: syz.2.1885 (7908) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 115.125134][ T7942] SELinux: syz.7.1890 (7942) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 116.258269][ T8067] syzkaller0: entered promiscuous mode [ 116.264349][ T8067] syzkaller0: entered allmulticast mode [ 116.271356][ T8071] serio: Serial port pts1 [ 117.003056][ T8132] syzkaller0: entered promiscuous mode [ 117.008587][ T8132] syzkaller0: entered allmulticast mode [ 117.149547][ T8149] syzkaller0: entered promiscuous mode [ 117.155677][ T8149] syzkaller0: entered allmulticast mode [ 117.661029][ T8211] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 117.834256][ T8228] syzkaller0: entered promiscuous mode [ 117.840157][ T8228] syzkaller0: entered allmulticast mode [ 117.969526][ T8235] Falling back ldisc for ttyS3. [ 118.391936][ T8304] pim6reg1: entered promiscuous mode [ 118.397466][ T8304] pim6reg1: entered allmulticast mode [ 118.670578][ T8345] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2075'. [ 119.177243][ T8399] wg2: entered promiscuous mode [ 119.182654][ T8399] wg2: entered allmulticast mode [ 119.262777][ T30] kauditd_printk_skb: 1169 callbacks suppressed [ 119.262843][ T30] audit: type=1400 audit(1746049119.505:7262): avc: denied { read write } for pid=4363 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.348192][ T30] audit: type=1400 audit(1746049119.505:7263): avc: denied { open } for pid=4363 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.373008][ T30] audit: type=1400 audit(1746049119.505:7264): avc: denied { ioctl } for pid=4363 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.398840][ T30] audit: type=1400 audit(1746049119.535:7265): avc: denied { create } for pid=8409 comm="syz.5.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.418828][ T30] audit: type=1400 audit(1746049119.535:7266): avc: denied { bind } for pid=8409 comm="syz.5.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.438773][ T30] audit: type=1400 audit(1746049119.535:7267): avc: denied { setopt } for pid=8409 comm="syz.5.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.459473][ T30] audit: type=1400 audit(1746049119.535:7268): avc: denied { write } for pid=8409 comm="syz.5.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.479248][ T30] audit: type=1326 audit(1746049119.545:7269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.0.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c133e969 code=0x7ffc0000 [ 119.502813][ T30] audit: type=1326 audit(1746049119.545:7270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.0.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c133e969 code=0x7ffc0000 [ 119.527085][ T30] audit: type=1326 audit(1746049119.545:7271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.0.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f19c133e969 code=0x7ffc0000 [ 119.558019][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2112'. [ 119.569002][ T8426] IPVS: Error joining to the multicast group [ 119.611459][ T8421] SELinux: ebitmap: truncated map [ 119.616882][ T8421] SELinux: failed to load policy [ 119.689345][ T8439] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2120'. [ 119.702633][ T8439] 1ªX¹¦À: renamed from 60ªX¹¦À [ 119.860418][ T8440] loop5: detected capacity change from 0 to 2048 [ 119.882935][ T8439] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 120.272672][ T8465] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2129'. [ 120.397993][ T8479] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 120.440211][ T8477] pim6reg1: entered promiscuous mode [ 120.445617][ T8477] pim6reg1: entered allmulticast mode [ 120.547858][ T8488] loop5: detected capacity change from 0 to 128 [ 120.599575][ T8494] veth0_vlan: entered allmulticast mode [ 120.624468][ T8494] ªªªªªª: renamed from vlan0 [ 120.834653][ T8519] netlink: 'syz.6.2153': attribute type 10 has an invalid length. [ 120.842758][ T8519] syz_tun: entered promiscuous mode [ 120.868719][ T8519] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 120.934414][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2158'. [ 120.992197][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2158'. [ 121.142115][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2165'. [ 121.172456][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.179937][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.187442][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.227903][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.235457][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.242907][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.250422][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.258121][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.265565][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.273082][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.280531][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.287940][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.295584][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.303166][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.312318][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.319941][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.327384][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.334871][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.342348][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.349812][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.357436][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.365108][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.372647][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.380086][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.387603][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.395102][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.402546][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.410006][ T5580] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.436060][ T5580] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 121.456879][ T8558] netlink: 'syz.0.2170': attribute type 3 has an invalid length. [ 121.486625][ T8558] netlink: 'syz.0.2170': attribute type 3 has an invalid length. [ 121.532945][ T8563] loop6: detected capacity change from 0 to 1024 [ 121.548572][ T8563] EXT4-fs: Ignoring removed orlov option [ 121.571096][ T8563] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 121.604581][ T8563] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.637978][ T5201] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.728647][ T8575] loop6: detected capacity change from 0 to 164 [ 121.730869][ T8584] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 121.766988][ T8587] loop7: detected capacity change from 0 to 164 [ 121.789288][ T8587] syz.7.2181: attempt to access beyond end of device [ 121.789288][ T8587] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 121.808730][ T8587] syz.7.2181: attempt to access beyond end of device [ 121.808730][ T8587] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.864955][ T8598] netlink: 'syz.6.2186': attribute type 4 has an invalid length. [ 121.925569][ T8607] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2190'. [ 121.981011][ T8614] tipc: Started in network mode [ 121.986037][ T8614] tipc: Node identity ac14140f, cluster identity 4711 [ 121.993172][ T8614] tipc: New replicast peer: 10.1.1.2 [ 121.998613][ T8614] tipc: Enabled bearer , priority 10 [ 122.106565][ T8626] loop6: detected capacity change from 0 to 2048 [ 122.134009][ T8626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.281676][ T85] ================================================================== [ 122.289918][ T85] BUG: KCSAN: data-race in copy_page_from_iter_atomic / copy_page_from_iter_atomic [ 122.299301][ T85] [ 122.301630][ T85] write to 0xffff8881a61d9214 of 2 bytes by task 8626 on cpu 1: [ 122.309381][ T85] copy_page_from_iter_atomic+0x77f/0xff0 [ 122.315131][ T85] generic_perform_write+0x2c2/0x490 [ 122.320433][ T85] ext4_buffered_write_iter+0x1ee/0x3c0 [ 122.326006][ T85] ext4_file_write_iter+0x383/0xf00 [ 122.331215][ T85] iter_file_splice_write+0x5ef/0x970 [ 122.336606][ T85] direct_splice_actor+0x153/0x2a0 [ 122.341759][ T85] splice_direct_to_actor+0x30f/0x680 [ 122.347233][ T85] do_splice_direct+0xda/0x150 [ 122.352015][ T85] do_sendfile+0x380/0x640 [ 122.356450][ T85] __x64_sys_sendfile64+0x105/0x150 [ 122.361676][ T85] x64_sys_call+0xb39/0x2fb0 [ 122.366278][ T85] do_syscall_64+0xd0/0x1a0 [ 122.370789][ T85] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.376684][ T85] [ 122.379002][ T85] read to 0xffff8881a61d9000 of 2048 bytes by task 85 on cpu 0: [ 122.386629][ T85] copy_page_from_iter_atomic+0x77f/0xff0 [ 122.392437][ T85] generic_perform_write+0x2c2/0x490 [ 122.397762][ T85] shmem_file_write_iter+0xc5/0xf0 [ 122.402896][ T85] lo_rw_aio+0x5f7/0x7c0 [ 122.407255][ T85] loop_process_work+0x52d/0xa60 [ 122.412234][ T85] loop_workfn+0x31/0x40 [ 122.416485][ T85] process_scheduled_works+0x4cb/0x9d0 [ 122.421953][ T85] worker_thread+0x582/0x770 [ 122.426561][ T85] kthread+0x486/0x510 [ 122.430647][ T85] ret_from_fork+0x4b/0x60 [ 122.435087][ T85] ret_from_fork_asm+0x1a/0x30 [ 122.439855][ T85] [ 122.442193][ T85] Reported by Kernel Concurrency Sanitizer on: [ 122.448389][ T85] CPU: 0 UID: 0 PID: 85 Comm: kworker/u8:4 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 122.460828][ T85] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 122.470891][ T85] Workqueue: loop6 loop_workfn [ 122.475675][ T85] ================================================================== [ 122.989466][ T5580] tipc: Node number set to 2886997007 [ 123.039221][ T5201] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.