last executing test programs: 3m8.179161019s ago: executing program 3 (id=373): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 3m8.015635805s ago: executing program 3 (id=374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) chroot(&(0x7f0000000240)='./file0\x00') ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1980, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(r2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1000000, &(0x7f0000000340)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@errors_remount}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") 3m6.371436526s ago: executing program 3 (id=381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x12, &(0x7f0000000540)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void}, {@generic={0x8864}}}, 0x0) 3m6.301252283s ago: executing program 3 (id=382): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000040), 0x26, 0x75e, &(0x7f0000000280)="$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") chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000001640)={0x0, 0xc5}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={&(0x7f0000001580)=""/112, 0x70}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000200)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000080)="18", 0x0, 0x0, 0x0}) 3m4.915852309s ago: executing program 3 (id=385): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m3.68612122s ago: executing program 3 (id=388): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r2) r3 = inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 3m3.548103514s ago: executing program 32 (id=388): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r2) r3 = inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1m25.053515841s ago: executing program 4 (id=953): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 1m24.493324196s ago: executing program 4 (id=958): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13000000, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 1m24.442185541s ago: executing program 4 (id=959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0x6, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfe}}]}}}]}, 0x5c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 1m23.520008332s ago: executing program 4 (id=961): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) unshare(0x26020400) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m23.468400887s ago: executing program 4 (id=962): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1m23.369179817s ago: executing program 4 (id=963): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) syz_open_dev$vcsu(&(0x7f0000004980), 0xffffffff7fffffff, 0x40840) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1m23.307622313s ago: executing program 33 (id=963): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) syz_open_dev$vcsu(&(0x7f0000004980), 0xffffffff7fffffff, 0x40840) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 4.832323885s ago: executing program 0 (id=1458): r0 = socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r0, &(0x7f00000037c0), 0x41, 0x2, 0x0) 4.819271086s ago: executing program 2 (id=1460): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000414, &(0x7f00000000c0)={[{@noblock_validity}, {@journal_ioprio}, {@jqfmt_vfsv1}, {@oldalloc}, {@noquota}, {@grpjquota, 0x2e}, {@usrquota}, {@usrjquota}, {@grpid}, {@delalloc}], [], 0x2c}, 0x84, 0x4c8, &(0x7f0000000e40)="$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") 4.718798436s ago: executing program 2 (id=1461): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000002080), &(0x7f0000000180)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 4.621347256s ago: executing program 2 (id=1462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x180, 0x2}, 0x48) 4.593750299s ago: executing program 2 (id=1463): r0 = epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x80) unshare(0x64000600) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) shutdown(r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f00000000c0)={0x20000013}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r6, &(0x7f00000016c0)={0x40000001}) 3.700181686s ago: executing program 2 (id=1465): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) mount$9p_rdma(&(0x7f0000000000), 0x0, 0x0, 0x10, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) read(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r1, r3, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000000c0)={0x86, 0x1a, &(0x7f00000007c0)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 3.35365215s ago: executing program 5 (id=1468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x70, 0x80}}]}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@deltclass={0x38, 0x29, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff1, 0xb}, {0x5, 0x7}, {0x10, 0x3}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x22, 0x41}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x20f}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 3.072863078s ago: executing program 1 (id=1470): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xa0000004}) 3.0515139s ago: executing program 1 (id=1471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3a) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) 2.449877659s ago: executing program 5 (id=1472): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000414, &(0x7f00000000c0)={[{@noblock_validity}, {@journal_ioprio}, {@jqfmt_vfsv1}, {@oldalloc}, {@noquota}, {@grpjquota, 0x2e}, {@usrquota}, {@usrjquota}, {@grpid}, {@delalloc}], [], 0x2c}, 0x84, 0x4c8, &(0x7f0000000e40)="$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") 2.382075606s ago: executing program 6 (id=1473): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000002080), &(0x7f0000000180)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.241163659s ago: executing program 6 (id=1474): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) syz_open_dev$vcsu(&(0x7f0000004980), 0xffffffff7fffffff, 0x40840) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000049c0)={{{@in6=@ipv4, @in6=@private0}}, {{@in6=@local}, 0x0, @in=@remote}}, 0x0) stat(&(0x7f0000004b00)='./file0\x00', 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x400c000) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r5) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.165584897s ago: executing program 2 (id=1475): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x2000775) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082402010102"], 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe6, 0x4, 0x3}], "", ['\x00']}, 0x178) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000b80), 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00ff8400630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x6, 0x5f, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0xfffffff9, 0xa}}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2.120307631s ago: executing program 5 (id=1476): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r5, 0x0, 0x0, 0x1001f0) 2.114565222s ago: executing program 1 (id=1477): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9, 0x3, 0xfffffffffffffffd, 0x300}, 0x0, &(0x7f0000000240)={0x3fc, 0x0, 0x0, 0x3553, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 1.361349826s ago: executing program 0 (id=1478): getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) unshare(0x62040200) 1.345394377s ago: executing program 0 (id=1479): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setreuid(0xee01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r2, &(0x7f0000000240)='V', 0x1, 0x404c810, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0xf7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x58) 1.240924668s ago: executing program 6 (id=1480): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x6c) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000000000000000000000700000001890b04"], 0x20}, 0x4000) 1.171413645s ago: executing program 0 (id=1481): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x180, 0x2}, 0x48) 1.150875997s ago: executing program 1 (id=1482): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005174bdc076539e47cfda08bb10e2cd308949cfbe8ef1fe838240ef11d5600ec8561e2fb1560447ba915e1c29e550effaf1f7ddbdcd730cee157ddc50c46ce81eaa0f07c85e7e5abf7587c522576ec78af35facbb9699f24163b36048d4fac2db67d7c8375265809cb2226aac78c599c5fba4fdf246af0faaebd3b35f9244423dc0907f9f0720b4ba69054d9628d0c3bdb8ab9b190430c4b87ffb935c81d098"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x1}]}}}]}, 0x3c}}, 0x0) syz_socket_connect_nvme_tcp() syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1301000000000040d80402f0000000000001090224000100002038090400b90503000000092167bd020122050009058103"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="61b1000002"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = fsmount(0xffffffffffffffff, 0x1, 0x86) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000b80)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) connect$unix(r6, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) 1.140371888s ago: executing program 5 (id=1483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) 1.084414193s ago: executing program 0 (id=1484): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000002080), &(0x7f0000000180)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 993.216692ms ago: executing program 0 (id=1485): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) mount$9p_rdma(&(0x7f0000000000), 0x0, 0x0, 0x10, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) read(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r1, r3, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000000c0)={0x86, 0x1a, &(0x7f00000007c0)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 586.571922ms ago: executing program 1 (id=1486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x40) 546.713066ms ago: executing program 1 (id=1487): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe6, 0x4, 0x3}], "", ['\x00']}, 0x178) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x1d, 0x803, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 337.572826ms ago: executing program 6 (id=1488): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000ff0f0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000f36ed1ec7847753ae3ca8e363bd2e43196e8afa3937bc1969a8e6c1a936336a265cfdea7546eee3790799b59088fb00943533308a7d9f96c21ad86a84624d52e536345589f4f67ac14f950f783c63b7f1604a160ab3ed0775db941fe513ed3e312d7cf0daf26e25d0706f0a05c504687759a3851f5611f08e7cb3d38022b9c47cdd1f307a8221da3e7a5ee058304"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000540)='task_rename\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000300040000000200000040000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180)) 265.430323ms ago: executing program 5 (id=1489): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0xe8, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000040), {[{{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 197.16ms ago: executing program 5 (id=1490): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) syz_open_dev$vcsu(&(0x7f0000004980), 0xffffffff7fffffff, 0x40840) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000049c0)={{{@in6=@ipv4, @in6=@private0}}, {{@in6=@local}, 0x0, @in=@remote}}, 0x0) stat(&(0x7f0000004b00)='./file0\x00', 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x400c000) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r5) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 34.748776ms ago: executing program 6 (id=1491): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00!\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) 0s ago: executing program 6 (id=1492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r4, r4) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r5, 0x0, 0x0, 0x1001f0) kernel console output (not intermixed with test programs): tlink_xfrm_socket permissive=1 [ 146.986822][ T5651] netlink: 20 bytes leftover after parsing attributes in process `syz.5.633'. [ 147.050626][ T29] audit: type=1326 audit(1759986505.447:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5664 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 147.074207][ T29] audit: type=1326 audit(1759986505.447:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5664 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 147.097873][ T29] audit: type=1326 audit(1759986505.447:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5664 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 147.121753][ T29] audit: type=1326 audit(1759986505.447:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5664 comm="syz.1.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 147.205756][ T5648] loop0: detected capacity change from 0 to 512 [ 147.316939][ T5648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.324219][ T5675] can: request_module (can-proto-0) failed. [ 147.821698][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.018605][ T5693] tipc: Started in network mode [ 148.024090][ T5693] tipc: Node identity de75557f2aa2, cluster identity 4711 [ 148.031379][ T5693] tipc: Enabled bearer , priority 0 [ 148.098899][ T5693] tipc: Resetting bearer [ 148.115330][ T5692] tipc: Disabling bearer [ 148.120946][ T5697] loop2: detected capacity change from 0 to 512 [ 148.142774][ T5697] EXT4-fs: inline encryption not supported [ 148.156654][ T5697] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.179107][ T5697] EXT4-fs (loop2): 1 truncate cleaned up [ 148.195582][ T5697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.310322][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.384127][ T5704] loop4: detected capacity change from 0 to 1024 [ 148.401447][ T5704] EXT4-fs: test_dummy_encryption option not supported [ 149.140189][ T5711] loop0: detected capacity change from 0 to 512 [ 149.165445][ T5711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.900999][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.322665][ T5734] loop4: detected capacity change from 0 to 1024 [ 150.334130][ T5736] loop5: detected capacity change from 0 to 512 [ 150.351601][ T5736] EXT4-fs: inline encryption not supported [ 150.821958][ T5736] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 150.898157][ T5736] EXT4-fs (loop5): 1 truncate cleaned up [ 151.155270][ T5736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.231792][ T5745] loop2: detected capacity change from 0 to 4096 [ 151.337771][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.358586][ T5745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.439695][ T5755] bridge1: entered allmulticast mode [ 152.922354][ T5772] loop5: detected capacity change from 0 to 512 [ 153.349102][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 153.349119][ T29] audit: type=1326 audit(1759986511.747:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 153.436136][ T29] audit: type=1326 audit(1759986511.777:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 153.466784][ T29] audit: type=1326 audit(1759986511.777:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 153.492429][ T29] audit: type=1326 audit(1759986511.777:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 153.518616][ T5772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.531864][ T5772] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.514889][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.558179][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.571733][ T5775] loop0: detected capacity change from 0 to 512 [ 154.758777][ T5775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.414800][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.567127][ T29] audit: type=1326 audit(1759986513.947:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 155.590682][ T29] audit: type=1326 audit(1759986513.947:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 155.615207][ T29] audit: type=1326 audit(1759986513.947:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 155.638963][ T29] audit: type=1326 audit(1759986513.947:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 155.662278][ T29] audit: type=1326 audit(1759986513.947:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 155.686295][ T29] audit: type=1326 audit(1759986513.947:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 155.750926][ T5805] loop2: detected capacity change from 0 to 512 [ 155.761769][ T5805] EXT4-fs: Ignoring removed nobh option [ 155.906984][ T5805] EXT4-fs (loop2): orphan cleanup on readonly fs [ 155.913390][ T5805] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 156.353909][ T5810] loop5: detected capacity change from 0 to 512 [ 156.379458][ T5810] EXT4-fs: inline encryption not supported [ 156.390383][ T5810] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 156.408957][ T5805] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 156.424568][ T5805] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.687: attempt to clear invalid blocks 2 len 1 [ 156.439519][ T5810] EXT4-fs (loop5): 1 truncate cleaned up [ 156.445635][ T5810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.461307][ T5805] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.687: invalid indirect mapped block 1819239214 (level 0) [ 156.482723][ T5805] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.687: invalid indirect mapped block 1819239214 (level 1) [ 156.521819][ T5805] EXT4-fs (loop2): 1 truncate cleaned up [ 156.536348][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.568850][ T5805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.894816][ T5827] loop5: detected capacity change from 0 to 1024 [ 157.021746][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.032493][ T5827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.052445][ T5827] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.259894][ T112] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 393: padding at end of block bitmap is not set [ 157.269209][ T5841] tipc: Enabling of bearer rejected, failed to enable media [ 157.288684][ T112] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 157.301602][ T112] EXT4-fs (loop5): This should not happen!! Data will be lost [ 157.301602][ T112] [ 157.370044][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.134582][ T5860] loop5: detected capacity change from 0 to 512 [ 158.141492][ T5860] EXT4-fs: Ignoring removed oldalloc option [ 158.231699][ T5860] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.697: dx entry: limit 1024 != root limit 124 [ 158.244154][ T5860] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.697: Corrupt directory, running e2fsck is recommended [ 158.260147][ T5860] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 158.269342][ T5860] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.697: corrupted in-inode xattr: invalid ea_ino [ 158.283828][ T5860] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.697: couldn't read orphan inode 15 (err -117) [ 158.297200][ T5860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.530012][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.541794][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 158.541810][ T29] audit: type=1107 audit(1759986516.937:567): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=':˚S&HHQ9Bc8obRQ,̩J9CVM\LC&Sf^Ҥ[5ˎifkewEtɕ:JcN6})[Wz_wp:'3' [ 158.615609][ T5877] loop5: detected capacity change from 0 to 1024 [ 158.764134][ T29] audit: type=1107 audit(1759986517.157:568): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 159.049802][ T5883] bridge0: port 3(gretap0) entered blocking state [ 159.056551][ T5883] bridge0: port 3(gretap0) entered disabled state [ 159.063302][ T5883] gretap0: entered allmulticast mode [ 159.070231][ T5883] gretap0: entered promiscuous mode [ 159.075777][ T5883] bridge0: port 3(gretap0) entered blocking state [ 159.082404][ T5883] bridge0: port 3(gretap0) entered forwarding state [ 159.373096][ T5886] loop0: detected capacity change from 0 to 512 [ 159.390407][ T5886] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.426513][ T5886] EXT4-fs (loop0): orphan cleanup on readonly fs [ 159.536343][ T5886] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 159.595735][ T5889] loop4: detected capacity change from 0 to 2048 [ 159.602626][ T5886] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.707: bg 0: block 248: padding at end of block bitmap is not set [ 159.632728][ T5886] Quota error (device loop0): write_blk: dquota write failed [ 159.640436][ T5886] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 159.656891][ T5886] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.707: Failed to acquire dquot type 1 [ 159.657549][ T5889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.687562][ T5886] EXT4-fs (loop0): 1 truncate cleaned up [ 159.697286][ T5886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 ro without journal. Quota mode: writeback. [ 159.701456][ T5889] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.741505][ T5886] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.707: deleted inode referenced: 12 [ 159.768419][ T29] audit: type=1400 audit(1759986518.167:569): avc: denied { ioctl } for pid=5888 comm="syz.4.708" path="/127/file0/file0/file0" dev="loop4" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.805438][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.872318][ T5886] syz.0.707 (5886) used greatest stack depth: 8808 bytes left [ 159.881181][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 159.910016][ T5896] loop4: detected capacity change from 0 to 4096 [ 159.939041][ T29] audit: type=1326 audit(1759986518.337:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.0.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 159.962557][ T29] audit: type=1326 audit(1759986518.337:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.0.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 159.998885][ T5896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.058705][ T5903] tipc: Enabling of bearer rejected, failed to enable media [ 160.142488][ T29] audit: type=1326 audit(1759986518.397:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.0.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 160.166251][ T29] audit: type=1326 audit(1759986518.407:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.0.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 160.189973][ T29] audit: type=1326 audit(1759986518.407:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.0.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 160.533190][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'. [ 160.594756][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'. [ 163.028344][ T5943] loop2: detected capacity change from 0 to 256 [ 163.035308][ T5943] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.278917][ T5952] can: request_module (can-proto-0) failed. [ 164.513552][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.530668][ T5943] FAT-fs (loop2): Directory bread(block 64) failed [ 164.537384][ T5943] FAT-fs (loop2): Directory bread(block 65) failed [ 164.544233][ T5943] FAT-fs (loop2): Directory bread(block 66) failed [ 164.551195][ T5943] FAT-fs (loop2): Directory bread(block 67) failed [ 164.557942][ T5943] FAT-fs (loop2): Directory bread(block 68) failed [ 164.564528][ T5943] FAT-fs (loop2): Directory bread(block 69) failed [ 164.571349][ T5943] FAT-fs (loop2): Directory bread(block 70) failed [ 164.578094][ T5943] FAT-fs (loop2): Directory bread(block 71) failed [ 164.585078][ T5943] FAT-fs (loop2): Directory bread(block 72) failed [ 164.591681][ T5943] FAT-fs (loop2): Directory bread(block 73) failed [ 164.875472][ T5955] serio: Serial port ptm0 [ 164.960547][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 164.960565][ T29] audit: type=1326 audit(1759986523.357:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 165.008847][ T29] audit: type=1326 audit(1759986523.357:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 165.038467][ T29] audit: type=1326 audit(1759986523.357:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 165.064313][ T29] audit: type=1326 audit(1759986523.357:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 165.090531][ T29] audit: type=1326 audit(1759986523.357:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 165.117935][ T29] audit: type=1326 audit(1759986523.517:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 165.142695][ T29] audit: type=1326 audit(1759986523.517:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 165.167941][ T29] audit: type=1326 audit(1759986523.517:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 165.201464][ T29] audit: type=1326 audit(1759986523.597:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 165.255006][ T5972] loop0: detected capacity change from 0 to 256 [ 165.343943][ T29] audit: type=1326 audit(1759986523.637:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5962 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 165.371206][ T5972] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.477707][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'. [ 166.502083][ T6007] can: request_module (can-proto-0) failed. [ 167.850946][ T6028] loop5: detected capacity change from 0 to 512 [ 167.906827][ T6028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.919736][ T6028] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.210239][ T6033] loop2: detected capacity change from 0 to 1024 [ 168.445773][ T6040] loop0: detected capacity change from 0 to 512 [ 168.673209][ T6040] EXT4-fs: Ignoring removed oldalloc option [ 169.121203][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.754'. [ 169.132532][ T6040] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.752: dx entry: limit 1024 != root limit 124 [ 169.144610][ T6040] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.752: Corrupt directory, running e2fsck is recommended [ 169.857548][ T6040] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 169.900681][ T6040] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.752: corrupted in-inode xattr: invalid ea_ino [ 169.916376][ T6040] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.752: couldn't read orphan inode 15 (err -117) [ 169.929631][ T6040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.138451][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.302338][ T6068] loop2: detected capacity change from 0 to 512 [ 170.497391][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.518336][ T6072] netlink: 48 bytes leftover after parsing attributes in process `syz.0.760'. [ 170.527637][ T6072] netlink: 48 bytes leftover after parsing attributes in process `syz.0.760'. [ 170.546622][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 170.546648][ T29] audit: type=1107 audit(1759986528.937:630): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=':˚S&HHQ9Bc8obRQ,̩J9CVM\LC&Sf^Ҥ[5ˎifkewEtɕ:JcN6})[Wz_wp:'3' [ 170.619752][ T29] audit: type=1326 audit(1759986529.017:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 170.643669][ T29] audit: type=1326 audit(1759986529.017:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 170.668558][ T29] audit: type=1326 audit(1759986529.067:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 170.691968][ T29] audit: type=1326 audit(1759986529.067:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 170.718218][ T29] audit: type=1326 audit(1759986529.067:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 170.741991][ T29] audit: type=1326 audit(1759986529.067:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 170.765658][ T29] audit: type=1326 audit(1759986529.067:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 170.789280][ T29] audit: type=1326 audit(1759986529.067:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 170.812878][ T29] audit: type=1326 audit(1759986529.117:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 170.914366][ T6076] can: request_module (can-proto-0) failed. [ 171.900070][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.917929][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.489867][ T6121] loop2: detected capacity change from 0 to 512 [ 172.510500][ T6121] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 173.184134][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 173.350756][ T6134] loop5: detected capacity change from 0 to 512 [ 173.372822][ T6134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.385885][ T6134] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.434337][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.364694][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 175.223654][ T6181] can: request_module (can-proto-0) failed. [ 176.006742][ T6189] netlink: 48 bytes leftover after parsing attributes in process `syz.2.796'. [ 176.088475][ T6192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.796'. [ 177.133271][ T6195] loop2: detected capacity change from 0 to 512 [ 177.468892][ T6206] loop5: detected capacity change from 0 to 512 [ 177.486815][ T6195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.499543][ T6195] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.593902][ T6206] EXT4-fs: inline encryption not supported [ 177.740870][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.754546][ T6206] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 177.933583][ T6206] EXT4-fs (loop5): 1 truncate cleaned up [ 177.951330][ T6206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.025443][ T6213] loop4: detected capacity change from 0 to 512 [ 178.053674][ T6213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.106110][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.775930][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.015628][ T6246] loop0: detected capacity change from 0 to 2048 [ 179.600928][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.814'. [ 179.651300][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.814'. [ 179.779530][ T6257] loop0: detected capacity change from 0 to 512 [ 179.817451][ T6257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.830109][ T6257] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.838260][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 179.838280][ T29] audit: type=1400 audit(1759986538.227:685): avc: denied { append } for pid=6263 comm="syz.2.818" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.024012][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.802120][ T6280] loop2: detected capacity change from 0 to 128 [ 181.154089][ T6286] loop0: detected capacity change from 0 to 1024 [ 181.162505][ T6286] EXT4-fs: Ignoring removed nobh option [ 181.445238][ T6286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.490686][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.041172][ T29] audit: type=1326 audit(1759986540.437:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.2.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ffcceec9 code=0x7ffc0000 [ 182.113823][ T29] audit: type=1326 audit(1759986540.467:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.2.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15ffcceec9 code=0x7ffc0000 [ 182.113865][ T29] audit: type=1326 audit(1759986540.467:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.2.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ffcceec9 code=0x7ffc0000 [ 182.113915][ T29] audit: type=1326 audit(1759986540.467:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.2.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ffcceec9 code=0x7ffc0000 [ 182.113981][ T29] audit: type=1326 audit(1759986540.467:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.2.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15ffcceec9 code=0x7ffc0000 [ 182.114007][ T29] audit: type=1326 audit(1759986540.467:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.2.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ffcceec9 code=0x7ffc0000 [ 182.114055][ T29] audit: type=1326 audit(1759986540.467:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.2.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ffcceec9 code=0x7ffc0000 [ 182.114116][ T29] audit: type=1326 audit(1759986540.467:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.2.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15ffcceec9 code=0x7ffc0000 [ 182.114192][ T29] audit: type=1326 audit(1759986540.467:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.2.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ffcceec9 code=0x7ffc0000 [ 182.148009][ T6299] loop0: detected capacity change from 0 to 512 [ 182.215049][ T6299] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.826: casefold flag without casefold feature [ 182.215257][ T6299] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.826: couldn't read orphan inode 15 (err -117) [ 182.215859][ T6299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.338794][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.041654][ T6310] tipc: Enabling of bearer rejected, failed to enable media [ 183.890690][ T6336] loop4: detected capacity change from 0 to 128 [ 184.867141][ T6351] hub 8-0:1.0: USB hub found [ 184.872163][ T6351] hub 8-0:1.0: 8 ports detected [ 184.904515][ T6351] loop0: detected capacity change from 0 to 1024 [ 184.913446][ T6351] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 184.923589][ T6351] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 184.933655][ T6351] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 184.955926][ T6351] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: inode #5: comm syz.0.841: unexpected bad inode w/o EXT4_IGET_BAD [ 184.977320][ T6351] EXT4-fs (loop0): no journal found [ 184.982652][ T6351] EXT4-fs (loop0): can't get journal size [ 184.990568][ T6351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.387365][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 185.387386][ T29] audit: type=1400 audit(1759986543.777:744): avc: denied { validate_trans } for pid=6353 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 185.798935][ T6360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.845'. [ 185.813976][ T6360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.845'. [ 185.955943][ T6364] netlink: 'syz.4.847': attribute type 3 has an invalid length. [ 185.963909][ T6364] netlink: 'syz.4.847': attribute type 3 has an invalid length. [ 186.094812][ T6370] loop4: detected capacity change from 0 to 1024 [ 186.222734][ T6368] loop2: detected capacity change from 0 to 512 [ 186.266727][ T29] audit: type=1107 audit(1759986544.507:745): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 186.330843][ T6368] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 187.337762][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.561607][ T29] audit: type=1400 audit(1759986545.957:746): avc: denied { connect } for pid=6384 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.475387][ T29] audit: type=1326 audit(1759986546.867:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 188.499358][ T29] audit: type=1326 audit(1759986546.867:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 188.742417][ T29] audit: type=1326 audit(1759986547.137:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 188.808531][ T29] audit: type=1326 audit(1759986547.167:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 188.832206][ T29] audit: type=1326 audit(1759986547.167:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 188.955548][ T6425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.868'. [ 188.965118][ T6425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.868'. [ 189.073329][ T6427] hub 8-0:1.0: USB hub found [ 189.078306][ T6427] hub 8-0:1.0: 8 ports detected [ 189.102625][ T6427] loop2: detected capacity change from 0 to 1024 [ 189.113617][ T6427] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 189.123607][ T6427] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 189.133343][ T6427] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 189.146077][ T6427] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: inode #5: comm syz.2.864: unexpected bad inode w/o EXT4_IGET_BAD [ 189.213611][ T6427] EXT4-fs (loop2): no journal found [ 189.219130][ T6427] EXT4-fs (loop2): can't get journal size [ 189.278119][ T6427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.559547][ T6434] loop5: detected capacity change from 0 to 512 [ 189.574761][ T6435] loop4: detected capacity change from 0 to 512 [ 189.693129][ T6434] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.709937][ T6435] EXT4-fs: Ignoring removed nobh option [ 190.227286][ T6435] EXT4-fs (loop4): orphan cleanup on readonly fs [ 190.234092][ T6435] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 190.436800][ T6435] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 190.710873][ T6435] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.872: attempt to clear invalid blocks 2 len 1 [ 190.724537][ T6435] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.872: invalid indirect mapped block 1819239214 (level 0) [ 190.740690][ T6434] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 190.755720][ T6435] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.872: invalid indirect mapped block 1819239214 (level 1) [ 191.057296][ T6434] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.870: bg 0: block 248: padding at end of block bitmap is not set [ 191.072037][ T6434] Quota error (device loop5): write_blk: dquota write failed [ 191.079472][ T6434] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 191.090163][ T6434] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.870: Failed to acquire dquot type 1 [ 191.102083][ T6434] EXT4-fs (loop5): 1 truncate cleaned up [ 191.115523][ T6434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 191.251682][ T6434] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.870: deleted inode referenced: 12 [ 191.295840][ T6435] EXT4-fs (loop4): 1 truncate cleaned up [ 191.296219][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.303627][ T6435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.361818][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 191.520174][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.877'. [ 192.134791][ T6463] loop5: detected capacity change from 0 to 8192 [ 192.269767][ T3693] loop5: p1 p2 p4 < > [ 192.274019][ T3693] loop5: partition table partially beyond EOD, truncated [ 192.307180][ T3693] loop5: p1 start 16777216 is beyond EOD, truncated [ 192.313954][ T3693] loop5: p2 size 515840 extends beyond EOD, truncated [ 192.349211][ T3693] loop5: p4 start 16777216 is beyond EOD, truncated [ 192.379652][ T6463] loop5: p1 p2 p4 < > [ 192.383885][ T6463] loop5: partition table partially beyond EOD, truncated [ 192.405697][ T6463] loop5: p1 start 16777216 is beyond EOD, truncated [ 192.412538][ T6463] loop5: p2 size 515840 extends beyond EOD, truncated [ 192.533112][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.555720][ T6463] loop5: p4 start 16777216 is beyond EOD, truncated [ 194.592831][ T3693] udevd[3693]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 194.611939][ T6482] loop4: detected capacity change from 0 to 512 [ 194.626487][ T6481] loop2: detected capacity change from 0 to 512 [ 194.657701][ T6481] EXT4-fs: inline encryption not supported [ 194.671292][ T3693] udevd[3693]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 194.692897][ T6482] EXT4-fs (loop4): orphan cleanup on readonly fs [ 194.712519][ T6481] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.796490][ T6482] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.884: bad orphan inode 13 [ 194.879342][ T6481] EXT4-fs (loop2): 1 truncate cleaned up [ 194.885562][ T6481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.901750][ T6482] ext4_test_bit(bit=12, block=18) = 1 [ 194.907337][ T6482] is_bad_inode(inode)=0 [ 194.911563][ T6482] NEXT_ORPHAN(inode)=2130706432 [ 194.916515][ T6482] max_ino=32 [ 194.919787][ T6482] i_nlink=1 [ 194.923809][ T6482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.017422][ T6498] loop0: detected capacity change from 0 to 128 [ 195.052948][ T6482] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 195.068687][ T6482] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 195.089699][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.191034][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.502304][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.620484][ T6517] loop4: detected capacity change from 0 to 256 [ 195.630330][ T6511] loop0: detected capacity change from 0 to 512 [ 195.650445][ T6517] FAT-fs (loop4): codepage cp864 not found [ 195.660776][ T6511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.673578][ T6511] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.752697][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.987086][ T6540] loop4: detected capacity change from 0 to 512 [ 195.995023][ T6540] EXT4-fs: inline encryption not supported [ 196.013968][ T6540] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 196.028081][ T6540] EXT4-fs (loop4): 1 truncate cleaned up [ 196.034669][ T6544] tipc: Cannot configure node identity twice [ 196.043516][ T6540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.144513][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.255836][ T29] audit: type=1326 audit(1759986554.647:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 196.279645][ T29] audit: type=1326 audit(1759986554.647:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 196.512134][ T29] audit: type=1326 audit(1759986554.907:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 196.535549][ T29] audit: type=1326 audit(1759986554.907:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 196.559316][ T29] audit: type=1326 audit(1759986554.907:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 196.597384][ T6555] loop5: detected capacity change from 0 to 1024 [ 196.611688][ T6555] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 196.621776][ T6555] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 196.631486][ T6555] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 196.645004][ T6555] EXT4-fs error (device loop5): ext4_get_journal_inode:5808: inode #5: comm syz.5.906: unexpected bad inode w/o EXT4_IGET_BAD [ 196.659380][ T6555] EXT4-fs (loop5): no journal found [ 196.664863][ T6555] EXT4-fs (loop5): can't get journal size [ 196.673657][ T6555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.725517][ T29] audit: type=1326 audit(1759986555.117:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 196.749379][ T29] audit: type=1326 audit(1759986555.117:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 196.772872][ T29] audit: type=1326 audit(1759986555.117:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 197.266875][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 197.389115][ T29] audit: type=1326 audit(1759986555.197:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 197.413471][ T29] audit: type=1326 audit(1759986555.197:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.4.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb89f8eec9 code=0x7ffc0000 [ 197.633537][ T6563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.909'. [ 198.172753][ T6594] netlink: 'syz.0.919': attribute type 3 has an invalid length. [ 198.191030][ T6594] netlink: 'syz.0.919': attribute type 3 has an invalid length. [ 198.237993][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.261972][ T6600] loop2: detected capacity change from 0 to 128 [ 198.607857][ T6602] loop0: detected capacity change from 0 to 1024 [ 198.827250][ T6585] loop4: detected capacity change from 0 to 512 [ 199.160469][ T6585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.424245][ T6620] loop2: detected capacity change from 0 to 512 [ 199.538309][ T6620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.558436][ T6620] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.592690][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.100503][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.158248][ T6632] loop5: detected capacity change from 0 to 256 [ 200.166551][ T6632] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.467263][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 200.522641][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 201.496132][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 201.496151][ T29] audit: type=1107 audit(1759986559.887:785): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 202.089810][ T29] audit: type=1107 audit(1759986560.487:786): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=':˚S&HHQ9Bc8obRQ,̩J9CVM\LC&Sf^Ҥ[5ˎifkewEtɕ:JcN6})[Wz_wp:'3' [ 202.196725][ T29] audit: type=1400 audit(1759986560.587:787): avc: denied { mounton } for pid=6650 comm="syz.4.936" path="/165/file0" dev="tmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 202.827892][ T6682] loop4: detected capacity change from 0 to 512 [ 202.935486][ T6682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 202.983812][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 203.031231][ T6682] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.945: Unimplemented hash flags: 0x0001 [ 203.043056][ T6682] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.945: Corrupt directory, running e2fsck is recommended [ 203.073221][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 203.134109][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.349766][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 204.545328][ T29] audit: type=1326 audit(1759986562.937:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 204.590304][ T29] audit: type=1326 audit(1759986562.937:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 204.613821][ T29] audit: type=1326 audit(1759986562.967:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 204.637560][ T29] audit: type=1326 audit(1759986562.967:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 204.660987][ T29] audit: type=1326 audit(1759986562.967:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 204.684807][ T29] audit: type=1326 audit(1759986562.967:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 204.708571][ T29] audit: type=1326 audit(1759986562.967:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6710 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 204.798111][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.958'. [ 204.813443][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.958'. [ 205.869430][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.957094][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.982674][ T6736] loop5: detected capacity change from 0 to 128 [ 206.109842][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.135387][ T6743] loop0: detected capacity change from 0 to 512 [ 206.156440][ T6743] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 206.178365][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.192200][ T6743] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.967: invalid indirect mapped block 2683928664 (level 1) [ 206.210396][ T6743] EXT4-fs (loop0): Remounting filesystem read-only [ 206.217207][ T6743] EXT4-fs (loop0): 1 truncate cleaned up [ 206.223335][ T6743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.251130][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.319434][ T52] gretap0: left allmulticast mode [ 206.324630][ T52] gretap0: left promiscuous mode [ 206.329782][ T52] bridge0: port 1(gretap0) entered disabled state [ 206.343494][ T6755] loop0: detected capacity change from 0 to 128 [ 206.425703][ T6761] loop2: detected capacity change from 0 to 1024 [ 206.763882][ T52] bond0 (unregistering): Released all slaves [ 206.856253][ T52] tipc: Left network mode [ 206.861225][ T6778] syzkaller0: entered promiscuous mode [ 206.866994][ T6778] syzkaller0: entered allmulticast mode [ 206.904028][ T52] hsr_slave_0: left promiscuous mode [ 206.924537][ T52] hsr_slave_1: left promiscuous mode [ 206.940374][ T52] veth1_macvtap: left promiscuous mode [ 206.977934][ T52] veth0_macvtap: left promiscuous mode [ 207.093512][ T3493] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 207.106197][ T52] veth1_vlan: left promiscuous mode [ 207.111868][ T52] veth0_vlan: left promiscuous mode [ 207.731468][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.977'. [ 207.906572][ T6739] chnl_net:caif_netlink_parms(): no params data found [ 207.953285][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 207.953320][ T29] audit: type=1400 audit(1759986566.347:823): avc: denied { read } for pid=6802 comm="syz.2.978" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 207.982789][ T29] audit: type=1400 audit(1759986566.347:824): avc: denied { open } for pid=6802 comm="syz.2.978" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 208.606863][ T29] audit: type=1400 audit(1759986566.597:825): avc: denied { connect } for pid=6804 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 208.628162][ T29] audit: type=1404 audit(1759986566.687:826): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 208.643244][ T29] audit: type=1404 audit(1759986566.687:827): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 208.658271][ T29] audit: type=1400 audit(1759986566.707:828): avc: denied { setopt } for pid=6802 comm="syz.2.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 208.678114][ T29] audit: type=1400 audit(1759986566.707:829): avc: denied { prog_load } for pid=6802 comm="syz.2.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 208.697375][ T29] audit: type=1400 audit(1759986566.707:830): avc: denied { bpf } for pid=6802 comm="syz.2.978" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 208.718437][ T29] audit: type=1400 audit(1759986566.707:831): avc: denied { perfmon } for pid=6802 comm="syz.2.978" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 208.739272][ T29] audit: type=1400 audit(1759986566.707:832): avc: denied { prog_run } for pid=6802 comm="syz.2.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 208.852075][ T6817] can: request_module (can-proto-0) failed. [ 209.222072][ T6821] loop2: detected capacity change from 0 to 4096 [ 209.426340][ T6739] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.433497][ T6739] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.460469][ T6821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.675099][ T6739] bridge_slave_0: entered allmulticast mode [ 209.688493][ T6826] serio: Serial port ptm0 [ 209.705815][ T6739] bridge_slave_0: entered promiscuous mode [ 209.843497][ T6828] loop0: detected capacity change from 0 to 1024 [ 209.853701][ T6828] EXT4-fs: Ignoring removed nobh option [ 210.121044][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.128280][ T6739] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.135234][ T6828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.136196][ T6739] bridge_slave_1: entered allmulticast mode [ 210.157365][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.986'. [ 210.167303][ T6739] bridge_slave_1: entered promiscuous mode [ 210.218762][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.247288][ T6739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.282408][ T6739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.318189][ T6739] team0: Port device team_slave_0 added [ 210.327012][ T6739] team0: Port device team_slave_1 added [ 210.799563][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.806635][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.833177][ T6739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.902497][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.909654][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.936345][ T6739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.982093][ T6739] hsr_slave_0: entered promiscuous mode [ 210.993103][ T6739] hsr_slave_1: entered promiscuous mode [ 210.999797][ T6739] debugfs: 'hsr0' already exists in 'hsr' [ 211.005894][ T6739] Cannot create hsr debugfs directory [ 211.167964][ T6874] loop0: detected capacity change from 0 to 1024 [ 211.195595][ T6874] EXT4-fs: test_dummy_encryption option not supported [ 211.258014][ T6739] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 211.277246][ T6739] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 211.295039][ T6739] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 211.314437][ T6739] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 211.400228][ T6739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.426911][ T6739] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.447463][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.455001][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.502789][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.510276][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.717322][ T6739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.742124][ T6913] netlink: 'syz.1.994': attribute type 3 has an invalid length. [ 211.762241][ T6913] netlink: 'syz.1.994': attribute type 3 has an invalid length. [ 212.282044][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 212.321749][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 212.465311][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 213.985590][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 213.985610][ T29] audit: type=1400 audit(1759986572.377:917): avc: denied { read } for pid=6953 comm="syz.5.1003" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.036712][ T29] audit: type=1400 audit(1759986572.377:918): avc: denied { open } for pid=6953 comm="syz.5.1003" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.061791][ T29] audit: type=1400 audit(1759986572.377:919): avc: denied { ioctl } for pid=6953 comm="syz.5.1003" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.164235][ T6739] veth0_vlan: entered promiscuous mode [ 214.177679][ T6739] veth1_vlan: entered promiscuous mode [ 214.326097][ T6739] veth0_macvtap: entered promiscuous mode [ 214.334919][ T6739] veth1_macvtap: entered promiscuous mode [ 214.347435][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.360830][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.373418][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.383178][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.398594][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.415865][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.591265][ T29] audit: type=1400 audit(1759986572.987:920): avc: denied { execute } for pid=6960 comm="syz.5.1004" name="file1" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 214.613799][ T29] audit: type=1400 audit(1759986572.987:921): avc: denied { execute_no_trans } for pid=6960 comm="syz.5.1004" path="/96/file1" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 214.675964][ T6968] can: request_module (can-proto-0) failed. [ 214.930838][ T29] audit: type=1400 audit(1759986573.327:922): avc: denied { mounton } for pid=6739 comm="syz-executor" path="/root/syzkaller.YeC0jF/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 214.955936][ T29] audit: type=1400 audit(1759986573.327:923): avc: denied { mount } for pid=6739 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 214.978453][ T29] audit: type=1400 audit(1759986573.327:924): avc: denied { mount } for pid=6739 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 215.006738][ T29] audit: type=1400 audit(1759986573.327:925): avc: denied { mounton } for pid=6739 comm="syz-executor" path="/root/syzkaller.YeC0jF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 215.033968][ T29] audit: type=1400 audit(1759986573.327:926): avc: denied { mounton } for pid=6739 comm="syz-executor" path="/root/syzkaller.YeC0jF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 215.260321][ T6979] loop5: detected capacity change from 0 to 512 [ 215.289859][ T6979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.302616][ T6979] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.393610][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.448287][ T6990] loop5: detected capacity change from 0 to 256 [ 215.479604][ T6990] FAT-fs (loop5): bogus number of FAT sectors [ 215.485877][ T6990] FAT-fs (loop5): Can't find a valid FAT filesystem [ 215.752976][ T6997] loop5: detected capacity change from 0 to 128 [ 215.882864][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 215.942475][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 216.050916][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.141566][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 216.403640][ T7016] xt_hashlimit: max too large, truncated to 1048576 [ 216.875515][ T7018] loop6: detected capacity change from 0 to 256 [ 216.919413][ T7018] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 217.353311][ T7020] loop5: detected capacity change from 0 to 4096 [ 217.379291][ T7020] EXT4-fs: test_dummy_encryption option not supported [ 218.488111][ T7037] loop2: detected capacity change from 0 to 512 [ 218.510103][ T7037] EXT4-fs: Ignoring removed oldalloc option [ 218.529884][ T7037] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1024: dx entry: limit 1024 != root limit 124 [ 218.542288][ T7037] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1024: Corrupt directory, running e2fsck is recommended [ 218.557332][ T7037] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 218.566134][ T7037] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.1024: corrupted in-inode xattr: invalid ea_ino [ 218.580387][ T7037] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1024: couldn't read orphan inode 15 (err -117) [ 218.626542][ T7037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.434393][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.522159][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1027'. [ 219.745946][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 219.745965][ T29] audit: type=1400 audit(1759986578.117:951): avc: denied { create } for pid=7050 comm="syz.5.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.772601][ T29] audit: type=1400 audit(1759986578.117:952): avc: denied { ioctl } for pid=7050 comm="syz.5.1028" path="socket:[15290]" dev="sockfs" ino=15290 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.797994][ T29] audit: type=1400 audit(1759986578.127:953): avc: denied { firmware_load } for pid=7050 comm="syz.5.1028" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 220.350342][ T29] audit: type=1400 audit(1759986578.737:954): avc: denied { ioctl } for pid=7065 comm="syz.5.1032" path="socket:[15657]" dev="sockfs" ino=15657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.413824][ T29] audit: type=1326 audit(1759986578.807:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 220.462323][ T29] audit: type=1326 audit(1759986578.807:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 220.486140][ T29] audit: type=1326 audit(1759986578.837:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 220.510341][ T29] audit: type=1326 audit(1759986578.847:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 220.534202][ T29] audit: type=1326 audit(1759986578.847:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 220.537536][ T7079] hub 8-0:1.0: USB hub found [ 220.558816][ T29] audit: type=1326 audit(1759986578.847:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 220.563775][ T7079] hub 8-0:1.0: 8 ports detected [ 220.587981][ T7079] loop5: detected capacity change from 0 to 1024 [ 220.618198][ T7079] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 220.628168][ T7079] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 220.637976][ T7079] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 220.649199][ T7079] EXT4-fs error (device loop5): ext4_get_journal_inode:5808: inode #5: comm syz.5.1034: unexpected bad inode w/o EXT4_IGET_BAD [ 220.663296][ T7079] EXT4-fs (loop5): no journal found [ 220.668686][ T7079] EXT4-fs (loop5): can't get journal size [ 221.533154][ T7079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.697596][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.383903][ T7101] loop6: detected capacity change from 0 to 512 [ 222.430697][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1037'. [ 222.458186][ T7101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.470978][ T7101] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.505740][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1039'. [ 222.630843][ T6739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.742925][ T7126] syzkaller0: entered promiscuous mode [ 222.748581][ T7126] syzkaller0: entered allmulticast mode [ 222.871372][ T7132] loop2: detected capacity change from 0 to 512 [ 222.879007][ T7132] EXT4-fs: Ignoring removed nobh option [ 223.002460][ T7135] bridge0: port 2(bridge_slave_1) entered listening state [ 223.364292][ T7132] EXT4-fs (loop2): orphan cleanup on readonly fs [ 223.370834][ T7132] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 223.406169][ T7132] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 223.460732][ T7132] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1049: attempt to clear invalid blocks 2 len 1 [ 223.486205][ T7132] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1049: invalid indirect mapped block 1819239214 (level 0) [ 223.581387][ T7132] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1049: invalid indirect mapped block 1819239214 (level 1) [ 223.684004][ T7132] EXT4-fs (loop2): 1 truncate cleaned up [ 223.710424][ T7132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.943352][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1054'. [ 224.609826][ T7195] syzkaller0: entered promiscuous mode [ 224.615466][ T7195] syzkaller0: entered allmulticast mode [ 224.771502][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 224.771594][ T29] audit: type=1326 audit(1759986583.167:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7187 comm="syz.6.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77f45eec9 code=0x7ffc0000 [ 224.836767][ T29] audit: type=1326 audit(1759986583.227:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 224.860530][ T29] audit: type=1326 audit(1759986583.227:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 224.884609][ T29] audit: type=1326 audit(1759986583.227:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 224.908235][ T29] audit: type=1326 audit(1759986583.227:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 224.932174][ T29] audit: type=1326 audit(1759986583.227:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 224.955862][ T29] audit: type=1326 audit(1759986583.227:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 224.955955][ T29] audit: type=1326 audit(1759986583.227:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 224.955983][ T29] audit: type=1326 audit(1759986583.227:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 224.956052][ T29] audit: type=1326 audit(1759986583.227:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.0.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 224.956457][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.150057][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1066'. [ 225.217322][ T7231] loop5: detected capacity change from 0 to 1024 [ 225.263160][ T7231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.656203][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.795618][ T7245] syzkaller0: entered promiscuous mode [ 225.801356][ T7245] syzkaller0: entered allmulticast mode [ 226.641314][ T7259] syzkaller0: entered promiscuous mode [ 226.647331][ T7259] syzkaller0: entered allmulticast mode [ 226.904331][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 226.943618][ T7272] loop2: detected capacity change from 0 to 512 [ 226.999868][ T7272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.707098][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.325921][ T7289] can: request_module (can-proto-0) failed. [ 229.106988][ T7309] netlink: 'syz.1.1094': attribute type 3 has an invalid length. [ 229.115107][ T7309] netlink: 'syz.1.1094': attribute type 3 has an invalid length. [ 229.432285][ T7315] loop6: detected capacity change from 0 to 256 [ 229.457891][ T7315] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.576326][ T7321] loop5: detected capacity change from 0 to 1024 [ 229.787683][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 229.787702][ T29] audit: type=1400 audit(1759986588.177:1137): avc: denied { setopt } for pid=7312 comm="syz.1.1096" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.181404][ T29] audit: type=1400 audit(1759986588.577:1138): avc: denied { write } for pid=7318 comm="syz.5.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 230.312722][ T29] audit: type=1400 audit(1759986588.707:1139): avc: denied { unmount } for pid=6739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 231.426228][ T7336] loop6: detected capacity change from 0 to 512 [ 231.434564][ T7336] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 231.459480][ T7336] EXT4-fs (loop6): 1 truncate cleaned up [ 231.489995][ T7336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.906231][ T6739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.301578][ T29] audit: type=1400 audit(1759986590.667:1140): avc: denied { name_bind } for pid=7339 comm="syz.1.1103" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 232.323747][ T29] audit: type=1400 audit(1759986590.667:1141): avc: denied { node_bind } for pid=7339 comm="syz.1.1103" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 232.405315][ T7350] netlink: 'syz.2.1107': attribute type 3 has an invalid length. [ 232.414220][ T7350] netlink: 'syz.2.1107': attribute type 3 has an invalid length. [ 232.500322][ T7354] hub 8-0:1.0: USB hub found [ 232.505199][ T7354] hub 8-0:1.0: 8 ports detected [ 233.849003][ T7353] loop6: detected capacity change from 0 to 512 [ 233.878360][ T7353] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.885020][ T29] audit: type=1326 audit(1759986592.177:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 233.915276][ T29] audit: type=1326 audit(1759986592.177:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 233.939240][ T29] audit: type=1326 audit(1759986592.277:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 233.963267][ T29] audit: type=1326 audit(1759986592.277:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 233.987186][ T29] audit: type=1326 audit(1759986592.277:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 234.667045][ T7391] loop2: detected capacity change from 0 to 512 [ 234.676215][ T7391] EXT4-fs: Ignoring removed nobh option [ 234.704599][ T7391] EXT4-fs (loop2): orphan cleanup on readonly fs [ 234.711158][ T7391] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 234.750863][ T7391] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 234.783395][ T7391] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1121: attempt to clear invalid blocks 2 len 1 [ 234.811695][ T7391] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1121: invalid indirect mapped block 1819239214 (level 0) [ 234.842322][ T7391] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1121: invalid indirect mapped block 1819239214 (level 1) [ 234.874759][ T7391] EXT4-fs (loop2): 1 truncate cleaned up [ 234.897177][ T7391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.016862][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 235.016881][ T29] audit: type=1400 audit(1759986593.417:1160): avc: denied { nlmsg_write } for pid=7394 comm="syz.5.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.078237][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.088672][ T6739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.109656][ T7399] loop5: detected capacity change from 0 to 512 [ 235.118494][ T7399] EXT4-fs: Ignoring removed bh option [ 235.126494][ T7399] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 235.150110][ T7399] EXT4-fs (loop5): 1 truncate cleaned up [ 235.156412][ T7399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.185479][ T29] audit: type=1400 audit(1759986593.567:1161): avc: denied { create } for pid=7398 comm="syz.5.1126" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 235.201296][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.218884][ T29] audit: type=1400 audit(1759986593.567:1162): avc: denied { remove_name } for pid=7398 comm="syz.5.1126" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.251162][ T29] audit: type=1400 audit(1759986593.567:1163): avc: denied { rename } for pid=7398 comm="syz.5.1126" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.274101][ T29] audit: type=1400 audit(1759986593.567:1164): avc: denied { rmdir } for pid=7398 comm="syz.5.1126" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 235.292028][ T7402] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1125'. [ 235.309009][ T29] audit: type=1400 audit(1759986593.567:1165): avc: denied { rename } for pid=7398 comm="syz.5.1126" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 235.322169][ T7402] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1125'. [ 235.353768][ T29] audit: type=1400 audit(1759986593.567:1166): avc: denied { rmdir } for pid=7398 comm="syz.5.1126" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.400352][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1128'. [ 235.420958][ T29] audit: type=1400 audit(1759986593.807:1167): avc: denied { bind } for pid=7404 comm="syz.6.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.465350][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.468202][ T29] audit: type=1400 audit(1759986593.857:1168): avc: denied { read write } for pid=7407 comm="syz.6.1129" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.498569][ T29] audit: type=1400 audit(1759986593.857:1169): avc: denied { open } for pid=7407 comm="syz.6.1129" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.500054][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.060735][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1133'. [ 236.213309][ T7431] hub 8-0:1.0: USB hub found [ 236.218349][ T7431] hub 8-0:1.0: 8 ports detected [ 237.413653][ T7447] loop6: detected capacity change from 0 to 512 [ 237.443665][ T7447] EXT4-fs: Ignoring removed oldalloc option [ 237.543309][ T7447] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.1140: dx entry: limit 1024 != root limit 124 [ 237.555606][ T7447] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1140: Corrupt directory, running e2fsck is recommended [ 237.707806][ T7447] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 237.726763][ T7447] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.1140: corrupted in-inode xattr: invalid ea_ino [ 237.783317][ T7447] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1140: couldn't read orphan inode 15 (err -117) [ 237.833383][ T7447] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.047561][ T7457] loop5: detected capacity change from 0 to 128 [ 238.486256][ T6739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.549693][ T7465] loop6: detected capacity change from 0 to 256 [ 238.556424][ T7465] vfat: Bad value for 'fmask' [ 239.549020][ T7482] tipc: Enabling of bearer rejected, failed to enable media [ 239.561088][ T7480] can: request_module (can-proto-0) failed. [ 239.572648][ T7482] syzkaller0: entered promiscuous mode [ 239.578635][ T7482] syzkaller0: entered allmulticast mode [ 239.743973][ T7494] hub 8-0:1.0: USB hub found [ 239.748993][ T7494] hub 8-0:1.0: 8 ports detected [ 239.770897][ T7494] loop6: detected capacity change from 0 to 1024 [ 239.781958][ T7494] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 239.791912][ T7494] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 239.801705][ T7494] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 239.813108][ T7494] EXT4-fs error (device loop6): ext4_get_journal_inode:5808: inode #5: comm syz.6.1154: unexpected bad inode w/o EXT4_IGET_BAD [ 239.827005][ T7494] EXT4-fs (loop6): no journal found [ 239.832622][ T7494] EXT4-fs (loop6): can't get journal size [ 239.867886][ T7494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.756789][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1159'. [ 241.302772][ T7520] loop2: detected capacity change from 0 to 512 [ 241.363184][ T7520] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 241.717638][ T6739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.078057][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 242.084254][ T29] audit: type=1400 audit(1759986600.477:1178): avc: denied { sys_module } for pid=7517 comm="syz.2.1164" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 242.225145][ T7530] loop6: detected capacity change from 0 to 1024 [ 242.243870][ T7530] EXT4-fs: Ignoring removed nobh option [ 242.276481][ T7539] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1170'. [ 242.338336][ T7530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.441069][ T6739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.464342][ T7547] loop5: detected capacity change from 0 to 512 [ 242.491616][ T7547] EXT4-fs: Ignoring removed oldalloc option [ 242.523212][ T7547] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1172: dx entry: limit 1024 != root limit 124 [ 242.535386][ T7547] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1172: Corrupt directory, running e2fsck is recommended [ 242.608363][ T7547] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 242.629530][ T7547] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1172: corrupted in-inode xattr: invalid ea_ino [ 242.676945][ T7547] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1172: couldn't read orphan inode 15 (err -117) [ 242.710848][ T7547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.917725][ T29] audit: type=1326 audit(1759986600.717:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 242.941627][ T29] audit: type=1326 audit(1759986600.727:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 242.966059][ T29] audit: type=1326 audit(1759986600.727:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 242.990276][ T29] audit: type=1326 audit(1759986600.727:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 243.014338][ T29] audit: type=1326 audit(1759986600.727:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 243.038548][ T29] audit: type=1326 audit(1759986600.727:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 243.063210][ T29] audit: type=1326 audit(1759986600.727:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 243.087178][ T29] audit: type=1326 audit(1759986600.727:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6e0748ef03 code=0x7ffc0000 [ 243.110809][ T29] audit: type=1326 audit(1759986600.757:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6e0748d97f code=0x7ffc0000 [ 243.268684][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.313078][ T7567] loop2: detected capacity change from 0 to 512 [ 243.351805][ T7567] EXT4-fs: inline encryption not supported [ 243.376666][ T7569] loop5: detected capacity change from 0 to 512 [ 243.382753][ T7567] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 243.413417][ T7567] EXT4-fs (loop2): 1 truncate cleaned up [ 243.413523][ T7569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.421147][ T7567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.459942][ T7569] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.573632][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.718836][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.734684][ T7583] loop5: detected capacity change from 0 to 1024 [ 243.744921][ T7583] EXT4-fs: Ignoring removed nobh option [ 243.790722][ T7583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.984355][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.133810][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1188'. [ 244.189129][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1188'. [ 244.468765][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1187'. [ 244.716289][ T7615] tipc: Enabling of bearer rejected, failed to enable media [ 244.737298][ T7615] syzkaller0: entered promiscuous mode [ 244.742982][ T7615] syzkaller0: entered allmulticast mode [ 244.983468][ T7608] loop6: detected capacity change from 0 to 512 [ 245.021745][ T7608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.736353][ T7629] netlink: 'syz.2.1198': attribute type 3 has an invalid length. [ 245.774907][ T7629] netlink: 'syz.2.1198': attribute type 3 has an invalid length. [ 245.817543][ T6739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.076253][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1201'. [ 246.260773][ T7644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.270420][ T7644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.461281][ T7648] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1205'. [ 247.636403][ T7667] netlink: 'syz.1.1211': attribute type 3 has an invalid length. [ 247.654764][ T7667] netlink: 'syz.1.1211': attribute type 3 has an invalid length. [ 247.715204][ T7663] loop5: detected capacity change from 0 to 512 [ 247.729408][ T7663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.884671][ T7678] loop6: detected capacity change from 0 to 1024 [ 247.920165][ T7678] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 247.930577][ T7678] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 247.940886][ T7678] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 247.962049][ T7678] EXT4-fs error (device loop6): ext4_get_journal_inode:5808: inode #5: comm syz.6.1214: unexpected bad inode w/o EXT4_IGET_BAD [ 247.979284][ T7678] EXT4-fs (loop6): no journal found [ 247.984671][ T7678] EXT4-fs (loop6): can't get journal size [ 247.992510][ T7678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 248.485870][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.047217][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 249.047235][ T29] audit: type=1404 audit(1759986607.447:1213): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 249.102257][ T29] audit: type=1400 audit(1759986607.467:1214): avc: denied { sys_module } for pid=7685 comm="syz.0.1217" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 249.123766][ T29] audit: type=1400 audit(1759986607.477:1215): avc: denied { map_create } for pid=7693 comm="syz.1.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 249.143424][ T29] audit: type=1400 audit(1759986607.477:1216): avc: denied { create } for pid=7693 comm="syz.1.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 249.164403][ T29] audit: type=1400 audit(1759986607.477:1217): avc: denied { prog_load } for pid=7693 comm="syz.1.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 249.183838][ T29] audit: type=1400 audit(1759986607.477:1218): avc: denied { execmem } for pid=7693 comm="syz.1.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 249.203551][ T29] audit: type=1404 audit(1759986607.487:1219): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 249.218727][ T29] audit: type=1400 audit(1759986607.497:1220): avc: denied { prog_load } for pid=7693 comm="syz.1.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 249.238247][ T29] audit: type=1400 audit(1759986607.497:1221): avc: denied { bpf } for pid=7693 comm="syz.1.1220" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 249.259098][ T29] audit: type=1400 audit(1759986607.497:1222): avc: denied { perfmon } for pid=7693 comm="syz.1.1220" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 249.992213][ T6739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.019490][ T7702] netlink: 'syz.1.1223': attribute type 3 has an invalid length. [ 250.074450][ T7702] netlink: 'syz.1.1223': attribute type 3 has an invalid length. [ 250.213560][ T7707] loop2: detected capacity change from 0 to 1024 [ 250.227005][ T7707] EXT4-fs: inline encryption not supported [ 250.233004][ T7707] EXT4-fs: Ignoring removed i_version option [ 250.269372][ T7707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.308356][ T7707] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 250.366032][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.397521][ T7737] loop6: detected capacity change from 0 to 2048 [ 252.124382][ T7751] loop5: detected capacity change from 0 to 512 [ 252.295700][ T7751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.316854][ T7751] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.424504][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.329057][ T7776] loop2: detected capacity change from 0 to 128 [ 253.627464][ T7766] loop5: detected capacity change from 0 to 512 [ 253.683657][ T7766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.019168][ T7793] tipc: Started in network mode [ 254.024291][ T7793] tipc: Node identity ac14140f, cluster identity 4711 [ 254.032526][ T7793] tipc: New replicast peer: 255.255.255.255 [ 254.039321][ T7793] tipc: Enabled bearer , priority 10 [ 254.111844][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.164863][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 254.164879][ T29] audit: type=1400 audit(1759986612.557:1282): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 255.165926][ T29] audit: type=1400 audit(1759986613.557:1283): avc: denied { create } for pid=7805 comm="syz.0.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 255.185800][ T29] audit: type=1400 audit(1759986613.557:1284): avc: denied { execute } for pid=7805 comm="syz.0.1254" name="file1" dev="tmpfs" ino=1476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 255.208419][ T29] audit: type=1400 audit(1759986613.557:1285): avc: denied { execute_no_trans } for pid=7805 comm="syz.0.1254" path="/277/file1" dev="tmpfs" ino=1476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 255.257092][ T7812] can: request_module (can-proto-0) failed. [ 255.267067][ T3540] tipc: Node number set to 2886997007 [ 255.308309][ T7817] netlink: 'syz.5.1251': attribute type 3 has an invalid length. [ 255.316477][ T7817] netlink: 'syz.5.1251': attribute type 3 has an invalid length. [ 255.331192][ T29] audit: type=1400 audit(1759986613.727:1286): avc: denied { bind } for pid=7819 comm="syz.6.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.351004][ T29] audit: type=1400 audit(1759986613.727:1287): avc: denied { name_bind } for pid=7819 comm="syz.6.1257" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 255.372499][ T29] audit: type=1400 audit(1759986613.727:1288): avc: denied { node_bind } for pid=7819 comm="syz.6.1257" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 255.394862][ T29] audit: type=1400 audit(1759986613.727:1289): avc: denied { setopt } for pid=7819 comm="syz.6.1257" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.524255][ T29] audit: type=1400 audit(1759986613.917:1290): avc: denied { read } for pid=7819 comm="syz.6.1257" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.815099][ T29] audit: type=1400 audit(1759986614.207:1291): avc: denied { create } for pid=7830 comm="syz.5.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 256.193560][ T7840] loop2: detected capacity change from 0 to 256 [ 256.219782][ T7840] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 257.212819][ T7862] netlink: 'syz.2.1270': attribute type 3 has an invalid length. [ 257.232580][ T7862] netlink: 'syz.2.1270': attribute type 3 has an invalid length. [ 257.442546][ T7864] can: request_module (can-proto-0) failed. [ 257.785953][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1276'. [ 258.189523][ T7897] tipc: New replicast peer: 255.255.255.255 [ 258.196098][ T7897] tipc: Enabled bearer , priority 10 [ 258.708759][ T7881] loop5: detected capacity change from 0 to 512 [ 258.856893][ T7881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.293715][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.430806][ T3540] tipc: Node number set to 1646069017 [ 259.941785][ T7940] can: request_module (can-proto-0) failed. [ 259.999978][ T7946] loop5: detected capacity change from 0 to 1024 [ 260.058460][ T7946] EXT4-fs: Ignoring removed nobh option [ 260.105301][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 260.105316][ T29] audit: type=1326 audit(1759986618.497:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77f45eec9 code=0x7ffc0000 [ 260.163567][ T29] audit: type=1326 audit(1759986618.537:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77f45eec9 code=0x7ffc0000 [ 260.187596][ T29] audit: type=1326 audit(1759986618.547:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77f45eec9 code=0x7ffc0000 [ 260.211503][ T29] audit: type=1326 audit(1759986618.547:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77f45eec9 code=0x7ffc0000 [ 260.235221][ T29] audit: type=1326 audit(1759986618.547:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77f45eec9 code=0x7ffc0000 [ 260.260424][ T7946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.281493][ T29] audit: type=1326 audit(1759986618.557:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77f45eec9 code=0x7ffc0000 [ 260.305195][ T29] audit: type=1326 audit(1759986618.557:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77f45eec9 code=0x7ffc0000 [ 260.328900][ T29] audit: type=1326 audit(1759986618.557:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77f45eec9 code=0x7ffc0000 [ 260.352885][ T29] audit: type=1326 audit(1759986618.557:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77f45eec9 code=0x7ffc0000 [ 260.376535][ T29] audit: type=1326 audit(1759986618.557:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77f45eec9 code=0x7ffc0000 [ 260.460247][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'. [ 260.474665][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.258780][ T7993] can: request_module (can-proto-0) failed. [ 261.603881][ T7996] loop5: detected capacity change from 0 to 256 [ 261.624401][ T7996] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.705871][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 263.680732][ T8019] hub 8-0:1.0: USB hub found [ 263.685491][ T8019] hub 8-0:1.0: 8 ports detected [ 263.710385][ T8019] loop6: detected capacity change from 0 to 1024 [ 263.721191][ T8019] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 263.730999][ T8019] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 263.740896][ T8019] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 263.752339][ T8019] EXT4-fs error (device loop6): ext4_get_journal_inode:5808: inode #5: comm syz.6.1324: unexpected bad inode w/o EXT4_IGET_BAD [ 263.766158][ T8019] EXT4-fs (loop6): no journal found [ 263.771524][ T8019] EXT4-fs (loop6): can't get journal size [ 263.838427][ T8019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.369952][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 265.369970][ T29] audit: type=1400 audit(1759986623.767:1385): avc: denied { read write } for pid=8031 comm="syz.2.1328" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.400161][ T29] audit: type=1400 audit(1759986623.767:1386): avc: denied { open } for pid=8031 comm="syz.2.1328" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.424704][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.463553][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.581253][ T29] audit: type=1400 audit(1759986623.817:1387): avc: denied { ioctl } for pid=8031 comm="syz.2.1328" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.608559][ T6739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.747055][ T29] audit: type=1326 audit(1759986624.137:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 265.771138][ T29] audit: type=1326 audit(1759986624.137:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 265.841350][ T8050] syzkaller0: entered promiscuous mode [ 265.846935][ T8050] syzkaller0: entered allmulticast mode [ 265.860887][ T29] audit: type=1326 audit(1759986624.187:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 265.884645][ T29] audit: type=1326 audit(1759986624.187:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 265.908594][ T29] audit: type=1326 audit(1759986624.187:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 265.932368][ T29] audit: type=1326 audit(1759986624.197:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 265.955982][ T29] audit: type=1326 audit(1759986624.197:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64abf6eec9 code=0x7ffc0000 [ 265.993231][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1335'. [ 266.015084][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.029378][ T8052] bridge_slave_0 (unregistering): left allmulticast mode [ 266.036590][ T8052] bridge_slave_0 (unregistering): left promiscuous mode [ 266.043750][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.131666][ T8045] cgroup: Unknown subsys name 'cpuset' [ 266.153752][ T8062] loop5: detected capacity change from 0 to 512 [ 266.164906][ T8062] EXT4-fs: Ignoring removed oldalloc option [ 266.181987][ T8062] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1338: dx entry: limit 1024 != root limit 124 [ 266.194410][ T8062] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1338: Corrupt directory, running e2fsck is recommended [ 267.147614][ T8062] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 267.170064][ T8062] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1338: corrupted in-inode xattr: invalid ea_ino [ 267.219832][ T8062] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1338: couldn't read orphan inode 15 (err -117) [ 267.247428][ T8062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.322708][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.354330][ T8087] hub 8-0:1.0: USB hub found [ 268.359375][ T8087] hub 8-0:1.0: 8 ports detected [ 268.383222][ T8087] loop6: detected capacity change from 0 to 1024 [ 268.393785][ T8087] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 268.403843][ T8087] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 268.413915][ T8087] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 268.425544][ T8087] EXT4-fs error (device loop6): ext4_get_journal_inode:5808: inode #5: comm syz.6.1342: unexpected bad inode w/o EXT4_IGET_BAD [ 268.439314][ T8087] EXT4-fs (loop6): no journal found [ 268.444558][ T8087] EXT4-fs (loop6): can't get journal size [ 268.451928][ T8087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.698060][ T8096] syzkaller0: entered promiscuous mode [ 268.703735][ T8096] syzkaller0: entered allmulticast mode [ 269.334391][ T8112] loop5: detected capacity change from 0 to 2048 [ 269.646140][ T8112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.694547][ T8112] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.889057][ T8119] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1348: bg 0: block 345: padding at end of block bitmap is not set [ 269.904020][ T8119] EXT4-fs (loop5): Remounting filesystem read-only [ 269.910825][ T52] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 270.049276][ T6739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.095606][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.983147][ T8133] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1362'. [ 271.070323][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 271.070338][ T29] audit: type=1107 audit(1759986629.467:1401): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=':˚S&HHQ9Bc8obRQ,̩J9CVM\LC&Sf^Ҥ[5ˎifkewEtɕ:JcN6})[Wz_wp:'3' [ 271.216763][ T8139] loop5: detected capacity change from 0 to 256 [ 271.350721][ T8139] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 272.249853][ T8161] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1370'. [ 272.412315][ T8161] bridge1: left allmulticast mode [ 272.424906][ T29] audit: type=1326 audit(1759986630.817:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 272.449453][ T29] audit: type=1326 audit(1759986630.817:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 272.475469][ T8166] netlink: 'syz.0.1371': attribute type 3 has an invalid length. [ 272.488855][ T29] audit: type=1326 audit(1759986630.887:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 272.491982][ T8166] netlink: 'syz.0.1371': attribute type 3 has an invalid length. [ 272.512990][ T29] audit: type=1326 audit(1759986630.887:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 272.522163][ T3496] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.545295][ T29] audit: type=1326 audit(1759986630.887:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 272.546908][ T29] audit: type=1326 audit(1759986630.937:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 272.580306][ T3496] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.602428][ T29] audit: type=1326 audit(1759986630.937:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 272.613968][ T3496] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.635519][ T29] audit: type=1326 audit(1759986630.937:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 272.670456][ T29] audit: type=1326 audit(1759986631.037:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94d077eec9 code=0x7ffc0000 [ 272.695755][ T3496] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.895232][ T8207] syz.0.1386 (8207) used obsolete PPPIOCDETACH ioctl [ 274.669952][ T8213] netlink: 'syz.0.1388': attribute type 3 has an invalid length. [ 274.696705][ T8213] netlink: 'syz.0.1388': attribute type 3 has an invalid length. [ 274.725988][ T8215] loop6: detected capacity change from 0 to 512 [ 275.465595][ T8215] EXT4-fs: Ignoring removed oldalloc option [ 275.599185][ T8215] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.1389: dx entry: limit 1024 != root limit 124 [ 275.611447][ T8215] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1389: Corrupt directory, running e2fsck is recommended [ 275.777348][ T8215] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 275.799463][ T8227] loop5: detected capacity change from 0 to 1024 [ 275.808541][ T8227] EXT4-fs: Ignoring removed nobh option [ 275.816350][ T8215] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.1389: corrupted in-inode xattr: invalid ea_ino [ 275.846873][ T8215] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1389: couldn't read orphan inode 15 (err -117) [ 275.938265][ T8227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.967076][ T8215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.021941][ T6739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.036250][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.055557][ T8234] syzkaller0: entered promiscuous mode [ 276.061284][ T8234] syzkaller0: entered allmulticast mode [ 276.094336][ T8235] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1393'. [ 276.108121][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 276.108136][ T29] audit: type=1400 audit(1759986634.507:1424): avc: denied { ioctl } for pid=8228 comm="syz.1.1393" path="socket:[18104]" dev="sockfs" ino=18104 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.745735][ T29] audit: type=1107 audit(1759986635.127:1425): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=':˚S&HHQ9Bc8obRQ,̩J9CVM\LC&Sf^Ҥ[5ˎifkewEtɕ:JcN6})[Wz_wp:'3' [ 276.831202][ T8241] can: request_module (can-proto-0) failed. [ 277.090711][ T29] audit: type=1400 audit(1759986635.487:1426): avc: denied { create } for pid=8257 comm="syz.0.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.370150][ T8261] netlink: 'syz.2.1403': attribute type 3 has an invalid length. [ 277.414535][ T29] audit: type=1400 audit(1759986635.737:1427): avc: denied { write } for pid=8255 comm="syz.1.1401" path="socket:[18124]" dev="sockfs" ino=18124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 277.443541][ T8261] netlink: 'syz.2.1403': attribute type 3 has an invalid length. [ 278.327631][ T8286] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1411'. [ 278.615156][ T29] audit: type=1107 audit(1759986637.007:1428): pid=8293 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=':˚S&HHQ9Bc8obRQ,̩J9CVM\LC&Sf^Ҥ[5ˎifkewEtɕ:JcN6})[Wz_wp:'3' [ 279.012873][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 279.055129][ T29] audit: type=1400 audit(1759986637.447:1429): avc: denied { block_suspend } for pid=8307 comm="syz.0.1420" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.372537][ T29] audit: type=1107 audit(1759986637.767:1430): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=':˚S&HHQ9Bc8obRQ,̩J9CVM\LC&Sf^Ҥ[5ˎifkewEtɕ:JcN6})[Wz_wp:'3' [ 279.593945][ T8328] loop5: detected capacity change from 0 to 1024 [ 279.609814][ T8328] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 279.655627][ T8328] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1425: Invalid block bitmap block 0 in block_group 0 [ 279.672357][ T8328] Quota error (device loop5): write_blk: dquota write failed [ 279.679859][ T8328] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 279.690494][ T8328] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1425: Failed to acquire dquot type 0 [ 279.751202][ T8328] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.1425: Freeing blocks not in datazone - block = 0, count = 4096 [ 279.772704][ T8328] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1425: Invalid inode bitmap blk 0 in block_group 0 [ 279.869379][ T36] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 279.878736][ T36] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 279.909113][ T8328] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 279.919211][ T8328] EXT4-fs (loop5): 1 orphan inode deleted [ 279.926525][ T8328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.908897][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'. [ 281.141390][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'. [ 282.189679][ T8381] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1446'. [ 283.428956][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 283.428974][ T29] audit: type=1326 audit(1759986641.827:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 284.119083][ T29] audit: type=1326 audit(1759986641.857:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 284.142939][ T29] audit: type=1326 audit(1759986641.877:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 284.166840][ T29] audit: type=1326 audit(1759986641.877:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 284.190804][ T29] audit: type=1326 audit(1759986641.877:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 284.215065][ T29] audit: type=1326 audit(1759986641.877:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 284.239192][ T29] audit: type=1326 audit(1759986641.877:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 284.263340][ T29] audit: type=1326 audit(1759986641.877:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 284.287403][ T29] audit: type=1326 audit(1759986641.877:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 284.311085][ T29] audit: type=1326 audit(1759986641.877:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0748eec9 code=0x7ffc0000 [ 284.562422][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'. [ 285.882772][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.889818][ T8464] loop5: detected capacity change from 0 to 512 [ 286.904952][ T8464] EXT4-fs: Ignoring removed oldalloc option [ 286.904979][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1473'. [ 286.940775][ T8464] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1472: dx entry: limit 1024 != root limit 124 [ 286.952891][ T8464] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1472: Corrupt directory, running e2fsck is recommended [ 286.968173][ T8464] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 286.990752][ T8464] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1472: corrupted in-inode xattr: invalid ea_ino [ 287.017322][ T8464] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1472: couldn't read orphan inode 15 (err -117) [ 287.044195][ T8464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.130016][ T4717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.176842][ T8476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.197951][ T8476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.137840][ T8494] futex_wake_op: syz.1.1482 tries to shift op by -1; fix this program [ 288.190884][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 288.694017][ T8509] veth2: entered promiscuous mode [ 288.699153][ T8509] veth2: entered allmulticast mode [ 288.879161][ T8512] can: request_module (can-proto-0) failed. [ 289.248687][ T8524] usb usb9: usbfs: process 8524 (syz.6.1491) did not claim interface 33 before use [ 289.336398][ T8527] loop6: detected capacity change from 0 to 128 [ 289.349839][ T3693] ================================================================== [ 289.357975][ T3693] BUG: KCSAN: data-race in _copy_to_iter / fat12_ent_put [ 289.365131][ T3693] [ 289.367486][ T3693] write to 0xffff8881290d4815 of 1 bytes by task 8527 on cpu 1: [ 289.375417][ T3693] fat12_ent_put+0x74/0x170 [ 289.379960][ T3693] fat_alloc_clusters+0x4d1/0xa80 [ 289.385277][ T3693] fat_get_block+0x258/0x5e0 [ 289.389890][ T3693] __block_write_begin_int+0x400/0xf90 [ 289.395571][ T3693] cont_write_begin+0x5fc/0x970 [ 289.400519][ T3693] fat_write_begin+0x4f/0xe0 [ 289.405141][ T3693] cont_write_begin+0x1b0/0x970 [ 289.410123][ T3693] fat_write_begin+0x4f/0xe0 [ 289.414838][ T3693] generic_cont_expand_simple+0xad/0x150 [ 289.420517][ T3693] fat_cont_expand+0x3e/0x170 [ 289.425231][ T3693] fat_fallocate+0x177/0x1c0 [ 289.429845][ T3693] vfs_fallocate+0x3b6/0x400 [ 289.434556][ T3693] __x64_sys_fallocate+0x7a/0xd0 [ 289.439692][ T3693] x64_sys_call+0x2518/0x3000 [ 289.444570][ T3693] do_syscall_64+0xd2/0x200 [ 289.449097][ T3693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.455020][ T3693] [ 289.457449][ T3693] read to 0xffff8881290d4800 of 512 bytes by task 3693 on cpu 0: [ 289.465383][ T3693] _copy_to_iter+0x130/0xe70 [ 289.470097][ T3693] copy_page_to_iter+0x18f/0x2d0 [ 289.475059][ T3693] filemap_read+0x407/0xa00 [ 289.479590][ T3693] blkdev_read_iter+0x22d/0x2e0 [ 289.484553][ T3693] vfs_read+0x649/0x770 [ 289.488817][ T3693] ksys_read+0xda/0x1a0 [ 289.493025][ T3693] __x64_sys_read+0x40/0x50 [ 289.497583][ T3693] x64_sys_call+0x27c0/0x3000 [ 289.502371][ T3693] do_syscall_64+0xd2/0x200 [ 289.507087][ T3693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.513279][ T3693] [ 289.515636][ T3693] Reported by Kernel Concurrency Sanitizer on: [ 289.521895][ T3693] CPU: 0 UID: 0 PID: 3693 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 289.531325][ T3693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.541504][ T3693] ==================================================================