last executing test programs: 2m21.855418877s ago: executing program 4 (id=214): unshare(0x400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) poll(&(0x7f00000000c0)=[{r0, 0x2006}], 0x1, 0x7ff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "491e8f6fda908499", "d656798feb353f99cb53000fac69957c56001000000000000020000000001200", "94444681", '\x00\t\x00\x00\x00YZ;'}, 0x38) shutdown(r0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m21.775266602s ago: executing program 4 (id=219): capset(0x0, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xfffffffe, 0x6}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r2, 0x25, 0x8, @val=@iter={0x0}}, 0x20) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 2m21.774772972s ago: executing program 4 (id=220): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000f0ffffffffff0300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 2m21.756057913s ago: executing program 4 (id=222): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3818744, &(0x7f0000000000)={[{@noauto_da_alloc}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@sysvgroups}, {@acl}, {@noauto_da_alloc}, {@usrquota}]}, 0x1, 0x47f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_open_procfs(r2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0xd270, 0x0, 0x1, 0xd05, 0xd4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0xc0, 0x0, 0x0, 0xc3, 0x3}) 2m21.426786962s ago: executing program 4 (id=224): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) writev(r0, &(0x7f00000024c0)=[{&(0x7f00000002c0)="e34dd7", 0x3}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x10000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000002c0)={[{@abort}, {@noblock_validity}, {@grpquota}, {@errors_remount}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") sendfile(r0, r1, 0x0, 0x7ffff004) 2m20.691359965s ago: executing program 4 (id=230): syz_read_part_table(0x5b9, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) tee(r0, r0, 0x10, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000005c0)=0x3) sendfile(r1, r1, 0x0, 0x800000009) 2m20.61007026s ago: executing program 32 (id=230): syz_read_part_table(0x5b9, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) tee(r0, r0, 0x10, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000005c0)=0x3) sendfile(r1, r1, 0x0, 0x800000009) 35.210999445s ago: executing program 0 (id=2424): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008050) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = open(&(0x7f0000000000)='./file1\x00', 0x4a142, 0x36d) sendfile(r1, r1, 0x0, 0x1000000201005) ftruncate(r1, 0x6) socket$nl_route(0x10, 0x3, 0x0) 34.478556337s ago: executing program 0 (id=2430): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) write$binfmt_script(r2, &(0x7f0000000600)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x25a5, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 34.031132212s ago: executing program 0 (id=2436): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="057d1795987146df000000000000007111"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8202) 33.864506192s ago: executing program 0 (id=2440): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x81, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ftruncate(r0, 0x7fff) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x3bb5]}, 0x8) 33.588356558s ago: executing program 0 (id=2452): ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001680), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000016c0)={0xe, {0x2, 0x5, 0xf1, 0x1000, "afff36360de94b31f54f88540048ca2614a2483d904f84fcaf119f0be0dd0ef303b0a53219425124034d7eaabac0781f83982bafe9fc64f504b5537b3b26911037577c6818ff1955cbf5f476ef1fd37ada64bde583008ab38b18c47ff11b5db6e1cb2b737e719f3014b7d6d54b4dced15504157978d6cd5a0aa1b911bb380a497a8dc90a1be5cd547e170a31c9e4ddf3859b1f33a381a9aaa1f566d862ff200db58ca74f8999975e21ae068ce4172ac42d017c77fc2f725139fb080535c5a2b615931e59954326adc850be778593aada9a7c3f4302a0ca2d1adfd578f48634ad2cff840e0694b726b71b4813abcfdc8a274e84bec1b46c7e1e0d2213a322c2c191cb33dc2d6764ff7863d309e031c4c627685c15c8ccf762d78db76245753dbc8ab4b75233e60ceaaa3f5c5c9d2203cb721e28003da2239adcff2aa2b57148382c99c6201e6ee616444261ddd2b1cc7c0110871cf1eee5c039be740ba26b84397ef44f830429dcaa1d050be2b1d8a481a3528f7d7f97da13db84e6702fe56426170039c6b19c47f892d229d7ab371e7c268bf3c8825a01d815e77eb96d8fae94e0ea6c19fb4aa02213ed64531bea4a3eaafb995a1360589963a2515f6e263651dce39889266361fe6dcbf206d27f1252b678f2e2c8905362d16ca42dd4df95aa782c5236b9ae10c450153eea494768c5cb27ccc0af4a82d5aef9bb2c0e3f322a4091588f457dafbce21fd81f88784aa467c0f490f8fcbbd2af31904f40b6f05496207505cf14cfed961d3c894434e080bad0fec6bf5269e38e6752703a208fe7195409f1e78228833de749630964c06cf3b8fc7609d701c7c31fe0953b4fa87c7c374695053d20db10c21374546c9298dcc631dfd289258cbbbc10ecbfbfcba7324985a9bfd1bbde615a2ea031a704e8be42af22c215914baee64e64fe3c4856d3a2f30cc89cafcdcd0a5e6ed9400a89f89ed0ef1986fe2b3bd76d566e79a02c09d66f18cbb2906c5139789dac3cf78b56f25d1160f4bd6ca026ddae3fddc98ddf7f830dc896e5d27adb9e6e12b2d21b459760f6b86259b1b9b6eda1e96a551e527277565a46a8a383b486a04439035f2bbc0955bfb7cee9b7eb240ee42b2e603886198ad41faa83236da915e3eb918ad1d66378a59a42eacd6c96310f79e20c803fdf055b777921fed67afd3f17abb6369e13cba6540047905ffaec86cb255237279529de6dd67a2a9729c1c6ff15cfe4d84c0e61fca0f868c72558e992291d4d931965c6df74d0cb1818ad0fc38b3dc65a49c34be36b97dd8bfce41179e031818563cd90a92bd68d0fc32115cab94a665bbfe5faad5de98b411600da5e7a897d4821d419f6311b3147b91e2e13fa447f9953eeafa6c56cf137aaa78311630f8b8fb80eada8ec503fc9fe88e65d59ef18d2480667c96efbb9f8950bfdc047b306b2b05c4158856c9f1e09088b34a8001aeccc8ab6b2df0c46d514f4c67a8be043c44630b820b53bb5aaf1f68ef77de5d92a69e21b28817befc79b7df4789509b7240d1d27b55e92ff0b57df78783fad344dff8e50dd4c281bba03893c7141ec488f2e58485510e366697e8265d16f8d132bb88d26993f86abbae76978b654acf05add1c2331ea3715a4506a8dca13e3ed4c59d8b830c202371d8853ce9eaba492d04c31467466a87f26ef0548d2e5d4ea7efc6ca49271eff56ea4ff70be473581adf1c4221b886dab9fb66a6d6cf6564faf28f45e3f82edd8413379ddf9ba2d8d044213bf6a8426c61fd7db4f87f921513ab27b233ef39a378d2dfcc42eb32d920bde10a317963c0517666f4b084a4051d6a2cae23f84c0430c7478822b60b2d68904983d471e3046bf72c131be05e1d3a0d5a724768d5662925830d457845c655d38317800fafb578d35ae30c794dba0171ac57f80671848edad4049ce97911faba359d4f981d0dca15a47c240d16da852e4ed0f163ec8ce8a7763ae9431a8132cb68cacd01c63f455d0ca540940258254d283b6651cb7a3abd660e36fd79422cd51b44f3151c1d9b11ac76a7955e243a59bf28546bbf707791375d16e251cfb7fa8dada7b0c9b861e2f6aff858d2c0ecebc53c1c314f134d1f7a0fd978943e96914eed3d20f4d05f1ef423d68378187d7c88df62b0262b2c204e9542fb87aa7b50742244f1581a9fbae43c77e781a8851f1d9bd0000227d1c1840cdc591c78873aabbc0135bb507fd2ba28b7c70e04b2a78b43e03b31067f067f6d294ce91708bae834f10c6cd20611a3e8d2e479d2ead63a0fae6fcb4f4ed99336e777a9a8e51735b1e04ec073652f53875f2ceb17eec365a0cb405c8a5f19621c14d211432ef829c0ec552f472bf81065b2b790bd27c0ed1b52e4c0c2a8fd3c443ea12f8499071f93914f81bc3fa8b4fd9231c0be1225ba2929c596c7bdc3b5739ac659d7171fde4489629226086fc784641fb3848b30dce741a01b8566e88a72054317e86eceae084abfa2a95853b846a117a77904341cd1e96d4466b8e45bde0e90dc952d3090e015dd38188a1c84dbb3a03a3f9a322acd5963e0aef4efa1e010fb3fac8791614f4466eacc1348786adc41be177b06708fa430134f63a77089c46a9fde48d3d381fc32a792f3eccb67dcbb620cb2206d2c243abfd5a4d5ede6d415bd9a90cbe06b7912202cc5b5de43bb9b7cc70301b569ba2c53014abca7764d6a4a53b838473a12be44b8818b2c8e0c72ef4b40797a6129c1cb586cbf0565de087de680aad86d2b02aa39a5f3d038cd7c6b30f6456f179a02d4108703bd41d70b53cb7857c2f9b146c360ed623fd970a1a0ef0555f0dfb875ef8add8eaaa0c78e90e64fe40ba9f907df60d2638ddb0617ab4d2586fa146a0639dd66ce61ff341a59d44e1f891fe7057adf88556af3735cb506fedc68e55bd54dbfb9c1799bbe157ff22a17efd27e231c5291eb8faa48f3bc2c884ccd7d70937a37db9d4841d3708054a8b9e3bdb0a910725e67db571d4c831d5ad1b33632225dc3c342820e636465ed5d3652b21d7c455f80991255ce65be42b9ae57c07b7b4a01ee59c2aaacd813f3f1becdc6af758cc2e3f4e56f4d4b6efcfb337c376543b4c3cef0e855dae589e7f638be7b7d9693c16a00a7e84a57db68cccaaa86dce641f913393ac7a0671540483c075f666a86393fea9b0c7ec223328ede088e4a1dd1227a4f8e54bb91e4cfe72f16dd24e7bd1b72fde45d58684bb8b73d0f5e8eb9da885e0eb7bc8c259c4454452a9b63ebc279861bbbf42104d87c0a0848b2e58dcd38933dd905c9dd33cc26cd20f257fe0b561f7145edab6199fb23070f217299a8834b2c5d94ed60ec1afb3655183d233cd28b83e3e9598af98498c58bdd1af50fc956aa45d9e7f9e1a04debc1d9136a4ae7e0581e35be9d93f01f87f3ac160e2b3a3f328933510e0235d41aedac3756476d4a56b4aefc6aef8f0a724e71f6b2b4f07a548eb9d9ed29b7d0ceb5786a0ce6a8b08a58c5113ce24c186354d2a62d7c38a747f78bfe07e26c24bd3613a90d1307bee18cf6531d3e28520d95b18bb96bc0f5e760d876b915db6ac6181b3c8ed652bda6cd9ac79add35496180409ef03029da7853c265d65edc638faa2a5138f3707c3e477538e7669289c35cb49e37fc597d336d82ff74c040d3cd01f9f9b8febaaad31759a76acc491217ace9783778d8e4ba121d6c4c57e9ef3ea0f83951fa8af6c8f763bc98be01a1f54abf2e67009390ed832803b35f37a411e572d295d4982ec1adb9369d00d08cb6d11dbe6119f4b959e3cc4b2e9fce180f5a71df3260bd25beecd2370d3a9a82a1986e3fa18e12fa92a8981f8ccf9848fe2fff1b0725135845ab9bf66cfa74998404e79ac7d0b9fb3298bc29772a4f826b15724eeb7d0cd1b9adc5e1ac5aac1a8c7da19ef31ef151719c39ce67112fe72fc43527088c5fc5db56be13d5b6110ee70d7d6ee1429543960c98805182d36df7dd0dd722b19a2a7250ae1a413f1b970e167710a33206b9b705e7ec5e37aece8112c32f24713c44084fdc5512a75f2edc5b4c07caeb78fa2927c2eb9c3ab36838e4d1c13542fbd6d9177a75b8050f16ee9d3fa203da5899be85738958dd0246cc80beaaf0d086af5ce1a42cec2f593fecc4cb00afde77d5f7d767967a6927adada9291bb9b73975ff379f3de529b2c51730dd1b77c5abe97353da33232825c0e7c9c5816c8419a6ee7bf2131901585dd4cb4af42ac08bcd9e2f9385d80d48605b5d1851e5bfb10209785759cd7749c776173b806a25ac4f6afcfec3f3e23eb6f838a507d650695816109894bdf62b923591baf7ebf906a44485309b3d9d86efc45f678a559a032fac5b1dd572ad9b46c2da832b536b58e2120e5eb60cad63d8cd21cf8423bae0f836ad59051a7699bc54429e8c9ae56713b4d0b6957afe122536f787caee2d992fc7c3ff6dc8c17414f88983c1f15f1d643a9b7d40c484689eb118fe78a5845696d133be6affeb56c5a3812ef6974a5dba1cdfd128fd3cf32631e6ce840f6a795aed417ed262b38b3f4a9721509492abe3980ca3db85cf18f1660f6a2f1602bc74d0d70062e124ca2b1b96e83c820025072a068fa57240b57a3347ade0d8c2ff5d6b57663086b899ff31790b797bea691af5c5c375e98b8f4921f7e66df1274b6b2c3d340c0e8e74d04f66685695f95afbf0ae301554463f19c234bcc21cff415c5fe08b9d95b2271ae4bbfa3f5b0f8535c86884950fb22ff65c45197ea8504d028fd7e00b00a8c7e0467ec0b293150c5284607bc0264a6db97099799708eabb426a62f49c4b8bfcf922b456791d83612f2c604440e09c3f7bf1f660b6739b799fc4d8b5ce8fe01b76a5382991aaac3e0d9cc9200ca29ea9e7e866a04367d39e65f9e924f3c04c5bdf718dfe996f7854a272b02d1b0d162bc4241c5856a38069750b02726bd084d5f78ea5b17e097eac6afa5460693ff37b96abda41d90d08bf71e8ce336bd4cb80a24f0e585dbf5098e724d2fde099be6647a86a84c530a55068528503a8afac50a679ff036e239d00cecef6605724345f5c9a14f7d4daaf903977f2b14926bc9403e50d38d782a8bcef7be36653aade1272780d0ddfff1c119eae1fc2521c4989961d97c58394549fa80f8eabe3ed3f6fc028fb86a7030c6d22731d0529b641dc934b3b8155801f9effd7ab0e2229d26bc1489a3ebc1310a31d8a4a45b6fe8bd302467521b411cc7d9b9e139eb26be3b8e8a864bc4d4c8b9474baf5de3a833c4b0e2a76e33b38dee74346a07eaff1d26192c70948dcb6f8982c66721df5ec813b144db7ee59a5c0f49410885346e0491387107d1e56f250057daeb8bf504486c92f17cac0e9236ac2cc51c9e73098d7f1c2890d9257b828ab763893b5509414fda0dec9cb2957dc98e86506608967b89dc6a5e42e2960e011e1a5df59518bfe5f7af3824189e50fb6ba4ff7a82399dc26d75b82ee019a71f61846d213fd1c34dd53eb837679ba682707646195bbedab82ab9df405c6aaefcfbbd5338aaa72621faf2691421c906df86dc0b322697fe56baed807fdae44d16beed05338a3d440ed507d32c999cba8466b761edf45791e823f476fe3da045edf0d638e1eaf5b33d40f6779275f6258de28d526c60484f0f5cba7940dfc25e41151b63b3cca2bfecb84472d8266501827c49caac2fe821bfd2d1aae6e51e52f60b97cc646d3270bbfc8cf3a1eb903206d9246cec561fefe7ea195c80e28bcb1c0bcb576cdb77cf4b7734077a6f1d01ccb2e2665bec276cfd"}}, 0x100c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000002700)={@private=0xa010101, @loopback, 0xffffffffffffffff, "e8294719f8873537cff2a7e75e5a3e09d5233691afb34b2bdab727c75be7048a", 0x7fff, 0x7, 0x8, 0xc}, 0x3c) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000002a40)) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000002a80)) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x10, 0x3f5, 0x300, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000041}, 0x4010) 33.420749027s ago: executing program 0 (id=2457): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = syz_open_dev$sg(&(0x7f0000001ac0), 0x0, 0xa2140) ioctl$FIBMAP(r3, 0x2276, &(0x7f0000000000)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f00000002c0)={{0xc0, 0x81}, {0x0, 0x9}, 0xf, 0x6, 0x7}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r7 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000006680), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, 0x0, 0x48000) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r7, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) 33.385944889s ago: executing program 33 (id=2457): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = syz_open_dev$sg(&(0x7f0000001ac0), 0x0, 0xa2140) ioctl$FIBMAP(r3, 0x2276, &(0x7f0000000000)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f00000002c0)={{0xc0, 0x81}, {0x0, 0x9}, 0xf, 0x6, 0x7}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r7 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000006680), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, 0x0, 0x48000) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r7, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) 6.217439936s ago: executing program 6 (id=2829): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x8b25714e) accept4(r0, 0x0, 0x0, 0x0) 4.9152544s ago: executing program 3 (id=2837): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 4.543433831s ago: executing program 6 (id=2839): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x0, 0x400250}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) listen(r0, 0x8b25714e) accept4(r0, 0x0, 0x0, 0x0) 4.034010261s ago: executing program 5 (id=2842): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mknod$loop(0x0, 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r2 = dup2(r1, r1) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x5}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mincore(&(0x7f0000262000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2) sendto$inet(r0, &(0x7f00000001c0)="ee", 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x800) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="f400", 0x2}], 0x1}, 0x810) shutdown(r0, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20044, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x66a0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc0}, 0x0, 0x4, 0xffffffffffffffff, 0x1) 3.946300936s ago: executing program 2 (id=2846): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x4}}, 0x0, 0x0, 0x40, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 3.838909742s ago: executing program 3 (id=2847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x8000400) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1) eventfd2(0x0, 0x0) getcwd(0x0, 0x0) 3.556318428s ago: executing program 2 (id=2850): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x4842, 0x189) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 3.446934174s ago: executing program 6 (id=2851): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 2.749823083s ago: executing program 3 (id=2852): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$eJzs3cFq1EAcBvB/220be7Fn8RDw4qmobxBkBTEgrOSgJwPVSytCeome9jF8Bh/Jx+ipt4hN6NZUPUjadJvfD5Z87MfAzGVnDzO77x9+Ojr8fPKx+fEtkiSNWcQyziL2YzO2orXRPTfP805ctgwAYN0sFmU29hwY0MbVt6oqK7cjYvdKU3y/mUkBAAAAAAAAAAAwNOf/AWB6nP+/+6oqK/e672+/c/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGM9Z09xv/vEae34AwPDs/wAwPfZ/AJge+z8ATM+bt+9eZXk+X6RpEnG6rIu6aJ9t/+JlPn+SnttfjTqt62K7y/n8adun/X6vG//sj/1OPH7U9r+656/zXr8bh9e9eAAAAAAAAAAAAAAAAAAAALglDtILvfv9W21/8Le+TZd+H6B3f38WD2Y3tgwAAAAAAAAAAAAAAAAAAABYaydfvh6Vx8cfKkG4CPfiP0YlcTsmLwwSxv5kAgAAAAAAAAAAAAAAAACA6Vld+h17JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwntX//19fGHuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDT8DAAA//8GmZGk") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") creat(&(0x7f0000000200)='./file1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) unshare(0x2c020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) 2.745045224s ago: executing program 1 (id=2853): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$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") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) 2.611361271s ago: executing program 5 (id=2854): finit_module(0xffffffffffffffff, 0x0, 0x1) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1c9) lseek(r0, 0x7f, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x200) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 2.557750085s ago: executing program 6 (id=2855): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$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") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") creat(&(0x7f0000000200)='./file1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) unshare(0x2c020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.485966789s ago: executing program 5 (id=2856): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x4}}, 0x0, 0x0, 0x40, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2.47862002s ago: executing program 2 (id=2857): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x0, 0x400250}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 2.426385442s ago: executing program 1 (id=2858): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$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") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7WimlTpS56HmqVGTmdnMaoZFJUQlNiCVkLghxImj2ClN1EUCuy5YIBBIiAV7/gI2dEWFhFjDHrFARVCCBEhIRvfabhM3DhakMc39/aTbnPuwv3NifafnHt+bG0BmnU3+yUUMRsRHEXG0vrr9gLP1H5t3b0wnSy5qtctf5tLjkvXmoc3XHYmI9Yjoi4gn/hfxbO7BuJXVtfmpUqm43Fgfri4sDVdW1y7MLUzNFmeLi6MTFycnJ0bGxyb3rK03X37+5qV3H+t959uX7tx+5f33kmoNNvZtbcdeqje9J45v2XYoIv7zMIJ1QaHRnv5uV4SfJfn8fhcR59L8PxqF9NMEsqBWq9V+qB1ut3u9BhxY+XQMnMsPRUS9nM8PDdXH8L+PgXypXKn+42p5ZXGmPlY+Fj35q3Ol4kjjXOFY9OSS9dG0fH99rGV9PCIdA79a6E/Xh6bLpZn97eqAFkda8v+bQj3/gYxwyg/ZJf8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D9lV6HYFgK7x/z9k0uOXLiVLrXn/+8y11ZX58rULM8XK/NDCyvTQdHl5aWi2XJ5N79lZ+Kn3K5XLS6P/jJXrw9VipTpcWV27slBeWaxeSe/rv1Ls2ZdWAZ04fubWJ7mIWP9Xf7okehv75CocbLVaLrp9DzLQHab+ILtM/UF2OccHWv9Eb+u4oK/dC5fuzxcCj5Z8tysAdM35U77/g6wy/w/ZZf4fsssYH9jhEX3b7Db/DzyazP9Ddg22ef7Xb7Y8u2skIn4bER8Xeg43n/UFHAT5z3ON8f/5o38ZbN3bm/su/YqgNyJeePPy69enqtXl0WT7V/e2V99obB/b8sK2JwxAtzTztJnHAEB2bd69Md1c9jPuF/+tX4TwYPxDjbnJvvQ7yoHN3LZrFXJ7dO3C+kZEnNwpfq7xvPP6iczAZuGB+CcaP3P1t0jreyh9bvr+xD+1Jf6ft8Q//Yt/K5ANt5L+Z2Sn/MunOR338m97/zO4R9dOtO//8vf6v0Kb/u9MhzGee+vFz9rG34g4vWP8Zry+NFZr/KRu5zuMf+fpJ//Qbl/t7fr77BS/KSkNVxeWhiuraxfmFjZmi7PFxdGJi5OTEyPjY5PDV+dKxT8daR//3yc/vL1b+wca8Xui8/Yn2/7WYfu//+MHT53dJf5fz+38+Z/YJX5/RPy9w/hfj336TLt9SfyZNr///C7xk23jHcavvPb/wx0eCgDsg8rq2vxUqVRcVlBQ6Eph49dRjZZCt3sm4GGrrCan5knSd7smAAAAAAAAAAAAQKf243LibrcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAg+DEAAP//KbnRCQ==") creat(&(0x7f0000000200)='./file1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) unshare(0x2c020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 2.338273217s ago: executing program 5 (id=2859): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$eJzs3cFq1EAcBvB/220be7Fn8RDw4qmobxBkBTEgrOSgJwPVSytCeome9jF8Bh/Jx+ipt4hN6NZUPUjadJvfD5Z87MfAzGVnDzO77x9+Ojr8fPKx+fEtkiSNWcQyziL2YzO2orXRPTfP805ctgwAYN0sFmU29hwY0MbVt6oqK7cjYvdKU3y/mUkBAAAAAAAAAAAwNOf/AWB6nP+/+6oqK/e672+/c/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGM9Z09xv/vEae34AwPDs/wAwPfZ/AJge+z8ATM+bt+9eZXk+X6RpEnG6rIu6aJ9t/+JlPn+SnttfjTqt62K7y/n8adun/X6vG//sj/1OPH7U9r+656/zXr8bh9e9eAAAAAAAAAAAAAAAAAAAALglDtILvfv9W21/8Le+TZd+H6B3f38WD2Y3tgwAAAAAAAAAAAAAAAAAAABYaydfvh6Vx8cfKkG4CPfiP0YlcTsmLwwSxv5kAgAAAAAAAAAAAAAAAACA6Vld+h17JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwntX//19fGHuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDT8DAAA//8GmZGk") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") creat(&(0x7f0000000200)='./file1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) unshare(0x2c020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) 2.021832125s ago: executing program 1 (id=2860): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$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") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") creat(&(0x7f0000000200)='./file1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) unshare(0x2c020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) 2.001769677s ago: executing program 3 (id=2861): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$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") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7WimlTpS56HmqVGTmdnMaoZFJUQlNiCVkLghxImj2ClN1EUCuy5YIBBIiAV7/gI2dEWFhFjDHrFARVCCBEhIRvfabhM3DhakMc39/aTbnPuwv3NifafnHt+bG0BmnU3+yUUMRsRHEXG0vrr9gLP1H5t3b0wnSy5qtctf5tLjkvXmoc3XHYmI9Yjoi4gn/hfxbO7BuJXVtfmpUqm43Fgfri4sDVdW1y7MLUzNFmeLi6MTFycnJ0bGxyb3rK03X37+5qV3H+t959uX7tx+5f33kmoNNvZtbcdeqje9J45v2XYoIv7zMIJ1QaHRnv5uV4SfJfn8fhcR59L8PxqF9NMEsqBWq9V+qB1ut3u9BhxY+XQMnMsPRUS9nM8PDdXH8L+PgXypXKn+42p5ZXGmPlY+Fj35q3Ol4kjjXOFY9OSS9dG0fH99rGV9PCIdA79a6E/Xh6bLpZn97eqAFkda8v+bQj3/gYxwyg/ZJf8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D9lV6HYFgK7x/z9k0uOXLiVLrXn/+8y11ZX58rULM8XK/NDCyvTQdHl5aWi2XJ5N79lZ+Kn3K5XLS6P/jJXrw9VipTpcWV27slBeWaxeSe/rv1Ls2ZdWAZ04fubWJ7mIWP9Xf7okehv75CocbLVaLrp9DzLQHab+ILtM/UF2OccHWv9Eb+u4oK/dC5fuzxcCj5Z8tysAdM35U77/g6wy/w/ZZf4fsssYH9jhEX3b7Db/DzyazP9Ddg22ef7Xb7Y8u2skIn4bER8Xeg43n/UFHAT5z3ON8f/5o38ZbN3bm/su/YqgNyJeePPy69enqtXl0WT7V/e2V99obB/b8sK2JwxAtzTztJnHAEB2bd69Md1c9jPuF/+tX4TwYPxDjbnJvvQ7yoHN3LZrFXJ7dO3C+kZEnNwpfq7xvPP6iczAZuGB+CcaP3P1t0jreyh9bvr+xD+1Jf6ft8Q//Yt/K5ANt5L+Z2Sn/MunOR338m97/zO4R9dOtO//8vf6v0Kb/u9MhzGee+vFz9rG34g4vWP8Zry+NFZr/KRu5zuMf+fpJ//Qbl/t7fr77BS/KSkNVxeWhiuraxfmFjZmi7PFxdGJi5OTEyPjY5PDV+dKxT8daR//3yc/vL1b+wca8Xui8/Yn2/7WYfu//+MHT53dJf5fz+38+Z/YJX5/RPy9w/hfj336TLt9SfyZNr///C7xk23jHcavvPb/wx0eCgDsg8rq2vxUqVRcVlBQ6Eph49dRjZZCt3sm4GGrrCan5knSd7smAAAAAAAAAAAAQKf243LibrcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAg+DEAAP//KbnRCQ==") creat(&(0x7f0000000200)='./file1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) unshare(0x2c020400) 1.862440414s ago: executing program 5 (id=2862): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$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") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") creat(&(0x7f0000000200)='./file1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) unshare(0x2c020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) 1.701157944s ago: executing program 6 (id=2863): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 1.564400781s ago: executing program 2 (id=2864): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$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") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") creat(&(0x7f0000000200)='./file1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) unshare(0x2c020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.302657566s ago: executing program 3 (id=2865): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 702.412941ms ago: executing program 6 (id=2866): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x1, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad6e911b", 0x28}], 0x1}, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) semop(r4, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) 597.282496ms ago: executing program 5 (id=2867): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$eJzs3cFq1EAcBvB/220be7Fn8RDw4qmobxBkBTEgrOSgJwPVSytCeome9jF8Bh/Jx+ipt4hN6NZUPUjadJvfD5Z87MfAzGVnDzO77x9+Ojr8fPKx+fEtkiSNWcQyziL2YzO2orXRPTfP805ctgwAYN0sFmU29hwY0MbVt6oqK7cjYvdKU3y/mUkBAAAAAAAAAAAwNOf/AWB6nP+/+6oqK/e672+/c/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGM9Z09xv/vEae34AwPDs/wAwPfZ/AJge+z8ATM+bt+9eZXk+X6RpEnG6rIu6aJ9t/+JlPn+SnttfjTqt62K7y/n8adun/X6vG//sj/1OPH7U9r+656/zXr8bh9e9eAAAAAAAAAAAAAAAAAAAALglDtILvfv9W21/8Le+TZd+H6B3f38WD2Y3tgwAAAAAAAAAAAAAAAAAAABYaydfvh6Vx8cfKkG4CPfiP0YlcTsmLwwSxv5kAgAAAAAAAAAAAAAAAACA6Vld+h17JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwntX//19fGHuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDT8DAAA//8GmZGk") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") creat(&(0x7f0000000200)='./file1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) unshare(0x2c020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 547.976449ms ago: executing program 1 (id=2868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1) eventfd2(0x0, 0x0) getcwd(0x0, 0x0) 546.00993ms ago: executing program 2 (id=2869): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = syz_create_resource$binfmt(0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) capset(&(0x7f00000010c0)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0x7, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x50) 506.374052ms ago: executing program 2 (id=2870): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$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") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") creat(&(0x7f0000000200)='./file1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) unshare(0x2c020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 268.184085ms ago: executing program 1 (id=2871): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x1, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad6e911b", 0x28}], 0x1}, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) semop(r4, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semtimedop(r4, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) 267.399875ms ago: executing program 3 (id=2872): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$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") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") creat(&(0x7f0000000200)='./file1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) unshare(0x2c020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) 0s ago: executing program 1 (id=2873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x8000400) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1) eventfd2(0x0, 0x0) getcwd(0x0, 0x0) kernel console output (not intermixed with test programs): id=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 80.325995][ T28] audit: type=1326 audit(1770819011.448:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 80.497049][ T5691] set_capacity_and_notify: 1 callbacks suppressed [ 80.497068][ T5691] loop5: detected capacity change from 0 to 128 [ 80.519948][ T5683] loop3: detected capacity change from 0 to 1024 [ 80.548125][ T5683] EXT4-fs: inline encryption not supported [ 81.312430][ T5703] syzkaller0: entered promiscuous mode [ 81.317973][ T5703] syzkaller0: entered allmulticast mode [ 81.450530][ T5709] syzkaller0: entered promiscuous mode [ 81.463641][ T5709] syzkaller0: entered allmulticast mode [ 81.520183][ T5711] loop0: detected capacity change from 0 to 512 [ 81.527138][ T5711] EXT4-fs: Ignoring removed nobh option [ 81.540055][ T5711] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.562542][ T5711] EXT4-fs (loop0): 1 truncate cleaned up [ 81.568677][ T5711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.626928][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.650546][ T5714] syzkaller0: entered promiscuous mode [ 81.656599][ T5714] syzkaller0: entered allmulticast mode [ 81.676789][ T5716] syzkaller0: entered promiscuous mode [ 81.682310][ T5716] syzkaller0: entered allmulticast mode [ 82.047709][ T5732] syzkaller0: entered promiscuous mode [ 82.053271][ T5732] syzkaller0: entered allmulticast mode [ 82.486881][ T5750] loop3: detected capacity change from 0 to 1024 [ 82.581438][ T28] audit: type=1400 audit(1770819013.868:788): avc: denied { ioctl } for pid=5751 comm="syz.3.767" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.581819][ T5752] netlink: 'syz.3.767': attribute type 13 has an invalid length. [ 82.659883][ T5756] dns_resolver: Unsupported server list version (0) [ 82.667971][ T28] audit: type=1400 audit(1770819013.948:789): avc: denied { create } for pid=5755 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 82.687879][ T5756] loop3: detected capacity change from 0 to 1024 [ 82.703561][ T5754] syzkaller0: entered promiscuous mode [ 82.709289][ T5754] syzkaller0: entered allmulticast mode [ 82.719268][ T28] audit: type=1400 audit(1770819013.998:790): avc: denied { read } for pid=5755 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 82.758818][ T5759] loop3: detected capacity change from 0 to 1024 [ 82.768104][ T5759] EXT4-fs: Ignoring removed orlov option [ 82.775721][ T5759] netlink: 88 bytes leftover after parsing attributes in process `syz.3.770'. [ 82.790797][ T5759] loop3: detected capacity change from 0 to 1024 [ 82.803892][ T5759] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 82.814065][ T5759] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 82.825126][ T5759] EXT4-fs (loop3): invalid journal inode [ 82.831050][ T5759] EXT4-fs (loop3): can't get journal size [ 82.847015][ T5759] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 17104912: comm syz.3.770: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 82.864148][ T5759] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 82.864174][ T5759] EXT4-fs (loop3): Remounting filesystem read-only [ 82.880044][ T5759] EXT4-fs (loop3): failed to initialize system zone (-117) [ 82.887314][ T5759] EXT4-fs (loop3): mount failed [ 82.905957][ T5759] hugetlbfs: syz.3.770 (5759): Using mlock ulimits for SHM_HUGETLB is obsolete [ 82.935601][ T5764] loop3: detected capacity change from 0 to 1024 [ 83.208627][ T5671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.237328][ T28] audit: type=1400 audit(1770819014.518:791): avc: denied { watch_reads } for pid=5772 comm="syz.2.774" path="/142" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.413635][ T28] audit: type=1326 audit(1770819014.698:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 83.440151][ T28] audit: type=1326 audit(1770819014.698:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 83.919042][ T5797] loop3: detected capacity change from 0 to 1024 [ 84.099628][ T5801] tipc: Started in network mode [ 84.153925][ T5801] tipc: Node identity 3eb789dd891d, cluster identity 4711 [ 84.201100][ T5801] tipc: Enabled bearer , priority 0 [ 84.223744][ T5804] syzkaller0: entered promiscuous mode [ 84.240840][ T5804] syzkaller0: entered allmulticast mode [ 84.261780][ T5801] tipc: Resetting bearer [ 84.282908][ T5800] tipc: Resetting bearer [ 84.298529][ T5800] tipc: Disabling bearer [ 84.435922][ T5809] syzkaller0: entered promiscuous mode [ 84.442775][ T5809] syzkaller0: entered allmulticast mode [ 84.449810][ T5810] syzkaller0: entered promiscuous mode [ 84.455615][ T5810] syzkaller0: entered allmulticast mode [ 84.464139][ T5819] batadv_slave_1: entered promiscuous mode [ 84.608600][ T5826] syzkaller0: entered promiscuous mode [ 84.614175][ T5826] syzkaller0: entered allmulticast mode [ 84.626291][ T5831] loop2: detected capacity change from 0 to 1024 [ 84.700395][ T5837] syzkaller0: entered promiscuous mode [ 84.715762][ T5837] syzkaller0: entered allmulticast mode [ 85.181001][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 85.181056][ T28] audit: type=1400 audit(1770819016.368:802): avc: denied { write } for pid=5840 comm="syz.5.794" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 87.169036][ T5889] syzkaller0: entered promiscuous mode [ 87.239759][ T5889] syzkaller0: entered allmulticast mode [ 87.301259][ T5896] syzkaller0: entered promiscuous mode [ 87.324583][ T5896] syzkaller0: entered allmulticast mode [ 87.358381][ T5891] tipc: Started in network mode [ 87.379532][ T5891] tipc: Node identity 4e3608432809, cluster identity 4711 [ 87.400770][ T5891] tipc: Enabled bearer , priority 0 [ 87.436493][ T5890] tipc: Resetting bearer [ 87.517762][ T5890] tipc: Disabling bearer [ 87.590579][ T5898] syzkaller0: entered promiscuous mode [ 87.635075][ T5898] syzkaller0: entered allmulticast mode [ 87.758041][ T5911] syzkaller0: entered promiscuous mode [ 87.845963][ T5911] syzkaller0: entered allmulticast mode [ 88.289342][ T5927] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 88.306924][ T28] audit: type=1326 audit(1770819019.588:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.0.821" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b64c2bf79 code=0x0 [ 88.421950][ T28] audit: type=1400 audit(1770819019.688:804): avc: denied { connect } for pid=5930 comm="syz.0.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.461580][ T28] audit: type=1400 audit(1770819019.688:805): avc: denied { getopt } for pid=5930 comm="syz.0.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.571164][ T28] audit: type=1400 audit(1770819019.848:806): avc: denied { read } for pid=5964 comm="syz.3.828" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.632254][ T5965] xt_hashlimit: size too large, truncated to 1048576 [ 88.672701][ T28] audit: type=1400 audit(1770819019.848:807): avc: denied { open } for pid=5964 comm="syz.3.828" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.958554][ T5976] loop5: detected capacity change from 0 to 512 [ 88.973970][ T5976] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.830: bg 0: block 393: padding at end of block bitmap is not set [ 89.030836][ T5976] loop5: lost filesystem error report for type 5 error -117 [ 89.030987][ T5976] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 89.088312][ T5976] loop5: lost filesystem error report for type 5 error -117 [ 89.088832][ T5976] EXT4-fs (loop5): 2 truncates cleaned up [ 89.105570][ T5976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.151849][ T5976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5976 comm=syz.5.830 [ 89.175308][ T5984] tipc: Started in network mode [ 89.180273][ T5984] tipc: Node identity e624864c56dc, cluster identity 4711 [ 89.189659][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.830'. [ 89.220836][ T5984] tipc: Enabled bearer , priority 0 [ 89.235095][ T5976] hsr_slave_0: left promiscuous mode [ 89.257146][ T5976] hsr_slave_1: left promiscuous mode [ 89.293120][ T5985] syzkaller0: entered promiscuous mode [ 89.298799][ T5985] syzkaller0: entered allmulticast mode [ 89.327562][ T5984] tipc: Resetting bearer [ 89.353019][ T5983] tipc: Resetting bearer [ 89.382030][ T5983] tipc: Disabling bearer [ 89.412909][ T4140] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.644811][ T28] audit: type=1400 audit(1770819020.928:808): avc: denied { read } for pid=5993 comm="syz.2.834" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 89.690820][ T28] audit: type=1400 audit(1770819020.958:809): avc: denied { open } for pid=5993 comm="syz.2.834" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 90.260998][ T5989] tipc: Enabled bearer , priority 0 [ 90.290817][ T5986] tipc: Disabling bearer [ 90.313621][ T6004] tipc: Enabling of bearer rejected, failed to enable media [ 90.334755][ T28] audit: type=1400 audit(1770819021.618:810): avc: denied { create } for pid=6008 comm="syz.0.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 90.376212][ T6012] netlink: 44 bytes leftover after parsing attributes in process `syz.1.835'. [ 90.413865][ T28] audit: type=1400 audit(1770819021.678:811): avc: denied { sqpoll } for pid=6008 comm="syz.0.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 90.494548][ T28] audit: type=1400 audit(1770819021.678:812): avc: denied { kexec_image_load } for pid=6008 comm="syz.0.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 90.525974][ T6009] loop0: detected capacity change from 0 to 512 [ 90.532655][ T6009] EXT4-fs: Ignoring removed bh option [ 90.538059][ T6009] EXT4-fs: Ignoring removed oldalloc option [ 90.541903][ T28] audit: type=1400 audit(1770819021.808:813): avc: denied { ioctl } for pid=6008 comm="syz.0.837" path="socket:[13369]" dev="sockfs" ino=13369 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.581026][ T6009] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.614294][ T6024] netlink: 'syz.5.840': attribute type 13 has an invalid length. [ 90.651331][ T6009] EXT4-fs (loop0): 1 truncate cleaned up [ 90.668501][ T6009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.669513][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 90.693231][ T6028] dummy0: entered promiscuous mode [ 90.698477][ T6028] macvtap1: entered promiscuous mode [ 90.703988][ T6028] macvtap1: entered allmulticast mode [ 90.709391][ T6028] dummy0: entered allmulticast mode [ 90.779693][ T6033] syzkaller0: entered promiscuous mode [ 90.791260][ T6033] syzkaller0: entered allmulticast mode [ 90.889817][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.996887][ T6042] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.845'. [ 91.184579][ T6049] netlink: 64 bytes leftover after parsing attributes in process `syz.0.847'. [ 91.196770][ T6044] syzkaller0: entered promiscuous mode [ 91.202295][ T6044] syzkaller0: entered allmulticast mode [ 91.294574][ T6053] syzkaller0: entered promiscuous mode [ 91.325009][ T6053] syzkaller0: entered allmulticast mode [ 91.349664][ T6055] loop5: detected capacity change from 0 to 512 [ 91.362488][ T6055] EXT4-fs: Ignoring removed nobh option [ 91.414812][ T6055] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 91.494756][ T6055] EXT4-fs (loop5): 1 truncate cleaned up [ 91.503720][ T6055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.742171][ T6065] syzkaller0: entered promiscuous mode [ 91.775455][ T6065] syzkaller0: entered allmulticast mode [ 92.018565][ T4140] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.119156][ T6073] syzkaller0: entered promiscuous mode [ 92.124707][ T6073] syzkaller0: entered allmulticast mode [ 92.151282][ T6081] loop2: detected capacity change from 0 to 512 [ 92.282151][ T6087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.858'. [ 92.329952][ T6092] loop0: detected capacity change from 0 to 1024 [ 92.337393][ T6092] EXT4-fs: Ignoring removed bh option [ 92.343145][ T6092] EXT4-fs: Ignoring removed nobh option [ 92.371046][ T6092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.442255][ T6101] syzkaller0: entered promiscuous mode [ 92.457952][ T6101] syzkaller0: entered allmulticast mode [ 92.637493][ T6109] syzkaller0: entered promiscuous mode [ 92.643195][ T6109] syzkaller0: entered allmulticast mode [ 92.893315][ T28] audit: type=1400 audit(1770819024.178:814): avc: denied { ioctl } for pid=6124 comm="syz.1.868" path="socket:[13546]" dev="sockfs" ino=13546 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.175087][ T28] audit: type=1400 audit(1770819024.208:815): avc: denied { remount } for pid=6124 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 93.204552][ T28] audit: type=1400 audit(1770819024.358:816): avc: denied { remount } for pid=6129 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.256759][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.783837][ T6139] loop0: detected capacity change from 0 to 256 [ 93.801157][ T6139] msdos: Bad value for 'errors' [ 93.852979][ T6145] syzkaller0: entered promiscuous mode [ 93.858488][ T6145] syzkaller0: entered allmulticast mode [ 93.881500][ T6145] net_ratelimit: 11 callbacks suppressed [ 93.881516][ T6145] 0: reclassify loop, rule prio 0, protocol 800 [ 94.093910][ T28] audit: type=1400 audit(1770819025.378:817): avc: denied { mount } for pid=6152 comm="syz.5.879" name="/" dev="hugetlbfs" ino=13045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 94.377082][ T6154] bridge0: entered promiscuous mode [ 94.390613][ T6154] macvtap1: entered promiscuous mode [ 94.408868][ T6154] macvtap1: entered allmulticast mode [ 94.417642][ T6154] bridge0: entered allmulticast mode [ 94.449181][ T6154] bridge0: port 3(macvtap1) entered blocking state [ 94.456583][ T6154] bridge0: port 3(macvtap1) entered disabled state [ 94.480714][ T6154] bridge0: left allmulticast mode [ 94.487918][ T6154] bridge0: left promiscuous mode [ 94.566134][ T6161] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.672360][ T6154] syz.1.878 (6154) used greatest stack depth: 9296 bytes left [ 94.720208][ T6168] loop5: detected capacity change from 0 to 512 [ 94.833952][ T6168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.857163][ T6176] loop2: detected capacity change from 0 to 256 [ 94.871087][ T6168] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.883021][ T6176] msdos: Bad value for 'errors' [ 94.899457][ T28] audit: type=1400 audit(1770819026.168:818): avc: denied { connect } for pid=6170 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.018494][ T28] audit: type=1400 audit(1770819026.208:819): avc: denied { ioctl } for pid=6156 comm="syz.0.880" path="socket:[13668]" dev="sockfs" ino=13668 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.087817][ T6183] dummy0: Caught tx_queue_len zero misconfig [ 95.299381][ T4140] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.825795][ T6202] loop0: detected capacity change from 0 to 512 [ 95.842970][ T6202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.862595][ T6202] ext4 filesystem being mounted at /178/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.917534][ T6202] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.925622][ T6202] batman_adv: batadv0: Interface deactivated: dummy0 [ 95.932373][ T6202] batman_adv: batadv0: Removing interface: dummy0 [ 95.952440][ T6202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.986970][ T6207] loop5: detected capacity change from 0 to 8192 [ 96.030322][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.096954][ T6217] syzkaller0: entered promiscuous mode [ 96.102581][ T6217] syzkaller0: entered allmulticast mode [ 96.137457][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 96.137470][ T28] audit: type=1400 audit(1770819027.418:821): avc: denied { setopt } for pid=6221 comm="syz.0.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.276780][ T28] audit: type=1326 audit(1770819027.558:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 96.291544][ T6228] syzkaller0: entered promiscuous mode [ 96.334403][ T6228] syzkaller0: entered allmulticast mode [ 96.337252][ T28] audit: type=1326 audit(1770819027.558:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 96.427287][ T28] audit: type=1326 audit(1770819027.558:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 96.453266][ T28] audit: type=1326 audit(1770819027.558:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 96.476786][ T28] audit: type=1326 audit(1770819027.558:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 96.501146][ T28] audit: type=1326 audit(1770819027.558:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 96.525551][ T28] audit: type=1326 audit(1770819027.558:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 96.549387][ T28] audit: type=1326 audit(1770819027.558:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 96.572646][ T28] audit: type=1326 audit(1770819027.558:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6226 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 97.087778][ T6266] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.153582][ T6272] loop3: detected capacity change from 0 to 512 [ 98.267770][ T6272] EXT4-fs: Ignoring removed nobh option [ 98.565779][ T6272] loop3: detected capacity change from 0 to 1024 [ 98.580947][ T6272] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 98.590461][ T6272] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 98.600919][ T6272] EXT4-fs (loop3): invalid journal inode [ 98.606573][ T6272] EXT4-fs (loop3): can't get journal size [ 98.631439][ T6272] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 17104912: comm syz.3.908: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 98.670702][ T6272] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 98.670734][ T6272] EXT4-fs (loop3): Remounting filesystem read-only [ 98.700746][ T6272] EXT4-fs (loop3): failed to initialize system zone (-117) [ 98.708062][ T6272] EXT4-fs (loop3): mount failed [ 99.012544][ T6291] syzkaller0: entered promiscuous mode [ 99.028280][ T6291] syzkaller0: entered allmulticast mode [ 99.232541][ T6302] netlink: 'syz.5.918': attribute type 13 has an invalid length. [ 99.257108][ T6302] batman_adv: batadv0: Interface deactivated: dummy0 [ 99.332044][ T6306] geneve2: entered promiscuous mode [ 99.348483][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.362056][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.394981][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.398103][ T6238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.411478][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.466258][ T6313] syzkaller0: entered promiscuous mode [ 99.478383][ T6313] syzkaller0: entered allmulticast mode [ 99.494873][ T6313] 0: reclassify loop, rule prio 0, protocol 800 [ 99.685326][ T6317] loop2: detected capacity change from 0 to 128 [ 100.429108][ T6348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.500842][ T6348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.513179][ T6349] loop2: detected capacity change from 0 to 512 [ 100.528825][ T6349] ext3: Unknown parameter '"S' [ 100.777230][ T6354] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 101.260104][ T6358] loop0: detected capacity change from 0 to 128 [ 101.393612][ T28] kauditd_printk_skb: 115 callbacks suppressed [ 101.393629][ T28] audit: type=1400 audit(1770819032.678:946): avc: denied { watch watch_reads } for pid=6357 comm="syz.0.936" path="/185/file0/file0" dev="loop0" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 101.605988][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.613268][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.145315][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.188372][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.294213][ T6358] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 102.331711][ T6365] team0 (unregistering): Port device team_slave_0 removed [ 102.356598][ T6365] team0 (unregistering): Port device team_slave_1 removed [ 102.472015][ T1984] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.487252][ T1984] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.509795][ T1984] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.520975][ T1984] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.747873][ T6387] loop0: detected capacity change from 0 to 512 [ 102.754506][ T6387] EXT4-fs: Ignoring removed orlov option [ 102.780840][ T6387] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 102.799326][ T28] audit: type=1400 audit(1770819034.078:947): avc: denied { mac_admin } for pid=6375 comm="syz.0.941" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.621741][ T28] audit: type=1400 audit(1770819034.898:948): avc: denied { getopt } for pid=6390 comm="syz.3.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.717348][ T6398] loop2: detected capacity change from 0 to 256 [ 104.081117][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 104.166409][ T6407] netlink: 312 bytes leftover after parsing attributes in process `syz.1.950'. [ 104.247657][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 104.321616][ T6411] xt_hashlimit: size too large, truncated to 1048576 [ 105.024691][ T6426] rdma_op ffff888118cc8580 conn xmit_rdma 0000000000000000 [ 105.040194][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.955'. [ 105.049614][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.955'. [ 105.499422][ T6434] xt_hashlimit: size too large, truncated to 1048576 [ 105.704840][ T6439] loop5: detected capacity change from 0 to 1024 [ 105.738738][ T6439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.604948][ T6448] loop2: detected capacity change from 0 to 512 [ 106.625706][ T6448] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.651642][ T6448] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 106.674742][ T6448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.813307][ T6448] EXT4-fs error (device loop2): ext4_lookup:1785: comm syz.2.960: inode #15: comm syz.2.960: iget: illegal inode # [ 106.839111][ T6448] EXT4-fs error (device loop2): ext4_lookup:1785: comm syz.2.960: inode #15: comm syz.2.960: iget: illegal inode # [ 107.038201][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.239878][ T4140] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.290279][ T6465] netlink: 399 bytes leftover after parsing attributes in process `syz.1.969'. [ 107.310790][ T6465] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 107.319992][ T6463] netlink: 44 bytes leftover after parsing attributes in process `syz.0.967'. [ 107.329252][ T6463] netlink: 'syz.0.967': attribute type 4 has an invalid length. [ 107.338664][ T6463] loop0: detected capacity change from 0 to 128 [ 107.350911][ T6470] loop2: detected capacity change from 0 to 1024 [ 107.360904][ T6470] EXT4-fs: inline encryption not supported [ 107.378110][ T6463] netlink: 36 bytes leftover after parsing attributes in process `syz.0.967'. [ 107.407023][ T28] audit: type=1326 audit(1770819038.688:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.2.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 107.482087][ T28] audit: type=1326 audit(1770819038.688:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.2.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 107.525260][ T28] audit: type=1326 audit(1770819038.718:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.2.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 107.549656][ T28] audit: type=1326 audit(1770819038.718:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.2.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 107.577263][ T28] audit: type=1326 audit(1770819038.718:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.2.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 107.600825][ T28] audit: type=1326 audit(1770819038.718:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.2.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 107.611240][ T6479] netlink: 68 bytes leftover after parsing attributes in process `syz.1.971'. [ 107.625852][ T28] audit: type=1326 audit(1770819038.718:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.2.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 107.663486][ T28] audit: type=1326 audit(1770819038.718:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.2.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 107.666500][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 107.687057][ T28] audit: type=1326 audit(1770819038.718:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.2.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 107.725042][ T28] audit: type=1326 audit(1770819038.718:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.2.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 108.390801][ T6497] xt_hashlimit: size too large, truncated to 1048576 [ 108.657890][ T6499] loop0: detected capacity change from 0 to 512 [ 108.669859][ T6499] ext3: Unknown parameter '"cc[' [ 108.712988][ T6512] loop3: detected capacity change from 0 to 512 [ 109.037748][ T6527] loop0: detected capacity change from 0 to 512 [ 109.074138][ T6527] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.105842][ T6527] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.988: bg 0: block 4: invalid block bitmap [ 109.119132][ T6527] loop0: lost filesystem error report for type 5 error -117 [ 109.122187][ T6527] EXT4-fs (loop0): 1 truncate cleaned up [ 109.146760][ T6527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.193687][ T6527] syz.0.988 (6527) used greatest stack depth: 8776 bytes left [ 109.248488][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.473795][ T6541] xt_hashlimit: size too large, truncated to 1048576 [ 109.686636][ T6545] loop2: detected capacity change from 0 to 1024 [ 109.729231][ T6548] loop0: detected capacity change from 0 to 1024 [ 109.736376][ T6548] EXT4-fs: inline encryption not supported [ 109.777012][ T6548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.856687][ T6564] loop2: detected capacity change from 0 to 512 [ 109.892612][ T6564] EXT4-fs: Ignoring removed nobh option [ 109.952280][ T6570] __nla_validate_parse: 2 callbacks suppressed [ 109.952294][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1002'. [ 109.990887][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 110.581428][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.797203][ T6592] set_capacity_and_notify: 2 callbacks suppressed [ 110.797224][ T6592] loop0: detected capacity change from 0 to 1024 [ 110.812092][ T6592] EXT4-fs: Ignoring removed bh option [ 110.817581][ T6592] EXT4-fs: inline encryption not supported [ 111.004379][ T6612] loop2: detected capacity change from 0 to 128 [ 111.167789][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 111.227189][ T6592] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.248687][ T6612] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1020'. [ 111.258268][ T6592] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 111.267964][ T6592] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1010: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.290508][ T6592] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 111.291079][ T6592] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.1010: Invalid inode table block 1 in block_group 0 [ 111.343512][ T6592] loop0: lost filesystem error report for type 5 error -117 [ 111.343766][ T6592] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 111.393472][ T6592] loop0: lost filesystem error report for type 5 error -117 [ 111.393693][ T6592] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1010: mark_inode_dirty error [ 111.452523][ T6592] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 111.452749][ T6592] EXT4-fs error (device loop0): ext4_acquire_dquot:6991: comm syz.0.1010: Failed to acquire dquot type 0 [ 111.492141][ T6592] loop0: lost filesystem error report for type 5 error -117 [ 111.500331][ T6592] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 111.512251][ T6592] loop0: lost filesystem error report for type 5 error -117 [ 111.527692][ T6592] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1010: mark_inode_dirty error [ 111.569709][ T6592] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.569853][ T6592] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 111.601437][ T6592] EXT4-fs (loop0): 1 orphan inode deleted [ 111.607701][ T6592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.633818][ T2378] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.661377][ T2378] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 111.661478][ T2378] EXT4-fs error (device loop0): ext4_release_dquot:7027: comm kworker/u8:7: Failed to release dquot type 0 [ 111.705997][ T2378] loop0: lost filesystem error report for type 5 error -117 [ 111.903238][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.956854][ T3313] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 111.997070][ T3313] loop0: lost filesystem error report for type 5 error -117 [ 111.997169][ T3313] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 112.056173][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1035'. [ 112.065422][ T3313] loop0: lost filesystem error report for type 5 error -117 [ 112.065551][ T3313] EXT4-fs error (device loop0): ext4_quota_off:7275: inode #3: comm syz-executor: mark_inode_dirty error [ 112.103903][ T6647] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1035'. [ 112.112924][ T3313] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 112.236765][ T6656] loop0: detected capacity change from 0 to 2048 [ 112.515691][ T6678] xt_hashlimit: size too large, truncated to 1048576 [ 112.571894][ T6681] lo speed is unknown, defaulting to 1000 [ 112.608865][ T6684] loop2: detected capacity change from 0 to 512 [ 112.905148][ T6694] tmpfs: Bad value for 'mpol' [ 113.098079][ T6681] loop0: detected capacity change from 0 to 512 [ 113.266761][ T6681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.294191][ T6681] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.468360][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 113.468381][ T28] audit: type=1400 audit(1770819812.553:1093): avc: denied { watch watch_reads } for pid=6710 comm="syz.1.1063" path="/244/file0" dev="tmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.565587][ T6711] sit0: left promiscuous mode [ 113.622118][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.629367][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.773221][ T6711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.796900][ T6711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.864706][ T6340] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.875382][ T6340] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.907294][ T6340] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.916268][ T6340] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.931043][ T6728] loop3: detected capacity change from 0 to 128 [ 113.962903][ T28] audit: type=1326 audit(1770819813.067:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 114.003973][ T6733] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 114.005958][ T6728] loop3: detected capacity change from 0 to 512 [ 114.040794][ T6728] journal_path: Non-blockdev passed as './file2' [ 114.047159][ T6728] EXT4-fs: error: could not find journal device path [ 114.055150][ T28] audit: type=1326 audit(1770819813.067:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 114.130196][ T28] audit: type=1326 audit(1770819813.067:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 114.156086][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1068'. [ 114.169880][ T6728] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1068'. [ 114.214017][ T28] audit: type=1326 audit(1770819813.067:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 114.271276][ T28] audit: type=1326 audit(1770819813.067:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 114.318359][ T28] audit: type=1326 audit(1770819813.099:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 114.342220][ T28] audit: type=1326 audit(1770819813.099:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 114.357853][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.366310][ T28] audit: type=1326 audit(1770819813.120:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 114.406096][ T6763] loop2: detected capacity change from 0 to 128 [ 114.414011][ T28] audit: type=1326 audit(1770819813.120:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 114.555085][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.562404][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.646905][ T6763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.677062][ T6763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.717591][ T6763] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 114.739477][ T6763] geneve2: left promiscuous mode [ 114.758463][ T6763] dummy0: left allmulticast mode [ 114.778868][ T6763] macvtap1: left promiscuous mode [ 114.785420][ T6763] macvtap1: left allmulticast mode [ 114.792123][ T5335] lo speed is unknown, defaulting to 1000 [ 114.792270][ T2378] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.797926][ T5335] syz2: Port: 1 Link DOWN [ 114.828299][ T2378] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 57088 - 0 [ 114.851384][ T6806] siw: device registration error -23 [ 114.859389][ T2378] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.887825][ T2378] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 57088 - 0 [ 114.910586][ T2378] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.929885][ T2378] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 57088 - 0 [ 114.939732][ T2378] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.949114][ T2378] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 57088 - 0 [ 115.834311][ T6844] tmpfs: Bad value for 'mpol' [ 115.969181][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'. [ 115.995319][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'. [ 116.003664][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 116.107592][ T6866] lo speed is unknown, defaulting to 1000 [ 116.584894][ T6942] vhci_hcd vhci_hcd.2: invalid port number 96 [ 116.602346][ T6942] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 116.621050][ T6949] loop2: detected capacity change from 0 to 1024 [ 116.674839][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 116.950243][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 117.069593][ T6992] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1191'. [ 117.088139][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 117.208458][ T7004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1197'. [ 117.275252][ T7010] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 117.414969][ T7025] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1207'. [ 117.424337][ T7025] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1207'. [ 117.472296][ T7033] x_tables: duplicate underflow at hook 3 [ 117.982638][ T7058] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 118.347382][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 118.347468][ T28] audit: type=1400 audit(1770819817.677:1164): avc: denied { create } for pid=7120 comm="syz.3.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.389181][ T28] audit: type=1400 audit(1770819817.719:1165): avc: denied { getopt } for pid=7120 comm="syz.3.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.425553][ T28] audit: type=1400 audit(1770819817.761:1166): avc: denied { write } for pid=7128 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.459410][ T28] audit: type=1400 audit(1770819817.792:1167): avc: denied { create } for pid=7130 comm="syz.5.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.663058][ T28] audit: type=1400 audit(1770819817.813:1168): avc: denied { write } for pid=7130 comm="syz.5.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.886914][ T28] audit: type=1400 audit(1770819817.908:1169): avc: denied { getopt } for pid=7135 comm="syz.5.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.938151][ T28] audit: type=1400 audit(1770819818.296:1170): avc: denied { write } for pid=7159 comm="syz.0.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.952647][ T7162] xt_hashlimit: size too large, truncated to 1048576 [ 119.006654][ T28] audit: type=1400 audit(1770819818.359:1171): avc: denied { tracepoint } for pid=7163 comm="syz.0.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 119.088000][ T7177] netlink: 'syz.5.1281': attribute type 4 has an invalid length. [ 119.147885][ T28] audit: type=1400 audit(1770819818.517:1172): avc: denied { getopt } for pid=7179 comm="syz.2.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.168722][ T28] audit: type=1400 audit(1770819818.538:1173): avc: denied { cpu } for pid=7180 comm="syz.0.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 119.884208][ T7243] loop3: detected capacity change from 0 to 512 [ 119.907541][ T7243] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 119.934192][ T7243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 119.986899][ T7251] xt_CT: No such helper "netbios-ns" [ 119.994303][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.147078][ T7275] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 120.351525][ T7308] loop3: detected capacity change from 0 to 512 [ 121.333992][ T7422] x_tables: ip_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 121.465620][ T7434] loop0: detected capacity change from 0 to 1024 [ 121.508099][ T7434] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.563921][ T7434] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #3: block 1: comm syz.0.1404: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.579094][ T7434] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 121.581559][ T7434] EXT4-fs error (device loop0): ext4_acquire_dquot:6991: comm syz.0.1404: Failed to acquire dquot type 0 [ 121.607610][ T7434] loop0: lost filesystem error report for type 5 error -117 [ 121.607792][ T7434] EXT4-fs error (device loop0): ext4_free_blocks:6727: comm syz.0.1404: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.632047][ T7464] random: crng reseeded on system resumption [ 121.667861][ T7434] loop0: lost filesystem error report for type 5 error -117 [ 121.670279][ T7434] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1404: Invalid inode bitmap blk 0 in block_group 0 [ 121.690345][ T12] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.690386][ T12] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 121.690506][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7027: comm kworker/u8:0: Failed to release dquot type 0 [ 121.721582][ T7434] loop0: lost filesystem error report for type 5 error -117 [ 121.727764][ T7434] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 121.759196][ T7434] loop0: lost filesystem error report for type 5 error -117 [ 121.774535][ T7434] EXT4-fs (loop0): 1 orphan inode deleted [ 121.788971][ T7484] __nla_validate_parse: 7 callbacks suppressed [ 121.788985][ T7484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1428'. [ 121.789264][ T12] loop0: lost filesystem error report for type 5 error -117 [ 121.819175][ T7434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.864233][ T7490] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 121.908934][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.919646][ T7500] netlink: 'syz.2.1436': attribute type 10 has an invalid length. [ 122.051394][ T7509] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1440'. [ 122.076130][ T7509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1440'. [ 122.161992][ T7519] sock: sock_timestamping_bind_phc: sock not bind to device [ 122.236251][ T7521] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1443'. [ 122.815974][ T7559] netlink: get zone limit has 4 unknown bytes [ 123.227602][ T7623] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 123.229401][ T7620] loop2: detected capacity change from 0 to 1024 [ 123.347337][ T7620] EXT4-fs: Ignoring removed bh option [ 123.355853][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 123.355866][ T28] audit: type=1400 audit(1770819822.926:1195): avc: denied { map } for pid=7628 comm="syz.0.1498" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 123.388704][ T7620] EXT4-fs: Ignoring removed nobh option [ 123.469667][ T28] audit: type=1400 audit(1770819823.021:1196): avc: denied { create } for pid=7639 comm="syz.0.1505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_connector_socket permissive=1 [ 123.581422][ T28] audit: type=1400 audit(1770819823.157:1197): avc: denied { name_bind } for pid=7661 comm="syz.3.1514" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 123.614324][ T7667] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1516'. [ 123.695390][ T28] audit: type=1400 audit(1770819823.157:1198): avc: denied { node_bind } for pid=7661 comm="syz.3.1514" saddr=172.30.1.4 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 123.731215][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1525'. [ 123.755711][ T28] audit: type=1400 audit(1770819823.210:1199): avc: denied { relabelfrom } for pid=7666 comm="syz.0.1517" name="" dev="pipefs" ino=18117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 123.759787][ T7686] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 123.825228][ T28] audit: type=1400 audit(2000000000.010:1200): avc: denied { compute_member } for pid=7677 comm="syz.3.1522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 123.973224][ T7712] nftables ruleset with unbound set [ 124.479480][ T28] audit: type=1400 audit(2000000000.766:1201): avc: denied { sys_module } for pid=7725 comm="syz.0.1545" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 124.553755][ T7736] xt_hashlimit: size too large, truncated to 1048576 [ 124.661908][ T7758] tipc: Enabling of bearer rejected, failed to enable media [ 124.676129][ T28] audit: type=1326 audit(2000000000.976:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 124.729896][ T28] audit: type=1326 audit(2000000000.976:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 124.780761][ T28] audit: type=1326 audit(2000000000.976:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 124.977738][ T7798] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1576'. [ 125.028707][ T7804] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1579'. [ 125.038389][ T7788] ip6t_rpfilter: unknown options [ 125.372992][ T7855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7855 comm=syz.0.1605 [ 125.433771][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1610'. [ 125.642714][ T7896] macvlan0: entered allmulticast mode [ 125.657136][ T7896] veth1_vlan: entered allmulticast mode [ 125.677315][ T7904] macsec1: entered promiscuous mode [ 125.693998][ T7904] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 125.711618][ T7904] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 125.795627][ T7920] loop2: detected capacity change from 0 to 512 [ 125.820720][ T7924] loop3: detected capacity change from 0 to 1024 [ 125.839369][ T7924] EXT4-fs: inline encryption not supported [ 126.002958][ T7952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1651'. [ 126.042375][ T7960] loop0: detected capacity change from 0 to 256 [ 126.096829][ T7960] FAT-fs (loop0): Directory bread(block 64) failed [ 126.130654][ T7960] FAT-fs (loop0): Directory bread(block 65) failed [ 126.141747][ T7960] FAT-fs (loop0): Directory bread(block 66) failed [ 126.148480][ T7960] FAT-fs (loop0): Directory bread(block 67) failed [ 126.155035][ T7960] FAT-fs (loop0): Directory bread(block 68) failed [ 126.163891][ T7960] FAT-fs (loop0): Directory bread(block 69) failed [ 126.194563][ T7960] FAT-fs (loop0): Directory bread(block 70) failed [ 126.201149][ T7960] FAT-fs (loop0): Directory bread(block 71) failed [ 126.218789][ T7960] FAT-fs (loop0): Directory bread(block 72) failed [ 126.234389][ T7960] FAT-fs (loop0): Directory bread(block 73) failed [ 126.269776][ T7988] loop2: detected capacity change from 0 to 1024 [ 126.278086][ T7988] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.378656][ T7999] loop2: detected capacity change from 0 to 512 [ 126.394564][ T7999] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 126.635067][ T8034] loop2: detected capacity change from 0 to 128 [ 126.885774][ T8074] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1713'. [ 126.909195][ T8079] loop3: detected capacity change from 0 to 512 [ 127.036309][ T8094] loop3: detected capacity change from 0 to 512 [ 127.248602][ T8125] loop3: detected capacity change from 0 to 1024 [ 127.259793][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 127.261613][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1738'. [ 127.270258][ T8125] EXT4-fs: Ignoring removed orlov option [ 127.329595][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1738'. [ 127.487959][ T8165] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 127.492605][ T8163] xt_hashlimit: size too large, truncated to 1048576 [ 127.586142][ T8177] netlink: 'syz.3.1762': attribute type 4 has an invalid length. [ 127.594107][ T8177] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1762'. [ 127.686481][ T8191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1769'. [ 127.871969][ T8211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1779'. [ 127.972590][ T8231] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1789'. [ 127.987057][ T8231] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1789'. [ 128.089220][ T8247] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 128.103858][ T8249] loop3: detected capacity change from 0 to 512 [ 128.239097][ T8265] loop2: detected capacity change from 0 to 128 [ 128.301550][ T8272] loop0: detected capacity change from 0 to 512 [ 128.356888][ T8272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.379915][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 128.379929][ T28] audit: type=1326 audit(2000000004.871:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.5.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 128.411358][ T8272] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.451436][ T28] audit: type=1326 audit(2000000004.871:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.5.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 128.481764][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.497699][ T28] audit: type=1326 audit(2000000004.871:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.5.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 128.521570][ T28] audit: type=1326 audit(2000000004.871:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.5.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 128.545979][ T28] audit: type=1326 audit(2000000004.871:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.5.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 128.574076][ T28] audit: type=1326 audit(2000000004.871:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.5.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 128.598491][ T28] audit: type=1326 audit(2000000004.902:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.5.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 128.623323][ T28] audit: type=1326 audit(2000000004.902:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.5.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 128.647596][ T28] audit: type=1326 audit(2000000004.902:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.5.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 128.693459][ T28] audit: type=1326 audit(2000000004.902:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.5.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78b3c1c84e code=0x7ffc0000 [ 128.721039][ T8299] xt_hashlimit: size too large, truncated to 1048576 [ 128.912233][ T8327] 9p: Bad value for 'rfdno' [ 128.974198][ T8335] loop0: detected capacity change from 0 to 512 [ 128.981259][ T8335] EXT4-fs: Ignoring removed i_version option [ 129.003879][ T8335] EXT4-fs: Ignoring removed bh option [ 129.038372][ T8335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.054494][ T8335] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.158174][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.206720][ T8365] EXT4-fs: Ignoring removed oldalloc option [ 129.210741][ T8368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1849'. [ 129.222702][ T8368] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 129.250921][ T8365] EXT4-fs (loop0): 1 truncate cleaned up [ 129.257392][ T8365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.289015][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.580794][ T8394] EXT4-fs: Ignoring removed orlov option [ 129.594910][ T8394] EXT4-fs: Ignoring removed oldalloc option [ 129.673154][ T8400] 9p: Bad value for 'rfdno' [ 129.701183][ T8404] 9p: Bad value for 'rfdno' [ 130.049152][ T8450] vlan2: entered allmulticast mode [ 130.230145][ T8480] IPVS: Error connecting to the multicast addr [ 130.412201][ T8502] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8502 comm=syz.1.1913 [ 130.889874][ T8572] program syz.3.1945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.018111][ T8587] xt_hashlimit: size too large, truncated to 1048576 [ 131.077843][ T8598] program syz.0.1957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.115693][ T8575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.126621][ T8575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.212818][ T8615] set_capacity_and_notify: 10 callbacks suppressed [ 131.212833][ T8615] loop0: detected capacity change from 0 to 128 [ 131.251683][ T8615] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 131.259695][ T8615] FAT-fs (loop0): Filesystem has been set read-only [ 131.268582][ T8615] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 131.530118][ T8656] loop3: detected capacity change from 0 to 512 [ 131.586289][ T8656] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 131.594697][ T8656] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 131.705615][ T8656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.032413][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.042292][ T8674] __nla_validate_parse: 10 callbacks suppressed [ 132.042308][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 132.106456][ T8682] loop0: detected capacity change from 0 to 512 [ 132.113514][ T8682] EXT4-fs: Ignoring removed oldalloc option [ 132.121382][ T8682] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.1995: corrupted in-inode xattr: invalid ea_ino [ 132.135329][ T8682] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 132.138733][ T8680] vhci_hcd vhci_hcd.2: invalid port number 96 [ 132.150212][ T8682] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1995: couldn't read orphan inode 15 (err -117) [ 132.165969][ T8682] loop0: lost filesystem error report for type 5 error -117 [ 132.166073][ T8680] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 132.166713][ T8682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.296758][ T8682] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1995: invalid indirect mapped block 234881024 (level 0) [ 132.313675][ T8693] loop3: detected capacity change from 0 to 1024 [ 132.317910][ T8695] netlink: 'syz.5.2001': attribute type 25 has an invalid length. [ 132.324093][ T8693] EXT4-fs: inline encryption not supported [ 132.358067][ T8695] netlink: 'syz.5.2001': attribute type 29 has an invalid length. [ 132.372458][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.504206][ T8719] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2013'. [ 132.528166][ T8719] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2013'. [ 132.944412][ T8743] loop2: detected capacity change from 0 to 128 [ 132.970191][ T8743] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.120592][ T8751] vlan3: entered allmulticast mode [ 133.125792][ T8751] veth0_to_bond: entered allmulticast mode [ 133.228919][ T8758] tap0: tun_chr_ioctl cmd 2147767520 [ 133.357371][ T8766] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2032'. [ 133.375003][ T8766] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2032'. [ 133.544792][ T8779] loop3: detected capacity change from 0 to 256 [ 133.588206][ T8783] loop3: detected capacity change from 0 to 512 [ 133.596191][ T8783] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 133.604754][ T8783] System zones: 0-2, 18-18, 34-34 [ 133.610198][ T8783] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 133.618898][ T8783] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.632817][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 133.632832][ T28] audit: type=1400 audit(2000000010.393:1284): avc: denied { read } for pid=8782 comm="syz.3.2040" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.661392][ T28] audit: type=1400 audit(2000000010.393:1285): avc: denied { open } for pid=8782 comm="syz.3.2040" path="/416/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.662119][ T3308] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 133.882327][ T8792] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 133.889713][ T8792] vhci_hcd vhci_hcd.2: invalid port number 96 [ 133.895877][ T8792] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 133.919912][ T28] audit: type=1326 audit(2000000010.686:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 133.960277][ T28] audit: type=1326 audit(2000000010.686:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 133.984377][ T28] audit: type=1326 audit(2000000010.718:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 134.025773][ T28] audit: type=1326 audit(2000000010.718:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 134.080566][ T28] audit: type=1326 audit(2000000010.718:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 134.129540][ T8806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.129898][ T28] audit: type=1326 audit(2000000010.718:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 134.222211][ T28] audit: type=1326 audit(2000000010.718:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 134.256466][ T28] audit: type=1326 audit(2000000010.718:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.2.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 135.286680][ T8881] loop0: detected capacity change from 0 to 512 [ 135.293600][ T8881] EXT4-fs: Ignoring removed oldalloc option [ 135.301853][ T8881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.326742][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.964156][ T8933] loop3: detected capacity change from 0 to 512 [ 137.122556][ T8958] loop0: detected capacity change from 0 to 128 [ 137.302047][ T8976] xt_hashlimit: size too large, truncated to 1048576 [ 137.565046][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 137.577814][ T9010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2135'. [ 137.596810][ T9010] geneve2: entered promiscuous mode [ 137.610787][ T9010] geneve2: entered allmulticast mode [ 137.626213][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.645521][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.678783][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.690434][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.803766][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2141'. [ 137.812934][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2141'. [ 137.843223][ T9029] loop2: detected capacity change from 0 to 128 [ 137.870776][ T9031] loop0: detected capacity change from 0 to 128 [ 137.898081][ T9035] loop2: detected capacity change from 0 to 1024 [ 137.917603][ T9031] syz.0.2144: attempt to access beyond end of device [ 137.917603][ T9031] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 137.934023][ T9031] syz.0.2144: attempt to access beyond end of device [ 137.934023][ T9031] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 137.948981][ T9031] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 137.970651][ T9031] syz.0.2144: attempt to access beyond end of device [ 137.970651][ T9031] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 137.984724][ T9031] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 138.004665][ T9031] syz.0.2144: attempt to access beyond end of device [ 138.004665][ T9031] loop0: rw=2049, sector=162, nr_sectors = 88 limit=128 [ 138.018610][ T9031] syz.0.2144: attempt to access beyond end of device [ 138.018610][ T9031] loop0: rw=2049, sector=138, nr_sectors = 12 limit=128 [ 138.774861][ T9068] loop2: detected capacity change from 0 to 512 [ 138.833163][ T9074] netlink: 'syz.5.2163': attribute type 4 has an invalid length. [ 138.847498][ T9074] netlink: 'syz.5.2163': attribute type 4 has an invalid length. [ 138.955978][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 138.955995][ T28] audit: type=1400 audit(2000000015.967:1358): avc: denied { accept } for pid=9083 comm="syz.5.2168" lport=54273 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.069398][ T9081] SELinux: failed to load policy [ 139.077096][ T28] audit: type=1400 audit(2000000016.093:1359): avc: denied { load_policy } for pid=9080 comm="syz.2.2167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 139.166643][ T28] audit: type=1326 audit(2000000016.187:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 139.205333][ T28] audit: type=1326 audit(2000000016.187:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 139.256969][ T28] audit: type=1326 audit(2000000016.187:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 139.304662][ T9096] SELinux: failed to load policy [ 139.311696][ T28] audit: type=1326 audit(2000000016.240:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 139.409737][ T9117] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2180'. [ 139.419465][ T9117] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 139.479462][ T9128] loop0: detected capacity change from 0 to 256 [ 139.490693][ T9128] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.610337][ T28] audit: type=1400 audit(2000000016.660:1364): avc: denied { mount } for pid=9146 comm="syz.5.2193" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 139.983753][ T28] audit: type=1400 audit(2000000017.048:1365): avc: denied { mounton } for pid=9166 comm="syz.3.2201" path="/proc/1024/cgroup" dev="proc" ino=22020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 140.229508][ T9191] loop3: detected capacity change from 0 to 512 [ 140.259722][ T28] audit: type=1400 audit(2000000017.342:1366): avc: denied { connect } for pid=9194 comm="syz.1.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 140.291115][ T28] audit: type=1400 audit(2000000017.374:1367): avc: denied { write } for pid=9194 comm="syz.1.2211" path="socket:[22640]" dev="sockfs" ino=22640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 140.392877][ T9205] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2217'. [ 140.411799][ T9205] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 140.458752][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2219'. [ 140.518164][ T9217] SELinux: failed to load policy [ 140.543441][ T9219] netlink: 'syz.3.2223': attribute type 12 has an invalid length. [ 141.281093][ T9256] loop0: detected capacity change from 0 to 512 [ 141.288319][ T9256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.296668][ T9256] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 141.304980][ T9256] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 141.312981][ T9256] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 141.322531][ T9256] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 141.331964][ T9256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 141.347145][ T9256] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 141.387651][ T9256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.527052][ T9282] loop3: detected capacity change from 0 to 2048 [ 141.543026][ T9282] EXT4-fs: Ignoring removed bh option [ 141.591163][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2255'. [ 141.603435][ T9289] batman_adv: batadv0: Adding interface: ipvlan2 [ 141.609972][ T9289] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.635386][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.645925][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.655772][ T9289] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 142.061101][ T9313] loop3: detected capacity change from 0 to 32768 [ 142.102077][ T9313] loop3: p1 p3 < > [ 142.182543][ T3664] udevd[3664]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 142.182609][ T3642] udevd[3642]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 142.255694][ T9333] macvlan2: entered promiscuous mode [ 142.269140][ T9333] batman_adv: batadv0: Adding interface: macvlan2 [ 142.275855][ T9333] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.301550][ T9333] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 142.363276][ T9342] loop3: detected capacity change from 0 to 512 [ 142.420364][ T9348] loop0: detected capacity change from 0 to 4096 [ 142.426985][ T9350] loop3: detected capacity change from 0 to 512 [ 142.438765][ T9348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.511714][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.547518][ T9360] loop0: detected capacity change from 0 to 512 [ 142.578335][ T9360] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.698786][ T9360] EXT4-fs (loop0): 1 truncate cleaned up [ 142.710189][ T9360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.940219][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.541610][ T9414] loop0: detected capacity change from 0 to 512 [ 143.583273][ T9414] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.621424][ T9414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.678434][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.837401][ T9428] lo speed is unknown, defaulting to 1000 [ 144.031429][ T9434] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 144.211589][ T9434] SELinux: failed to load policy [ 144.473815][ T9] kernel write not supported for file 969/task/971/setgroups (pid: 9 comm: kworker/0:0) [ 144.489559][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2329'. [ 144.503081][ T30] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.511944][ T30] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.520712][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2329'. [ 144.530106][ T30] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.546601][ T30] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.686839][ T9491] xt_hashlimit: size too large, truncated to 1048576 [ 145.170902][ T9503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.203962][ T9503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.484052][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2347'. [ 145.501021][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2347'. [ 145.618905][ T9532] loop2: detected capacity change from 0 to 512 [ 145.625801][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2354'. [ 145.630868][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 145.630886][ T28] audit: type=1400 audit(2000000022.969:1374): avc: denied { shutdown } for pid=9530 comm="syz.3.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.635404][ T9534] chnl_net:caif_netlink_parms(): no params data found [ 145.833426][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.840951][ T28] audit: type=1400 audit(2000000023.200:1375): avc: denied { mounton } for pid=9563 comm="syz.1.2368" path="/file0" dev="ramfs" ino=23185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 145.925012][ T9575] netlink: 'syz.1.2373': attribute type 4 has an invalid length. [ 145.933278][ T9575] netlink: 'syz.1.2373': attribute type 4 has an invalid length. [ 146.614932][ T9598] loop3: detected capacity change from 0 to 2048 [ 147.097984][ T28] audit: type=1400 audit(2000000024.523:1376): avc: denied { create } for pid=9641 comm="syz.3.2400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_iscsi_socket permissive=1 [ 147.250339][ T28] audit: type=1400 audit(2000000024.523:1377): avc: denied { create } for pid=9641 comm="syz.3.2400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 147.304183][ T28] audit: type=1400 audit(2000000024.523:1378): avc: denied { write } for pid=9641 comm="syz.3.2400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 147.392740][ T28] audit: type=1400 audit(2000000024.523:1379): avc: denied { sendto } for pid=9641 comm="syz.3.2400" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 147.523366][ T9650] loop2: detected capacity change from 0 to 128 [ 147.807332][ T3490] Bluetooth: hci0: command 0x1003 tx timeout [ 147.807714][ T4431] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.987955][ T9679] xt_hashlimit: size too large, truncated to 1048576 [ 148.104710][ T9683] loop3: detected capacity change from 0 to 512 [ 148.111506][ T28] audit: type=1400 audit(2000000025.583:1380): avc: denied { remount } for pid=9682 comm="syz.3.2415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.400294][ T9696] loop0: detected capacity change from 0 to 1024 [ 148.412077][ T9696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.423532][ T9696] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.439425][ T9696] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 148.449004][ T9696] System zones: 0-1, 3-36 [ 148.454528][ T9696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.466501][ T28] audit: type=1326 audit(2000000025.940:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.3.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 148.491402][ T28] audit: type=1326 audit(2000000025.940:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.3.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 148.491670][ T9696] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 148.492318][ T9701] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.2422'. [ 148.538512][ T28] audit: type=1326 audit(2000000025.940:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.3.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 148.562291][ T9701] netlink: zone id is out of range [ 148.567470][ T9701] netlink: zone id is out of range [ 148.582037][ T9701] netlink: zone id is out of range [ 148.590811][ T9705] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2423'. [ 148.608370][ T9701] netlink: set zone limit has 8 unknown bytes [ 148.618727][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.676241][ T9709] loop0: detected capacity change from 0 to 512 [ 148.702422][ T9709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.978531][ T9709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.056214][ T9709] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.351574][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.600864][ T9730] loop3: detected capacity change from 0 to 4096 [ 149.835319][ T9746] netlink: 'syz.1.2438': attribute type 32 has an invalid length. [ 149.849012][ T9742] syzkaller0: entered promiscuous mode [ 149.953887][ T9763] loop0: detected capacity change from 0 to 128 [ 150.000374][ T9763] syz.0.2440: attempt to access beyond end of device [ 150.000374][ T9763] loop0: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 150.032239][ T9763] syz.0.2440: attempt to access beyond end of device [ 150.032239][ T9763] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 150.046978][ T9763] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 150.081599][ T9763] syz.0.2440: attempt to access beyond end of device [ 150.081599][ T9763] loop0: rw=8912896, sector=154, nr_sectors = 8 limit=128 [ 150.100704][ T9763] syz.0.2440: attempt to access beyond end of device [ 150.100704][ T9763] loop0: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 150.130593][ T9784] loop2: detected capacity change from 0 to 1024 [ 150.141914][ T9763] syz.0.2440: attempt to access beyond end of device [ 150.141914][ T9763] loop0: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 150.162975][ T9763] syz.0.2440: attempt to access beyond end of device [ 150.162975][ T9763] loop0: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 150.176914][ T9763] syz.0.2440: attempt to access beyond end of device [ 150.176914][ T9763] loop0: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 150.197021][ T9784] EXT4-fs: Ignoring removed orlov option [ 150.205149][ T9784] EXT4-fs: inline encryption not supported [ 150.217219][ T9790] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 150.227104][ T9784] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 150.241157][ T9779] syz.0.2440: attempt to access beyond end of device [ 150.241157][ T9779] loop0: rw=2049, sector=162, nr_sectors = 56 limit=128 [ 150.246366][ T9784] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 150.284755][ T9784] EXT4-fs (loop2): invalid journal inode [ 150.290506][ T9784] EXT4-fs (loop2): can't get journal size [ 150.307382][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.313718][ T9784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.376815][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.387614][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.495836][ T9803] syzkaller0: entered promiscuous mode [ 150.507406][ T9803] syzkaller0: entered allmulticast mode [ 150.521941][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.574415][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.653129][ T9809] lo speed is unknown, defaulting to 1000 [ 150.760798][ T9809] chnl_net:caif_netlink_parms(): no params data found [ 150.802199][ T12] bridge_slave_1: left allmulticast mode [ 150.817139][ T12] bridge_slave_1: left promiscuous mode [ 150.827476][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.835551][ T12] bridge_slave_0: left allmulticast mode [ 150.843013][ T12] bridge_slave_0: left promiscuous mode [ 150.848942][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.905121][ T12] bond0 (unregistering): (slave bridge1): Releasing active interface [ 150.952209][ T12] bond0 (unregistering): Released all slaves [ 151.002186][ T12] tipc: Left network mode [ 151.012453][ T9809] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.019804][ T9809] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.027285][ T9809] bridge_slave_0: entered allmulticast mode [ 151.034081][ T9809] bridge_slave_0: entered promiscuous mode [ 151.041620][ T9809] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.049095][ T9809] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.056560][ T9809] bridge_slave_1: entered allmulticast mode [ 151.063197][ T9809] bridge_slave_1: entered promiscuous mode [ 151.072398][ T12] hsr_slave_0: left promiscuous mode [ 151.078818][ T12] hsr_slave_1: left promiscuous mode [ 151.086995][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.096284][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.146614][ T12] team0 (unregistering): Port device team_slave_1 removed [ 151.156759][ T12] team0 (unregistering): Port device team_slave_0 removed [ 151.208842][ T9857] geneve3: entered promiscuous mode [ 151.214792][ T9857] geneve3: entered allmulticast mode [ 151.242307][ T9809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.253035][ T9809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.282709][ T9809] team0: Port device team_slave_0 added [ 151.292665][ T9809] team0: Port device team_slave_1 added [ 151.311416][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.329734][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.359745][ T9809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.372627][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.407716][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.462515][ T9809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.523894][ T9809] hsr_slave_0: entered promiscuous mode [ 151.530188][ T9809] hsr_slave_1: entered promiscuous mode [ 151.536417][ T9809] debugfs: 'hsr0' already exists in 'hsr' [ 151.542399][ T9809] Cannot create hsr debugfs directory [ 151.785476][ T9809] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 151.803992][ T9809] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 151.831184][ T9809] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 151.848768][ T9809] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 151.852467][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 151.852483][ T28] audit: type=1400 audit(2000000029.509:1421): avc: denied { ioctl } for pid=9924 comm="syz.5.2484" path="socket:[24440]" dev="sockfs" ino=24440 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.917497][ T9809] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.924599][ T9809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.931893][ T9809] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.938960][ T9809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.951615][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.959693][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.018713][ T9809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.039902][ T9809] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.057716][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.064912][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.076857][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.084002][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.134869][ T9809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.170201][ T9809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.246101][ T9809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.471512][ T9809] veth0_vlan: entered promiscuous mode [ 152.477246][ T9969] loop2: detected capacity change from 0 to 8192 [ 152.491017][ T9809] veth1_vlan: entered promiscuous mode [ 152.521077][ T9809] veth0_macvtap: entered promiscuous mode [ 152.536086][ T9809] veth1_macvtap: entered promiscuous mode [ 152.549347][ T9969] loop2: p1 p2 p4 < > [ 152.555713][ T9969] loop2: partition table partially beyond EOD, truncated [ 152.556485][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.579555][ T9969] loop2: p1 start 16777216 is beyond EOD, truncated [ 152.592507][ T9969] loop2: p2 size 515840 extends beyond EOD, truncated [ 152.602308][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.610179][ T9969] loop2: p4 start 16777216 is beyond EOD, truncated [ 152.621306][ T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.633506][ T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.654989][ T40] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.676538][ T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.759188][ T28] audit: type=1400 audit(2000000030.454:1422): avc: denied { mount } for pid=9809 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 152.797330][ T3664] udevd[3664]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 152.850385][ T28] audit: type=1400 audit(2000000030.454:1423): avc: denied { mounton } for pid=9809 comm="syz-executor" path="/root/syzkaller.u3OjYn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 152.903992][ T28] audit: type=1400 audit(2000000030.496:1424): avc: denied { mount } for pid=9809 comm="syz-executor" name="/" dev="gadgetfs" ino=5147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 152.990240][ T28] audit: type=1400 audit(2000000030.706:1425): avc: denied { mount } for pid=9996 comm="syz.1.2486" name="/" dev="configfs" ino=1627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 153.059852][ T9997] netlink: 'syz.1.2486': attribute type 29 has an invalid length. [ 153.083947][ T28] audit: type=1400 audit(2000000030.801:1426): avc: denied { lock } for pid=9999 comm="syz.6.2494" path="socket:[24791]" dev="sockfs" ino=24791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 153.338390][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2503'. [ 153.355384][T10020] loop6: detected capacity change from 0 to 2048 [ 153.394655][T10023] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.416405][T10023] macvlan2: entered promiscuous mode [ 153.421816][T10023] macvlan2: entered allmulticast mode [ 153.428097][T10023] bond2: (slave macvlan2): Opening slave failed [ 153.434867][ T3664] loop6: p1 p2 [ 153.442293][T10020] loop6: p1 p2 [ 153.453533][ T2999] loop6: p1 p2 [ 153.510332][ T3664] udevd[3664]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 153.607545][T10044] loop6: detected capacity change from 0 to 512 [ 154.343484][T10117] lo speed is unknown, defaulting to 1000 [ 154.536212][ T28] audit: type=1400 audit(2000000032.333:1427): avc: denied { create } for pid=10127 comm="syz.2.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.064363][T10150] loop3: detected capacity change from 0 to 512 [ 155.571358][T10162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10162 comm=syz.5.2559 [ 155.601261][T10170] netlink: 'syz.5.2563': attribute type 4 has an invalid length. [ 155.623154][T10170] netlink: 'syz.5.2563': attribute type 4 has an invalid length. [ 155.719027][ T28] audit: type=1326 audit(2000000033.572:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.5.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 155.742873][ T28] audit: type=1326 audit(2000000033.572:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.5.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 155.768546][ T28] audit: type=1326 audit(2000000033.572:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10182 comm="syz.5.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 155.833994][T10195] loop6: detected capacity change from 0 to 128 [ 155.872315][T10195] syz.6.2571: attempt to access beyond end of device [ 155.872315][T10195] loop6: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 155.887108][T10195] syz.6.2571: attempt to access beyond end of device [ 155.887108][T10195] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 155.909665][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2574'. [ 155.916812][T10195] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 155.921304][T10209] vlan3: entered promiscuous mode [ 155.929256][T10195] syz.6.2571: attempt to access beyond end of device [ 155.929256][T10195] loop6: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 155.939319][T10209] bridge0: entered promiscuous mode [ 155.946935][T10195] syz.6.2571: attempt to access beyond end of device [ 155.946935][T10195] loop6: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 155.964620][T10195] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 155.974771][T10195] syz.6.2571: attempt to access beyond end of device [ 155.974771][T10195] loop6: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 155.992991][T10195] syz.6.2571: attempt to access beyond end of device [ 155.992991][T10195] loop6: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 156.006750][T10195] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 156.015853][T10195] syz.6.2571: attempt to access beyond end of device [ 156.015853][T10195] loop6: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 156.030518][T10195] syz.6.2571: attempt to access beyond end of device [ 156.030518][T10195] loop6: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 156.051358][T10195] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 156.061728][T10195] syz.6.2571: attempt to access beyond end of device [ 156.061728][T10195] loop6: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 156.077392][T10195] syz.6.2571: attempt to access beyond end of device [ 156.077392][T10195] loop6: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 156.096934][T10195] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 156.113015][T10220] loop3: detected capacity change from 0 to 256 [ 156.120778][T10195] Buffer I/O error on dev loop6, logical block 116, lost async page write [ 156.132040][T10195] Buffer I/O error on dev loop6, logical block 88, lost async page write [ 156.141582][T10195] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 156.151538][T10195] Buffer I/O error on dev loop6, logical block 120, lost async page write [ 156.172325][T10195] Buffer I/O error on dev loop6, logical block 124, lost async page write [ 156.609168][T10244] netlink: 'syz.6.2587': attribute type 4 has an invalid length. [ 156.681707][T10248] syzkaller0: entered promiscuous mode [ 156.687307][T10248] syzkaller0: entered allmulticast mode [ 156.837800][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 156.837817][ T28] audit: type=1400 audit(2000000034.748:1445): avc: denied { ioctl } for pid=10257 comm="syz.6.2593" path="socket:[25999]" dev="sockfs" ino=25999 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.900058][T10261] lo speed is unknown, defaulting to 1000 [ 157.394989][T10276] syzkaller0: entered promiscuous mode [ 157.416131][ T28] audit: type=1107 audit(2000000035.346:1446): pid=10279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=' [ 157.416131][ T28] d"S]9/M,i_/U, priority 14 [ 159.061551][T10371] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2631'. [ 159.083085][T10371] 0X: renamed from caif0 [ 159.089491][T10371] tipc: Disabling bearer [ 159.103389][T10371] 0X: entered allmulticast mode [ 159.108873][T10371] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 159.397093][T10395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2640'. [ 159.539510][ T28] audit: type=1326 audit(2000000037.582:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10403 comm="syz.3.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 159.569755][ T28] audit: type=1326 audit(2000000037.582:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10403 comm="syz.3.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 159.596443][ T28] audit: type=1326 audit(2000000037.582:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10403 comm="syz.3.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 159.620457][ T28] audit: type=1326 audit(2000000037.582:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10403 comm="syz.3.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 159.957872][T10412] xt_hashlimit: size too large, truncated to 1048576 [ 160.024824][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2647'. [ 160.033784][T10415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2647'. [ 160.046718][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2647'. [ 160.047006][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.069019][T10415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2647'. [ 160.071752][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.089974][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.099356][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.258773][T10432] loop6: detected capacity change from 0 to 8192 [ 160.306702][ T9809] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 160.314911][ T9809] FAT-fs (loop6): Filesystem has been set read-only [ 160.501996][T10453] lo speed is unknown, defaulting to 1000 [ 160.509296][T10455] xt_hashlimit: size too large, truncated to 1048576 [ 161.063239][T10466] lo speed is unknown, defaulting to 1000 [ 161.238995][T10480] xt_hashlimit: size too large, truncated to 1048576 [ 161.306767][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2671'. [ 161.318968][T10486] bond_slave_0: entered promiscuous mode [ 161.324679][T10486] bond_slave_1: entered promiscuous mode [ 161.332663][T10486] vlan2: entered promiscuous mode [ 161.345464][T10486] bond0: entered promiscuous mode [ 161.377350][T10489] lo speed is unknown, defaulting to 1000 [ 161.409614][T10484] bridge_slave_0 (unregistering): left allmulticast mode [ 161.441029][T10484] bridge_slave_0 (unregistering): left promiscuous mode [ 161.460645][T10484] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.489830][T10493] loop6: detected capacity change from 0 to 512 [ 161.500537][T10493] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.533799][T10492] ip6gre1: entered promiscuous mode [ 161.548081][T10493] EXT4-fs error (device loop6): __ext4_iget:5426: inode #11: block 1: comm syz.6.2675: invalid block [ 161.564664][T10493] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.564890][T10492] ip6gre1: entered allmulticast mode [ 161.614123][T10493] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2675: couldn't read orphan inode 11 (err -117) [ 161.662105][T10488] xt_hashlimit: size too large, truncated to 1048576 [ 161.692680][T10493] loop6: lost filesystem error report for type 5 error -117 [ 161.693786][T10493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.775024][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 161.775041][ T28] audit: type=1326 audit(2000000039.934:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10479 comm="syz.2.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 161.834395][ T28] audit: type=1326 audit(2000000039.934:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10479 comm="syz.2.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 161.896419][ T9809] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.489756][T10548] usb usb8: usbfs: process 10548 (syz.3.2683) did not claim interface 0 before use [ 162.651157][T10557] loop3: detected capacity change from 0 to 128 [ 162.717920][T10562] syzkaller0: entered promiscuous mode [ 162.723722][T10562] syzkaller0: entered allmulticast mode [ 162.883115][T10586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10586 comm=syz.5.2689 [ 163.318871][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2693'. [ 163.416483][T10595] loop6: detected capacity change from 0 to 32768 [ 163.516980][T10595] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 163.527090][T10595] loop6: p1 start 460800 is beyond EOD, truncated [ 163.550370][T10595] loop6: p2 size 83886080 extends beyond EOD, truncated [ 163.562116][T10595] loop6: p5 start 460800 is beyond EOD, truncated [ 163.572605][T10595] loop6: p6 size 83886080 extends beyond EOD, truncated [ 163.671376][T10622] batadv_slave_1: entered promiscuous mode [ 163.683469][ T28] audit: type=1326 audit(2000000041.929:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 163.714133][ T28] audit: type=1326 audit(2000000041.929:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 163.740488][ T28] audit: type=1326 audit(2000000041.929:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 163.807692][ T28] audit: type=1326 audit(2000000041.929:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 163.885957][ T28] audit: type=1326 audit(2000000041.929:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 163.937459][T10628] syzkaller0: entered promiscuous mode [ 163.953901][T10628] syzkaller0: entered allmulticast mode [ 163.976966][T10626] xt_hashlimit: size too large, truncated to 1048576 [ 164.140789][T10635] infiniband syz1: set active [ 164.192128][T10635] infiniband syz1: added syz_tun [ 164.488419][T10635] RDS/IB: syz1: added [ 164.502477][T10635] smc: adding ib device syz1 with port count 1 [ 164.520358][T10635] smc: ib device syz1 port 1 has no pnetid [ 164.849817][T10652] lo speed is unknown, defaulting to 1000 [ 165.121386][T10659] syzkaller0: entered promiscuous mode [ 165.127417][T10659] syzkaller0: entered allmulticast mode [ 165.225363][T10663] syzkaller0: entered promiscuous mode [ 165.232044][T10663] syzkaller0: entered allmulticast mode [ 165.495481][T10669] xt_hashlimit: size too large, truncated to 1048576 [ 166.004703][T10694] bridge0: port 3(ip6gretap0) entered blocking state [ 166.031943][T10694] bridge0: port 3(ip6gretap0) entered disabled state [ 166.057617][T10694] ip6gretap0: entered allmulticast mode [ 166.109664][T10694] ip6gretap0: entered promiscuous mode [ 166.296010][ T347] smc: removing ib device syz1 [ 166.345435][ T6724] syz1: Port: 1 Link DOWN [ 166.476979][T10713] tipc: Enabling of bearer rejected, failed to enable media [ 166.869295][T10702] macsec1: entered promiscuous mode [ 166.894915][T10702] dummy0: entered promiscuous mode [ 166.920035][T10702] macsec1: entered allmulticast mode [ 167.030147][T10702] dummy0: entered allmulticast mode [ 167.043049][T10702] dummy0: left allmulticast mode [ 167.048126][T10702] dummy0: left promiscuous mode [ 167.125495][T10727] xt_hashlimit: size too large, truncated to 1048576 [ 167.817897][T10738] loop3: detected capacity change from 0 to 512 [ 168.041129][T10762] tipc: Enabling of bearer rejected, failed to enable media [ 168.164941][ T28] audit: type=1326 audit(2000000046.642:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10770 comm="syz.6.2740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ef308bf79 code=0x0 [ 168.351377][T10775] xt_hashlimit: size too large, truncated to 1048576 [ 168.887829][T10795] lo speed is unknown, defaulting to 1000 [ 168.968761][T10801] bridge0: entered allmulticast mode [ 168.982152][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2749'. [ 168.993926][T10801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.060014][ T28] audit: type=1326 audit(2000000047.576:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 169.107092][ T28] audit: type=1326 audit(2000000047.608:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 169.159354][ T28] audit: type=1326 audit(2000000047.608:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 169.216720][ T28] audit: type=1326 audit(2000000047.608:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 169.270323][ T28] audit: type=1326 audit(2000000047.608:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 169.294102][ T28] audit: type=1326 audit(2000000047.608:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 169.318748][ T28] audit: type=1326 audit(2000000047.608:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 169.342545][ T28] audit: type=1326 audit(2000000047.608:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 169.366877][ T28] audit: type=1326 audit(2000000047.608:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10805 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 169.404126][T10820] netlink: 'syz.5.2756': attribute type 39 has an invalid length. [ 169.636844][T10830] tipc: Enabled bearer , priority 10 [ 169.794146][T10838] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 169.821898][T10838] SELinux: failed to load policy [ 170.146659][T10860] lo speed is unknown, defaulting to 1000 [ 170.866369][ T5330] tipc: Node number set to 3081406941 [ 170.968472][T10875] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2775'. [ 170.987732][T10884] netlink: 'syz.6.2779': attribute type 24 has an invalid length. [ 171.014300][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2779'. [ 171.069215][T10889] loop3: detected capacity change from 0 to 128 [ 171.323130][T10884] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 171.634039][T10900] lo speed is unknown, defaulting to 1000 [ 171.659372][T10902] loop2: detected capacity change from 0 to 512 [ 171.794444][T10909] 1: renamed from bond_slave_0 [ 171.821815][T10909] sit0: entered allmulticast mode [ 171.957104][T10911] loop3: detected capacity change from 0 to 1024 [ 171.963904][T10911] EXT4-fs: Ignoring removed bh option [ 172.029718][T10914] loop2: detected capacity change from 0 to 128 [ 172.149727][T10922] lo speed is unknown, defaulting to 1000 [ 173.335924][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2797'. [ 173.416003][T10943] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2797'. [ 173.499472][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2797'. [ 173.767686][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 173.767699][ T28] audit: type=1400 audit(2000000052.521:1560): avc: denied { setopt } for pid=10945 comm="syz.6.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.793765][T10946] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2798'. [ 174.932640][T10962] loop3: detected capacity change from 0 to 512 [ 175.002423][T10967] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2804'. [ 175.091889][T10969] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2806'. [ 175.461098][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2806'. [ 175.653588][T10981] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2808'. [ 175.794046][T10988] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10988 comm=syz.6.2811 [ 176.379942][T10999] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10999 comm=syz.3.2814 [ 177.098620][T11021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11021 comm=syz.3.2823 [ 177.104100][ T28] audit: type=1326 audit(2000000056.017:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 177.147858][ T28] audit: type=1400 audit(2000000056.038:1562): avc: denied { write } for pid=11020 comm="syz.3.2823" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.193122][ T28] audit: type=1326 audit(2000000056.059:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 177.218075][ T28] audit: type=1326 audit(2000000056.059:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.5.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f78b3c5bf79 code=0x7ffc0000 [ 177.304067][T11026] loop3: detected capacity change from 0 to 512 [ 177.374092][ T28] audit: type=1400 audit(2000000056.143:1565): avc: denied { connect } for pid=10996 comm="syz.6.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.538931][T11026] loop3: detected capacity change from 0 to 512 [ 177.643343][T11030] loop2: detected capacity change from 0 to 512 [ 177.955042][ T28] audit: type=1326 audit(2000000056.909:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11039 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 179.009960][ T28] audit: type=1326 audit(2000000056.941:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11039 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 179.034125][ T28] audit: type=1326 audit(2000000056.941:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11039 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 179.057866][ T28] audit: type=1326 audit(2000000056.941:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11039 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f64ce40bf79 code=0x7ffc0000 [ 179.260599][T11058] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11058 comm=syz.2.2838 [ 179.541942][ T28] audit: type=1400 audit(2000000058.578:1570): avc: denied { read } for pid=11068 comm="syz.2.2841" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.589589][ T28] audit: type=1400 audit(2000000058.610:1571): avc: denied { open } for pid=11068 comm="syz.2.2841" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.626927][T11071] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2841'. [ 179.644673][T11071] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 179.662251][T11071] loop2: detected capacity change from 0 to 512 [ 179.679610][ T28] audit: type=1400 audit(2000000058.725:1572): avc: denied { write } for pid=11068 comm="syz.2.2841" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.841108][T11078] program syz.2.2844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.030573][ T28] audit: type=1326 audit(2000000059.093:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.1.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 180.085378][ T28] audit: type=1326 audit(2000000059.124:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.1.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 180.367455][ T28] audit: type=1326 audit(2000000059.124:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.1.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 181.098458][ T28] audit: type=1326 audit(2000000059.124:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11079 comm="syz.1.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc197bf79 code=0x7ffc0000 [ 181.141518][T11093] loop2: detected capacity change from 0 to 2048 [ 181.373934][T11102] loop3: detected capacity change from 0 to 512 [ 181.653707][T11102] loop3: detected capacity change from 0 to 512 [ 182.017645][T11120] loop3: detected capacity change from 0 to 512 [ 182.268491][T11120] loop3: detected capacity change from 0 to 512 [ 182.486171][T11127] loop2: detected capacity change from 0 to 512 [ 182.822683][T11127] loop2: detected capacity change from 0 to 512 [ 183.612565][T11144] loop2: detected capacity change from 0 to 512 [ 183.686480][T11149] loop3: detected capacity change from 0 to 512 [ 183.938376][ T28] kauditd_printk_skb: 299 callbacks suppressed [ 183.938390][ T28] audit: type=1326 audit(2000000063.134:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 184.294714][ T3307] ================================================================== [ 184.302837][ T3307] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 184.310305][ T3307] [ 184.312631][ T3307] read-write to 0xffff88811a87ae90 of 8 bytes by task 11154 on cpu 0: [ 184.320790][ T3307] shmem_recalc_inode+0x3f/0x1f0 [ 184.325741][ T3307] shmem_get_folio_gfp+0x7a8/0xd60 [ 184.330873][ T3307] shmem_write_begin+0xfc/0x1f0 [ 184.335726][ T3307] generic_perform_write+0x183/0x490 [ 184.341008][ T3307] shmem_file_write_iter+0xc5/0xf0 [ 184.346132][ T3307] __kernel_write_iter+0x319/0x590 [ 184.351256][ T3307] dump_user_range+0xa7d/0xdb0 [ 184.356025][ T3307] elf_core_dump+0x21a2/0x2330 [ 184.360791][ T3307] coredump_write+0xacf/0xdf0 [ 184.365484][ T3307] vfs_coredump+0x26c7/0x3130 [ 184.370166][ T3307] get_signal+0xd7b/0xf60 [ 184.374501][ T3307] arch_do_signal_or_restart+0x96/0x450 [ 184.380049][ T3307] irqentry_exit+0xf7/0x520 [ 184.384558][ T3307] asm_exc_page_fault+0x26/0x30 [ 184.389424][ T3307] [ 184.391744][ T3307] read to 0xffff88811a87ae90 of 8 bytes by task 3307 on cpu 1: [ 184.399281][ T3307] shmem_getattr+0x41/0x200 [ 184.403779][ T3307] vfs_getattr_nosec+0x146/0x1e0 [ 184.408725][ T3307] vfs_getattr+0x48/0x60 [ 184.412976][ T3307] vfs_statx_path+0x28/0x140 [ 184.417566][ T3307] vfs_statx+0xc4/0x170 [ 184.421730][ T3307] vfs_fstatat+0x118/0x170 [ 184.426146][ T3307] __se_sys_newfstatat+0x55/0x3e0 [ 184.431181][ T3307] __x64_sys_newfstatat+0x55/0x70 [ 184.436212][ T3307] x64_sys_call+0x2c64/0x3020 [ 184.440888][ T3307] do_syscall_64+0x12c/0x370 [ 184.445482][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.451373][ T3307] [ 184.453680][ T3307] value changed: 0x0000000000001bc3 -> 0x0000000000001bc6 [ 184.460774][ T3307] [ 184.463092][ T3307] Reported by Kernel Concurrency Sanitizer on: [ 184.469238][ T3307] CPU: 1 UID: 0 PID: 3307 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 184.478695][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 184.488756][ T3307] ================================================================== [ 184.519228][ T28] audit: type=1326 audit(2000000063.134:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 184.621668][ T28] audit: type=1326 audit(2000000063.134:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 184.661389][T11149] loop3: detected capacity change from 0 to 512 [ 184.695723][ T28] audit: type=1326 audit(2000000063.134:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 184.783186][ T28] audit: type=1326 audit(2000000063.145:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 184.861367][ T28] audit: type=1326 audit(2000000063.145:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 184.910975][ T28] audit: type=1326 audit(2000000063.145:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 184.942298][ T28] audit: type=1326 audit(2000000063.145:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 184.965752][ T28] audit: type=1326 audit(2000000063.187:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6b2bf79 code=0x7ffc0000 [ 184.989348][ T28] audit: type=1326 audit(2000000063.187:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faab6aec84e code=0x7ffc0000