last executing test programs: 27.624439965s ago: executing program 1 (id=421): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) 27.605203236s ago: executing program 1 (id=422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) close_range(r2, r3, 0x0) 27.581252168s ago: executing program 1 (id=423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001d40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xe}}]}}]}, 0x38}}, 0x20040054) 27.498975994s ago: executing program 1 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0xc00, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 27.498500525s ago: executing program 1 (id=425): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 26.668690371s ago: executing program 1 (id=456): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x2fb4f3c603899fe3}) 26.668556232s ago: executing program 32 (id=456): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x2fb4f3c603899fe3}) 1.272966868s ago: executing program 5 (id=1354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x18) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) 1.105134082s ago: executing program 5 (id=1358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) 1.056807896s ago: executing program 5 (id=1361): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff}]}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) 749.22627ms ago: executing program 3 (id=1373): r0 = fsopen(&(0x7f0000000080)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/46, 0x8d) getdents64(r2, 0xfffffffffffffffe, 0x29) 748.73898ms ago: executing program 3 (id=1375): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x18) setitimer(0x2, 0x0, 0x0) 726.274832ms ago: executing program 3 (id=1377): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x1) 711.092003ms ago: executing program 3 (id=1378): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 676.501196ms ago: executing program 3 (id=1380): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@link_local, @random="2059379000", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x9}}}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 589.234743ms ago: executing program 4 (id=1383): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) 538.517527ms ago: executing program 4 (id=1384): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) 523.274288ms ago: executing program 4 (id=1385): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 509.16461ms ago: executing program 4 (id=1386): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0xc) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x2000081) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 505.2291ms ago: executing program 2 (id=1387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 440.616955ms ago: executing program 2 (id=1388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 440.413115ms ago: executing program 2 (id=1389): mount$cgroup(0x0, 0x0, 0x0, 0x10000, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x41) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 440.272815ms ago: executing program 4 (id=1390): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 423.772356ms ago: executing program 4 (id=1392): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mlockall(0x7) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 413.551597ms ago: executing program 2 (id=1393): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) fchownat(r1, &(0x7f0000000000)='./file0\x00', r2, r3, 0x400) 296.467026ms ago: executing program 0 (id=1397): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0xffff, 0xffe0}, {0x10, 0x4}}}, 0x24}}, 0x40084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 252.68377ms ago: executing program 0 (id=1398): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 245.98532ms ago: executing program 0 (id=1399): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) 173.962466ms ago: executing program 5 (id=1400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 169.440747ms ago: executing program 0 (id=1401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) nanosleep(&(0x7f0000000180)={0x77359400}, 0x0) 134.659619ms ago: executing program 5 (id=1402): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 132.91727ms ago: executing program 0 (id=1403): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24004059) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f00000006c0), &(0x7f0000001580)=""/83}, 0x20) 73.696434ms ago: executing program 5 (id=1404): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x305d, 0x20000000, 0x21, 0x0, 0x0) 73.338105ms ago: executing program 0 (id=1405): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) 72.714185ms ago: executing program 3 (id=1406): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, {0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 38.280317ms ago: executing program 2 (id=1407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 0s ago: executing program 2 (id=1408): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) kernel console output (not intermixed with test programs): ot create hsr debugfs directory [ 24.348994][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.365002][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.385179][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.393330][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.445280][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.456900][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.470723][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.483937][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.505998][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.534587][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.544382][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.560316][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.568988][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.577433][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.585565][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.600237][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.607318][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.634366][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.652114][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.659162][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.668802][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.677628][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.686601][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.695784][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.713596][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.720645][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.740907][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.770762][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.782534][ T2331] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.789595][ T2331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.817225][ T2331] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.824322][ T2331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.847084][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.862870][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.877527][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.892131][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.912514][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.921210][ T2331] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.928314][ T2331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.937459][ T2331] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.944485][ T2331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.958160][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.965265][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.976750][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.983866][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.008356][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.021598][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.042876][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.053361][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.097083][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.109245][ T2331] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.116305][ T2331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.125327][ T2331] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.132410][ T2331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.156669][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.186345][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.198696][ T3302] veth0_vlan: entered promiscuous mode [ 25.224508][ T3302] veth1_vlan: entered promiscuous mode [ 25.232540][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.296130][ T3304] veth0_vlan: entered promiscuous mode [ 25.310446][ T3302] veth0_macvtap: entered promiscuous mode [ 25.321040][ T3302] veth1_macvtap: entered promiscuous mode [ 25.333163][ T3304] veth1_vlan: entered promiscuous mode [ 25.347238][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.355724][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.374416][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.383317][ T3305] veth0_vlan: entered promiscuous mode [ 25.390972][ T3305] veth1_vlan: entered promiscuous mode [ 25.403732][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.417608][ T3304] veth0_macvtap: entered promiscuous mode [ 25.427534][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.437234][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.446650][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.457661][ T3304] veth1_macvtap: entered promiscuous mode [ 25.471555][ T3305] veth0_macvtap: entered promiscuous mode [ 25.482934][ T3310] veth0_vlan: entered promiscuous mode [ 25.496886][ T3305] veth1_macvtap: entered promiscuous mode [ 25.521110][ T3310] veth1_vlan: entered promiscuous mode [ 25.528668][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.542746][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.557879][ T3310] veth0_macvtap: entered promiscuous mode [ 25.570048][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.580405][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.596131][ T3312] veth0_vlan: entered promiscuous mode [ 25.606622][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.615847][ T3310] veth1_macvtap: entered promiscuous mode [ 25.624895][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.639892][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.650203][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.665216][ T3312] veth1_vlan: entered promiscuous mode [ 25.672244][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.684051][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.705785][ T3312] veth0_macvtap: entered promiscuous mode [ 25.712355][ T3476] process 'syz.1.8' launched './file0' with NULL argv: empty string added [ 25.731212][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.741193][ T3312] veth1_macvtap: entered promiscuous mode [ 25.761296][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.776633][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.790749][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.805561][ T3485] loop1: detected capacity change from 0 to 128 [ 25.816365][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.828514][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.850923][ T3485] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 25.858747][ T3485] FAT-fs (loop1): Filesystem has been set read-only [ 25.877836][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.894914][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.905367][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.914854][ T3485] syz.1.10: attempt to access beyond end of device [ 25.914854][ T3485] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 25.929539][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.937562][ T3485] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 25.939431][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.946148][ T3485] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 25.964452][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.975660][ T3485] syz.1.10: attempt to access beyond end of device [ 25.975660][ T3485] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 25.998878][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.015718][ T3485] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 26.023209][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.052043][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.063634][ T3485] syz.1.10: attempt to access beyond end of device [ 26.063634][ T3485] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 26.079251][ T3488] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 26.094033][ T3485] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 26.101932][ T3485] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 26.123584][ T3491] syz.1.10: attempt to access beyond end of device [ 26.123584][ T3491] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 26.136756][ T3491] Buffer I/O error on dev loop1, logical block 2065, async page read [ 26.162223][ T3491] syz.1.10: attempt to access beyond end of device [ 26.162223][ T3491] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 26.175355][ T3491] Buffer I/O error on dev loop1, logical block 2066, async page read [ 26.183865][ T3491] syz.1.10: attempt to access beyond end of device [ 26.183865][ T3491] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 26.197046][ T3491] Buffer I/O error on dev loop1, logical block 2067, async page read [ 26.216936][ T3491] syz.1.10: attempt to access beyond end of device [ 26.216936][ T3491] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 26.230083][ T3491] Buffer I/O error on dev loop1, logical block 2068, async page read [ 26.240915][ T3491] syz.1.10: attempt to access beyond end of device [ 26.240915][ T3491] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 26.254075][ T3491] Buffer I/O error on dev loop1, logical block 2069, async page read [ 26.263585][ T3491] syz.1.10: attempt to access beyond end of device [ 26.263585][ T3491] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 26.276731][ T3491] Buffer I/O error on dev loop1, logical block 2070, async page read [ 26.287211][ T3491] syz.1.10: attempt to access beyond end of device [ 26.287211][ T3491] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 26.300321][ T3491] Buffer I/O error on dev loop1, logical block 2071, async page read [ 26.308677][ T3491] Buffer I/O error on dev loop1, logical block 2072, async page read [ 26.316971][ T3485] Buffer I/O error on dev loop1, logical block 2065, async page read [ 26.325407][ T3485] Buffer I/O error on dev loop1, logical block 2066, async page read [ 26.387458][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 26.387470][ T29] audit: type=1400 audit(1756049971.312:123): avc: denied { read } for pid=3510 comm="syz.3.18" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 26.420846][ T29] audit: type=1400 audit(1756049971.312:124): avc: denied { open } for pid=3510 comm="syz.3.18" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 26.444479][ T29] audit: type=1400 audit(1756049971.342:125): avc: denied { create } for pid=3514 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.464178][ T3411] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 26.578917][ T3525] loop4: detected capacity change from 0 to 512 [ 26.599704][ T29] audit: type=1400 audit(1756049971.352:126): avc: denied { setopt } for pid=3514 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.619130][ T29] audit: type=1400 audit(1756049971.392:127): avc: denied { create } for pid=3514 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.639557][ T29] audit: type=1400 audit(1756049971.392:128): avc: denied { write } for pid=3514 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.679511][ T29] audit: type=1326 audit(1756049971.592:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3526 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375d48ebe9 code=0x7ffc0000 [ 26.695305][ T3524] syz.3.24 (3524) used greatest stack depth: 10008 bytes left [ 26.702692][ T29] audit: type=1326 audit(1756049971.592:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3526 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375d48ebe9 code=0x7ffc0000 [ 26.711727][ T3525] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.733418][ T29] audit: type=1326 audit(1756049971.592:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3526 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f375d48ebe9 code=0x7ffc0000 [ 26.733441][ T29] audit: type=1326 audit(1756049971.592:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3526 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375d48ebe9 code=0x7ffc0000 [ 26.746498][ T3525] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 26.753128][ T3529] loop2: detected capacity change from 0 to 1024 [ 26.812301][ T3533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 26.815406][ T3529] ======================================================= [ 26.815406][ T3529] WARNING: The mand mount option has been deprecated and [ 26.815406][ T3529] and is ignored by this kernel. Remove the mand [ 26.815406][ T3529] option from the mount to silence this warning. [ 26.815406][ T3529] ======================================================= [ 26.821033][ T3533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 26.865462][ T3533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 26.905876][ T3525] EXT4-fs (loop4): 1 truncate cleaned up [ 26.914742][ T3529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.949106][ T3533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 26.957875][ T3533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 26.967148][ T3533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 26.970524][ T3525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.996787][ T3529] EXT4-fs (loop2): shut down requested (0) [ 27.030996][ T3533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 27.036880][ T3545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 27.039720][ T3533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 27.039798][ T3533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 27.071871][ T3545] bridge0: port 3(macsec1) entered blocking state [ 27.078389][ T3545] bridge0: port 3(macsec1) entered disabled state [ 27.097722][ T3545] macsec1: entered allmulticast mode [ 27.103961][ T3525] EXT4-fs (loop4): shut down requested (2) [ 27.110041][ T3545] macsec1: left allmulticast mode [ 27.110339][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.262469][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.299126][ T3564] loop3: detected capacity change from 0 to 2048 [ 27.353905][ T3564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.371860][ T3564] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.390953][ T3582] netlink: zone id is out of range [ 27.566229][ T3607] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.41: bg 0: block 345: padding at end of block bitmap is not set [ 27.628533][ T3602] SELinux: failed to load policy [ 27.634296][ T3607] EXT4-fs (loop3): Remounting filesystem read-only [ 27.666742][ T51] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 27.721890][ T3623] loop2: detected capacity change from 0 to 128 [ 27.804756][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.878702][ T3657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.038667][ T3692] loop0: detected capacity change from 0 to 512 [ 28.065303][ T3692] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.79: invalid indirect mapped block 4294967295 (level 1) [ 28.081037][ T3692] EXT4-fs (loop0): Remounting filesystem read-only [ 28.087648][ T3692] EXT4-fs (loop0): 2 truncates cleaned up [ 28.097072][ T3692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.117117][ T3692] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.330526][ T3747] Zero length message leads to an empty skb [ 28.395627][ T3762] loop0: detected capacity change from 0 to 512 [ 28.409702][ T3762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.445010][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.043348][ T3657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.063189][ T3404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3404 comm=kworker/0:4 [ 29.086520][ T3866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 29.106177][ T3866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 29.116484][ T3866] bond0 (unregistering): Released all slaves [ 29.129880][ T3657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.182617][ T3657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.229256][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.241570][ T3885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3885 comm=syz.0.118 [ 29.252943][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.287324][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.303128][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.351049][ T3892] loop3: detected capacity change from 0 to 164 [ 29.377935][ T3892] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 29.404394][ T3892] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 29.566237][ T3902] netlink: 'syz.4.126': attribute type 30 has an invalid length. [ 29.597881][ T51] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.620831][ T51] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.661394][ T51] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.691776][ T51] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.757866][ T3185] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 29.765590][ T3185] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 29.775630][ T3185] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 29.814716][ T3185] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 29.843598][ T3915] fido_id[3915]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 30.123983][ T3933] loop4: detected capacity change from 0 to 512 [ 30.134555][ T3933] EXT4-fs: Ignoring removed orlov option [ 30.145208][ T3933] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 30.160177][ T3933] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 30.170108][ T3937] syzkaller0: entered promiscuous mode [ 30.179915][ T3937] syzkaller0: entered allmulticast mode [ 30.209211][ T3933] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 30.223905][ T3933] EXT4-fs (loop4): 1 orphan inode deleted [ 30.230416][ T3933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.290634][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.323136][ T3942] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 30.330630][ T3942] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 30.637178][ T3964] syzkaller0: entered promiscuous mode [ 30.642694][ T3964] syzkaller0: entered allmulticast mode [ 30.757535][ T3980] loop1: detected capacity change from 0 to 512 [ 30.782906][ T3980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.820956][ T3980] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.853398][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.950545][ T4001] loop1: detected capacity change from 0 to 2048 [ 30.983876][ T4001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.015106][ T4001] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.125361][ T4022] loop2: detected capacity change from 0 to 512 [ 31.251027][ T4022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.337611][ T4026] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.167: bg 0: block 345: padding at end of block bitmap is not set [ 31.359575][ T4031] syz.3.178 uses obsolete (PF_INET,SOCK_PACKET) [ 31.389616][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 31.389630][ T29] audit: type=1326 audit(1756049976.312:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 31.426444][ T4022] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.487932][ T4026] EXT4-fs (loop1): Remounting filesystem read-only [ 31.494650][ T29] audit: type=1326 audit(1756049976.322:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 31.494693][ T158] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 31.517975][ T29] audit: type=1326 audit(1756049976.322:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 31.554793][ T29] audit: type=1326 audit(1756049976.322:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 31.578135][ T29] audit: type=1326 audit(1756049976.322:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 31.601455][ T29] audit: type=1326 audit(1756049976.322:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 31.624665][ T29] audit: type=1326 audit(1756049976.322:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 31.647992][ T29] audit: type=1326 audit(1756049976.322:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 31.671340][ T29] audit: type=1400 audit(1756049976.352:396): avc: denied { name_connect } for pid=4034 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 31.691372][ T29] audit: type=1326 audit(1756049976.392:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 31.779335][ T4042] loop0: detected capacity change from 0 to 512 [ 31.896244][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.905648][ T4042] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.183: bad orphan inode 15 [ 31.932469][ T4042] ext4_test_bit(bit=14, block=18) = 1 [ 31.937861][ T4042] is_bad_inode(inode)=0 [ 31.942065][ T4042] NEXT_ORPHAN(inode)=1023 [ 31.946380][ T4042] max_ino=32 [ 31.949636][ T4042] i_nlink=0 [ 31.953642][ T4042] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.183: corrupted xattr block 19: invalid header [ 31.993108][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.024041][ T4042] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 32.034267][ T4042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 32.062731][ T4042] ext4 filesystem being mounted at /53/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 32.122423][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 32.341908][ T4072] mmap: syz.3.193 (4072) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.517266][ T4083] geneve0: entered allmulticast mode [ 32.534478][ T4085] pim6reg: entered allmulticast mode [ 32.544187][ T4085] pim6reg: left allmulticast mode [ 32.758171][ T4094] syz.0.203 (4094) used greatest stack depth: 9456 bytes left [ 32.792302][ T4100] capability: warning: `syz.3.206' uses deprecated v2 capabilities in a way that may be insecure [ 32.807194][ T4102] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 32.828334][ T4102] SELinux: failed to load policy [ 32.850806][ T4106] loop2: detected capacity change from 0 to 164 [ 32.904965][ T4106] rock: directory entry would overflow storage [ 32.911239][ T4106] rock: sig=0x66, size=4, remaining=3 [ 32.949559][ T4117] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.989909][ T4117] __nla_validate_parse: 15 callbacks suppressed [ 32.989922][ T4117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 33.024314][ T4121] vlan2: entered allmulticast mode [ 33.047150][ T4124] bond1: entered promiscuous mode [ 33.052330][ T4124] bond1: entered allmulticast mode [ 33.062744][ T4124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.072825][ T4124] bond1 (unregistering): Released all slaves [ 33.083006][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.095017][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.140475][ T4134] capability: warning: `syz.2.221' uses 32-bit capabilities (legacy support in use) [ 33.185004][ C0] hrtimer: interrupt took 28743 ns [ 33.338825][ T4160] netlink: 'syz.0.233': attribute type 3 has an invalid length. [ 33.387331][ T4164] bond1: entered promiscuous mode [ 33.392480][ T4164] bond1: entered allmulticast mode [ 33.418470][ T4171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 33.427498][ T4164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.455824][ T4164] bond1 (unregistering): Released all slaves [ 33.620804][ T4189] bridge0: entered promiscuous mode [ 33.636238][ T4189] macsec1: entered promiscuous mode [ 33.652090][ T4189] bridge0: port 3(macsec1) entered blocking state [ 33.658607][ T4189] bridge0: port 3(macsec1) entered disabled state [ 33.699417][ T4189] macsec1: entered allmulticast mode [ 33.704776][ T4189] bridge0: entered allmulticast mode [ 33.728446][ T4189] macsec1: left allmulticast mode [ 33.733514][ T4189] bridge0: left allmulticast mode [ 33.749913][ T4189] bridge0: left promiscuous mode [ 34.190619][ T4229] loop4: detected capacity change from 0 to 2048 [ 34.231055][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 34.241489][ T4229] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.260671][ T4229] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.262: bg 0: block 120: padding at end of block bitmap is not set [ 34.271114][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 34.311847][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 34.320872][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 34.330528][ T3310] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 34.351873][ T4244] loop0: detected capacity change from 0 to 512 [ 34.389397][ T4244] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.406494][ T4244] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.434693][ T4244] EXT4-fs (loop0): 1 truncate cleaned up [ 34.460755][ T4244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.594129][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.632726][ T4267] netlink: 'syz.0.278': attribute type 27 has an invalid length. [ 34.695595][ T4274] loop3: detected capacity change from 0 to 1024 [ 34.702345][ T4278] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.706531][ T4274] EXT4-fs: Ignoring removed bh option [ 34.722417][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.729633][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.730927][ T4274] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 34.761755][ T4274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.767655][ T4267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.837234][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.847651][ T4279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 34.888470][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.922051][ T158] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.940299][ T158] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.951175][ T158] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.963535][ T158] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.977289][ T4286] bond1: entered promiscuous mode [ 34.981858][ T4288] netlink: 7 bytes leftover after parsing attributes in process `syz.3.285'. [ 34.982452][ T4286] bond1: entered allmulticast mode [ 34.996587][ T4286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.996613][ T4288] netlink: 7 bytes leftover after parsing attributes in process `syz.3.285'. [ 35.015527][ T4286] bond1 (unregistering): Released all slaves [ 35.789642][ T4342] batadv0: entered allmulticast mode [ 35.869329][ T4347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.922419][ T4347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.010264][ T4347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.052403][ T4347] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.154757][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.166024][ T41] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.181319][ T41] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.190373][ T41] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.257816][ T4367] loop1: detected capacity change from 0 to 1024 [ 36.264736][ T4367] EXT4-fs: Ignoring removed bh option [ 36.291897][ T4367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.475880][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 36.475893][ T29] audit: type=1400 audit(1756049981.402:636): avc: denied { create } for pid=4380 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 36.520674][ T29] audit: type=1400 audit(1756049981.402:637): avc: denied { write } for pid=4380 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 36.559429][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.591286][ T29] audit: type=1400 audit(1756049981.512:638): avc: denied { write } for pid=4386 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.610554][ T29] audit: type=1400 audit(1756049981.512:639): avc: denied { read } for pid=4386 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.630143][ T29] audit: type=1326 audit(1756049981.542:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 36.653538][ T29] audit: type=1326 audit(1756049981.542:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 36.676771][ T29] audit: type=1326 audit(1756049981.542:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 36.700111][ T29] audit: type=1326 audit(1756049981.542:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 36.723386][ T29] audit: type=1326 audit(1756049981.542:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 36.746759][ T29] audit: type=1326 audit(1756049981.542:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5345aebe9 code=0x7ffc0000 [ 36.957098][ T4421] loop1: detected capacity change from 0 to 1024 [ 36.985310][ T4421] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 37.028305][ T4421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.038717][ T4437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'. [ 37.131896][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.240081][ T4465] bridge0: entered promiscuous mode [ 37.245396][ T4465] macsec1: entered promiscuous mode [ 37.251968][ T4465] bridge0: port 3(macsec1) entered blocking state [ 37.258530][ T4465] bridge0: port 3(macsec1) entered disabled state [ 37.270886][ T4465] macsec1: entered allmulticast mode [ 37.276191][ T4465] bridge0: entered allmulticast mode [ 37.287392][ T4465] macsec1: left allmulticast mode [ 37.292488][ T4465] bridge0: left allmulticast mode [ 37.298519][ T4465] bridge0: left promiscuous mode [ 37.312794][ T4467] netlink: 'syz.3.353': attribute type 27 has an invalid length. [ 37.350737][ T4467] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.357956][ T4467] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.426052][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.437081][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.537288][ T4472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.545453][ T4472] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.555238][ T4472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.572731][ T4485] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 37.600484][ T31] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.612274][ T31] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.629900][ T31] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.652586][ T41] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.823183][ T4507] loop3: detected capacity change from 0 to 128 [ 37.943417][ T4520] binfmt_misc: register: failed to install interpreter file ./file0 [ 37.997683][ T4528] netlink: 'syz.4.380': attribute type 1 has an invalid length. [ 38.062589][ T4528] netlink: 'syz.4.380': attribute type 1 has an invalid length. [ 38.142046][ T4537] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 38.152357][ T4537] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.212273][ T4537] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 38.222627][ T4537] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.302314][ T4537] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 38.312624][ T4537] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.362985][ T4537] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 38.373308][ T4537] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.449095][ T158] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.457334][ T158] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.475367][ T158] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.483640][ T158] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.492185][ T158] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.500530][ T158] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.516253][ T158] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.524525][ T158] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.607170][ T4571] syz.4.398 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.795860][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.405'. [ 38.804833][ T4587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.405'. [ 38.813714][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.405'. [ 38.822709][ T4587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.405'. [ 38.831659][ T4587] netlink: 'syz.4.405': attribute type 6 has an invalid length. [ 38.922652][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 38.986915][ T4597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.409'. [ 38.995873][ T4597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.409'. [ 39.802170][ T4638] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 39.825391][ T4638] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 39.956962][ T4654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 39.978699][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.986243][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.993727][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.001216][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.008627][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.016074][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.023552][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.030940][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.038312][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.045726][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.054137][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz1 [ 40.080191][ T4657] fido_id[4657]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.102290][ T4659] loop2: detected capacity change from 0 to 1024 [ 40.120856][ T4659] EXT4-fs: inline encryption not supported [ 40.137720][ T4659] EXT4-fs: Invalid want_extra_isize 131 [ 40.179656][ T4668] syzkaller1: entered promiscuous mode [ 40.185145][ T4668] syzkaller1: entered allmulticast mode [ 40.480441][ T41] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.521784][ T41] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.582297][ T41] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.641641][ T41] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.701979][ T4723] loop0: detected capacity change from 0 to 164 [ 40.713410][ T4723] Unable to read rock-ridge attributes [ 40.789054][ T41] bridge_slave_1: left allmulticast mode [ 40.794752][ T41] bridge_slave_1: left promiscuous mode [ 40.800425][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.831191][ T41] bridge_slave_0: left allmulticast mode [ 40.836852][ T41] bridge_slave_0: left promiscuous mode [ 40.842606][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.971453][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.984553][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.995712][ T41] bond0 (unregistering): Released all slaves [ 41.006007][ T4713] chnl_net:caif_netlink_parms(): no params data found [ 41.052476][ T41] hsr_slave_0: left promiscuous mode [ 41.058252][ T41] hsr_slave_1: left promiscuous mode [ 41.064173][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.071589][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.081539][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.088920][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.167537][ T41] veth1_macvtap: left promiscuous mode [ 41.180236][ T41] veth0_macvtap: left promiscuous mode [ 41.193968][ T41] veth1_vlan: left promiscuous mode [ 41.207237][ T3310] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 41.218159][ T3310] CPU: 1 UID: 0 PID: 3310 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.218227][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.218236][ T3310] Call Trace: [ 41.218240][ T3310] [ 41.218246][ T3310] __dump_stack+0x1d/0x30 [ 41.218262][ T3310] dump_stack_lvl+0xe8/0x140 [ 41.218277][ T3310] dump_stack+0x15/0x1b [ 41.218365][ T3310] dump_header+0x81/0x220 [ 41.218387][ T3310] oom_kill_process+0x342/0x400 [ 41.218410][ T3310] out_of_memory+0x979/0xb80 [ 41.218460][ T3310] try_charge_memcg+0x5e6/0x9e0 [ 41.218481][ T3310] charge_memcg+0x51/0xc0 [ 41.218535][ T3310] __mem_cgroup_charge+0x28/0xb0 [ 41.218549][ T3310] filemap_add_folio+0x4e/0x1b0 [ 41.218678][ T3310] __filemap_get_folio+0x31e/0x6b0 [ 41.218701][ T3310] filemap_fault+0x41f/0xb40 [ 41.218720][ T3310] __do_fault+0xb9/0x200 [ 41.218738][ T3310] handle_mm_fault+0xf78/0x2c20 [ 41.218761][ T3310] do_user_addr_fault+0x636/0x1090 [ 41.218817][ T3310] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.218836][ T3310] exc_page_fault+0x62/0xa0 [ 41.218853][ T3310] asm_exc_page_fault+0x26/0x30 [ 41.218914][ T3310] RIP: 0033:0x7f71cbab5c24 [ 41.218970][ T3310] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 78 fb e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 89 fa e7 00 48 01 d1 [ 41.218983][ T3310] RSP: 002b:00007ffd8b5572a0 EFLAGS: 00010206 [ 41.218995][ T3310] RAX: 0000001b33124000 RBX: 00000000000000e1 RCX: 000000000000a028 [ 41.219005][ T3310] RDX: 0000000002b1c345 RSI: 00007ffd8b557330 RDI: 0000000000000001 [ 41.219057][ T3310] RBP: 00007ffd8b5572dc R08: 000000000a473c75 R09: 7fffffffffffffff [ 41.219066][ T3310] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 41.219133][ T3310] R13: 00000000000927c0 R14: 0000000000009e37 R15: 00007ffd8b557330 [ 41.219150][ T3310] [ 41.402538][ T3310] memory: usage 307200kB, limit 307200kB, failcnt 183 [ 41.409362][ T3310] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 41.411224][ T41] veth0_vlan: left promiscuous mode [ 41.417231][ T3310] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 41.417245][ T3310] Memory cgroup stats for /syz4: [ 41.469206][ T3310] cache 0 [ 41.477179][ T3310] rss 0 [ 41.480013][ T3310] shmem 0 [ 41.482941][ T3310] mapped_file 0 [ 41.486377][ T3310] dirty 0 [ 41.489332][ T3310] writeback 0 [ 41.492664][ T3310] workingset_refault_anon 24 [ 41.497236][ T3310] workingset_refault_file 0 [ 41.501771][ T3310] swap 192512 [ 41.505043][ T3310] swapcached 0 [ 41.508399][ T3310] pgpgin 10769 [ 41.511797][ T3310] pgpgout 10768 [ 41.515265][ T3310] pgfault 17399 [ 41.518837][ T3310] pgmajfault 17 [ 41.522350][ T3310] inactive_anon 0 [ 41.525962][ T3310] active_anon 0 [ 41.529411][ T3310] inactive_file 0 [ 41.533072][ T3310] active_file 4096 [ 41.536775][ T3310] unevictable 0 [ 41.540238][ T3310] hierarchical_memory_limit 314572800 [ 41.545710][ T3310] hierarchical_memsw_limit 9223372036854771712 [ 41.551860][ T3310] total_cache 0 [ 41.555298][ T3310] total_rss 0 [ 41.558627][ T3310] total_shmem 0 [ 41.562112][ T3310] total_mapped_file 0 [ 41.566167][ T3310] total_dirty 0 [ 41.569652][ T3310] total_writeback 0 [ 41.573469][ T3310] total_workingset_refault_anon 24 [ 41.578624][ T3310] total_workingset_refault_file 0 [ 41.583674][ T3310] total_swap 192512 [ 41.587460][ T3310] total_swapcached 0 [ 41.591351][ T3310] total_pgpgin 10769 [ 41.595234][ T3310] total_pgpgout 10768 [ 41.599275][ T3310] total_pgfault 17399 [ 41.603241][ T3310] total_pgmajfault 17 [ 41.607199][ T3310] total_inactive_anon 0 [ 41.611376][ T3310] total_active_anon 0 [ 41.615340][ T3310] total_inactive_file 0 [ 41.619494][ T3310] total_active_file 4096 [ 41.623745][ T3310] total_unevictable 0 [ 41.627713][ T3310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.460,pid=4704,uid=0 [ 41.642253][ T3310] Memory cgroup out of memory: Killed process 4704 (syz.4.460) total-vm:95680kB, anon-rss:944kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 41.714843][ T41] team0 (unregistering): Port device team_slave_1 removed [ 41.726029][ T41] team0 (unregistering): Port device team_slave_0 removed [ 41.822435][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 41.822447][ T29] audit: type=1400 audit(1756049986.752:814): avc: denied { bind } for pid=4768 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.856370][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.863470][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.886069][ T4713] bridge_slave_0: entered allmulticast mode [ 41.894091][ T4713] bridge_slave_0: entered promiscuous mode [ 41.926754][ T4706] syz.4.460 (4706) used greatest stack depth: 7528 bytes left [ 41.930527][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.941351][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.991747][ T4713] bridge_slave_1: entered allmulticast mode [ 42.008985][ T4713] bridge_slave_1: entered promiscuous mode [ 42.052548][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.088207][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.135209][ T4713] team0: Port device team_slave_0 added [ 42.143620][ T4713] team0: Port device team_slave_1 added [ 42.163943][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.170911][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.196819][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.230877][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.237823][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.263740][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.279176][ T29] audit: type=1400 audit(1756049987.172:815): avc: denied { create } for pid=4810 comm="syz.4.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.291594][ T4811] IPVS: stopping master sync thread 4814 ... [ 42.298443][ T29] audit: type=1400 audit(1756049987.172:816): avc: denied { setopt } for pid=4810 comm="syz.4.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.305262][ T4814] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 42.323584][ T29] audit: type=1400 audit(1756049987.172:817): avc: denied { mount } for pid=4812 comm="syz.2.482" name="/" dev="mqueue" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.367934][ T29] audit: type=1400 audit(1756049987.292:818): avc: denied { read write } for pid=4815 comm="syz.0.483" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.391173][ T29] audit: type=1400 audit(1756049987.292:819): avc: denied { open } for pid=4815 comm="syz.0.483" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.414194][ T29] audit: type=1400 audit(1756049987.292:820): avc: denied { ioctl } for pid=4815 comm="syz.0.483" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.473500][ T4713] hsr_slave_0: entered promiscuous mode [ 42.497213][ T4713] hsr_slave_1: entered promiscuous mode [ 42.503444][ T4822] tipc: Started in network mode [ 42.508408][ T4822] tipc: Node identity 56f60a0e7068, cluster identity 4711 [ 42.515688][ T4822] tipc: Enabled bearer , priority 0 [ 42.570069][ T4822] tipc: Disabling bearer [ 42.623568][ T29] audit: type=1326 audit(1756049987.552:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71cbbdebe9 code=0x7ffc0000 [ 42.646883][ T29] audit: type=1326 audit(1756049987.552:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71cbbdebe9 code=0x7ffc0000 [ 42.670121][ T29] audit: type=1326 audit(1756049987.552:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f71cbbdebe9 code=0x7ffc0000 [ 42.788915][ T4713] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.821208][ T4713] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.835433][ T4713] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.850896][ T4870] netlink: 'syz.2.501': attribute type 10 has an invalid length. [ 42.875540][ T4713] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.893427][ T4870] dummy0: entered promiscuous mode [ 42.899117][ T4870] bridge0: port 3(dummy0) entered blocking state [ 42.905622][ T4870] bridge0: port 3(dummy0) entered disabled state [ 42.934790][ T4881] loop4: detected capacity change from 0 to 512 [ 42.935793][ T4870] dummy0: entered allmulticast mode [ 42.977763][ T4870] bridge0: port 3(dummy0) entered blocking state [ 42.984205][ T4870] bridge0: port 3(dummy0) entered forwarding state [ 42.997741][ T4881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.019881][ T4881] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.058356][ T4902] loop3: detected capacity change from 0 to 256 [ 43.095949][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.110811][ T4906] 9pnet: p9_errstr2errno: server reported unknown error [ 43.146057][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.153201][ T4907] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 43.171303][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.178491][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.214742][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.221835][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.329397][ T4894] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 43.335371][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.387590][ T4894] EXT4-fs (loop4): Remounting filesystem read-only [ 43.449333][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.568463][ T4958] netlink: 'syz.4.523': attribute type 14 has an invalid length. [ 43.602538][ T4961] netlink: 'syz.0.524': attribute type 13 has an invalid length. [ 43.619371][ T4958] netlink: 'syz.4.523': attribute type 14 has an invalid length. [ 43.632556][ T4713] veth0_vlan: entered promiscuous mode [ 43.721801][ T4713] veth1_vlan: entered promiscuous mode [ 43.770267][ T4713] veth0_macvtap: entered promiscuous mode [ 43.777418][ T4713] veth1_macvtap: entered promiscuous mode [ 43.794617][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.806102][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.823018][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.832824][ T4969] netlink: 'syz.4.528': attribute type 2 has an invalid length. [ 43.840614][ T4969] netlink: 'syz.4.528': attribute type 1 has an invalid length. [ 43.848230][ T4969] __nla_validate_parse: 11 callbacks suppressed [ 43.848241][ T4969] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.528'. [ 43.869900][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.878597][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.890640][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.006368][ T4980] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.068085][ T4980] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.113499][ T4980] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.186624][ T4989] loop5: detected capacity change from 0 to 1024 [ 44.216478][ T4989] EXT4-fs: Ignoring removed nobh option [ 44.222981][ T4980] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.235361][ T4989] EXT4-fs: Ignoring removed bh option [ 44.272009][ T4989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.284742][ T4989] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.296842][ T4994] loop3: detected capacity change from 0 to 128 [ 44.312838][ T1659] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.322693][ T4994] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.332599][ T1659] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.343148][ T1659] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.343494][ T4994] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.352225][ T1659] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.413514][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.454549][ T4713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.565886][ T5015] loop3: detected capacity change from 0 to 1024 [ 44.581397][ T5015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.847039][ T5033] netlink: 'syz.4.548': attribute type 13 has an invalid length. [ 44.915034][ T5033] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.922314][ T5033] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.957085][ T5025] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 44.992863][ T5033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.004632][ T5043] SELinux: failed to load policy [ 45.009927][ T5033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.047597][ T31] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.056137][ T31] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.068731][ T31] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.077192][ T31] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.091141][ T31] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.091511][ T5050] loop5: detected capacity change from 0 to 1024 [ 45.099670][ T31] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.115695][ T31] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.122719][ T5050] EXT4-fs: Ignoring removed oldalloc option [ 45.124157][ T31] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.138820][ T5050] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 45.164182][ T5050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.217499][ T4713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.304464][ T5063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5063 comm=syz.5.559 [ 45.347390][ T5065] 9pnet: p9_errstr2errno: server reported unknown error [ 45.424833][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.540244][ T5085] loop3: detected capacity change from 0 to 512 [ 45.558969][ T5085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.603758][ T5085] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.616915][ T5090] loop2: detected capacity change from 0 to 512 [ 45.675993][ T5090] EXT4-fs (loop2): too many log groups per flexible block group [ 45.683697][ T5090] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 45.703769][ T5090] EXT4-fs (loop2): mount failed [ 45.769908][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.782646][ T5101] loop2: detected capacity change from 0 to 512 [ 45.820346][ T5101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.871333][ T5101] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.944275][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.012464][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 46.023744][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 46.110281][ T5137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 46.162895][ T5145] netlink: 80 bytes leftover after parsing attributes in process `syz.0.595'. [ 46.270376][ T5155] SELinux: failed to load policy [ 46.325994][ T5163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 46.389906][ T5171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.607'. [ 46.529061][ T5178] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 46.553270][ T5180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'. [ 46.750673][ T5196] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 46.838130][ T5205] netlink: 'syz.3.622': attribute type 7 has an invalid length. [ 46.845885][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 46.888502][ T29] kauditd_printk_skb: 902 callbacks suppressed [ 46.888517][ T29] audit: type=1326 audit(1756049991.812:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a954ebe9 code=0x7ffc0000 [ 46.918105][ T29] audit: type=1326 audit(1756049991.812:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a954ebe9 code=0x7ffc0000 [ 46.941171][ T29] audit: type=1326 audit(1756049991.842:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f40a954ebe9 code=0x7ffc0000 [ 46.964159][ T29] audit: type=1326 audit(1756049991.842:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a954ebe9 code=0x7ffc0000 [ 46.987056][ T29] audit: type=1326 audit(1756049991.842:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a954ebe9 code=0x7ffc0000 [ 47.010047][ T29] audit: type=1326 audit(1756049991.842:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f40a954ebe9 code=0x7ffc0000 [ 47.039382][ T29] audit: type=1326 audit(1756049991.962:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a954ebe9 code=0x7ffc0000 [ 47.062364][ T29] audit: type=1326 audit(1756049991.962:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a954ebe9 code=0x7ffc0000 [ 47.093950][ T5209] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.250891][ T5227] loop4: detected capacity change from 0 to 1024 [ 47.262383][ T5209] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.275214][ T5229] loop3: detected capacity change from 0 to 1024 [ 47.287060][ T3293] udevd[3293]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 47.300828][ T5227] EXT4-fs: Ignoring removed oldalloc option [ 47.311853][ T5209] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.314083][ T3296] udevd[3296]: symlink '../../loop3' '/dev/disk/by-diskseq/97.tmp-b7:3' failed: Read-only file system [ 47.350486][ T5229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.365481][ T5209] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.376615][ T3293] udevd[3293]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 47.392026][ T5229] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.403402][ T5227] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 47.414178][ T3296] udevd[3296]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 47.432775][ T3296] udevd[3296]: symlink '../../loop3' '/dev/disk/by-diskseq/97.tmp-b7:3' failed: Read-only file system [ 47.434579][ T41] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.460087][ T3296] udevd[3296]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 47.480324][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.491803][ T5227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.514417][ T41] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.538600][ T3293] udevd[3293]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 47.564946][ T41] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.575568][ T2331] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.576431][ T3293] udevd[3293]: symlink '../../loop3' '/dev/disk/by-diskseq/97.tmp-b7:3' failed: Read-only file system [ 47.598466][ T3293] udevd[3293]: symlink '../../loop3' '/dev/disk/by-diskseq/97.tmp-b7:3' failed: Read-only file system [ 47.613055][ T3293] udevd[3293]: symlink '../../loop3' '/dev/disk/by-diskseq/98.tmp-b7:3' failed: Read-only file system [ 47.614462][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.686624][ T5246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 47.721898][ T5246] macsec1: entered allmulticast mode [ 47.727219][ T5246] bridge0: entered allmulticast mode [ 47.749506][ T5246] bridge0: port 3(macsec1) entered blocking state [ 47.755971][ T5246] bridge0: port 3(macsec1) entered disabled state [ 47.869252][ T5246] bridge0: left allmulticast mode [ 48.045438][ T5286] loop0: detected capacity change from 0 to 512 [ 48.067932][ T5287] netlink: 'syz.5.654': attribute type 3 has an invalid length. [ 48.101016][ T5286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.129331][ T5286] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.142288][ T5296] netlink: 'syz.5.656': attribute type 1 has an invalid length. [ 48.177266][ T29] audit: type=1400 audit(1756049993.102:1734): avc: denied { write } for pid=5301 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 48.211541][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.326223][ T5314] loop5: detected capacity change from 0 to 736 [ 48.438454][ T29] audit: type=1400 audit(1756049993.362:1735): avc: denied { setopt } for pid=5319 comm="syz.5.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.486545][ T5326] sd 0:0:1:0: device reset [ 48.627392][ T3538] printk: udevd: 35 output lines suppressed due to ratelimiting [ 48.665830][ T5350] syzkaller0: entered promiscuous mode [ 48.671359][ T5350] syzkaller0: entered allmulticast mode [ 48.769071][ T5359] netem: change failed [ 48.859669][ T5372] netlink: 'syz.0.690': attribute type 7 has an invalid length. [ 48.867394][ T5372] __nla_validate_parse: 8 callbacks suppressed [ 48.867406][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 48.978725][ T5383] netlink: 'syz.0.694': attribute type 1 has an invalid length. [ 48.994677][ T5383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.114436][ T5403] IPVS: Error connecting to the multicast addr [ 49.384742][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 49.573579][ T5505] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 49.573579][ T5505] program syz.3.718 not setting count and/or reply_len properly [ 49.613281][ T5507] loop3: detected capacity change from 0 to 512 [ 49.623891][ T5507] EXT4-fs (loop3): too many log groups per flexible block group [ 49.631670][ T5507] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 49.643407][ T5507] EXT4-fs (loop3): mount failed [ 49.744349][ T5521] loop3: detected capacity change from 0 to 512 [ 49.757576][ T5521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.772722][ T5521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.786255][ T5521] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.800534][ T5525] loop4: detected capacity change from 0 to 1024 [ 49.802416][ T5521] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.725: Failed to acquire dquot type 1 [ 49.847182][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.237711][ T5566] loop2: detected capacity change from 0 to 512 [ 50.244708][ T5566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.261350][ T5566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.273996][ T5566] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.298891][ T5572] netlink: 'syz.4.747': attribute type 1 has an invalid length. [ 50.310480][ T5566] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.745: Failed to acquire dquot type 1 [ 50.322840][ T5572] 8021q: adding VLAN 0 to HW filter on device bond2 [ 50.340099][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.534630][ T5601] loop4: detected capacity change from 0 to 512 [ 50.541310][ T5601] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.551579][ T5601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.564461][ T5601] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.578767][ T5601] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.760: Failed to acquire dquot type 1 [ 50.601583][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.658723][ T5609] loop4: detected capacity change from 0 to 8192 [ 50.919785][ T5628] loop4: detected capacity change from 0 to 1024 [ 50.934226][ T5628] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.940806][ T5628] EXT4-fs: Ignoring removed bh option [ 50.970306][ T5628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.987630][ T5628] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 51.020140][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.042782][ T5639] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5639 comm=syz.4.775 [ 51.085233][ T3404] hid_parser_main: 18 callbacks suppressed [ 51.085260][ T3404] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.098490][ T3404] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.105866][ T3404] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.113243][ T3404] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.120660][ T3404] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.128027][ T3404] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.135444][ T3404] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.142983][ T3404] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.150409][ T3404] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.157807][ T3404] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.180310][ T3404] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 51.193062][ T5646] SELinux: failed to load policy [ 51.470936][ T5664] netlink: 'syz.4.786': attribute type 27 has an invalid length. [ 51.521264][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.531317][ T5664] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.551948][ T5664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.891227][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 51.891240][ T29] audit: type=1326 audit(1756049996.822:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f375d48ebe9 code=0x7ffc0000 [ 51.957247][ T29] audit: type=1326 audit(1756049996.852:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375d48ebe9 code=0x7ffc0000 [ 51.981026][ T29] audit: type=1326 audit(1756049996.852:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375d48ebe9 code=0x7ffc0000 [ 52.004320][ T29] audit: type=1400 audit(1756049996.862:1857): avc: denied { read } for pid=5683 comm="syz.4.796" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.028501][ T29] audit: type=1400 audit(1756049996.862:1858): avc: denied { open } for pid=5683 comm="syz.4.796" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.053065][ T29] audit: type=1400 audit(1756049996.862:1859): avc: denied { ioctl } for pid=5683 comm="syz.4.796" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.130945][ T3305] block device autoloading is deprecated and will be removed. [ 52.142870][ T5695] loop5: detected capacity change from 0 to 1024 [ 52.180713][ T5695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.201108][ T29] audit: type=1400 audit(1756049997.132:1860): avc: denied { read } for pid=5700 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 52.229438][ T5707] serio: Serial port ptm0 [ 52.239030][ T5695] SELinux: Context @ is not valid (left unmapped). [ 52.248319][ T29] audit: type=1400 audit(1756049997.162:1861): avc: denied { append } for pid=5694 comm="syz.5.802" path="/35/file1/blkio.bfq.time_recursive" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.272920][ T29] audit: type=1400 audit(1756049997.182:1862): avc: denied { relabelto } for pid=5694 comm="syz.5.802" name="blkio.bfq.time_recursive" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 52.310809][ T4713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.356069][ T29] audit: type=1326 audit(1756049997.282:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5713 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375d48ebe9 code=0x7ffc0000 [ 52.495285][ T5746] loop0: detected capacity change from 0 to 1024 [ 52.903764][ T5763] netlink: zone id is out of range [ 52.909256][ T5763] netlink: zone id is out of range [ 52.915389][ T5763] netlink: zone id is out of range [ 52.941701][ T5767] netlink: 'syz.0.830': attribute type 1 has an invalid length. [ 52.960685][ T5769] netlink: 'syz.0.831': attribute type 4 has an invalid length. [ 53.032589][ T5784] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 53.047386][ T5784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 53.078965][ T5784] bond3: (slave gretap1): making interface the new active one [ 53.087532][ T5784] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 53.208692][ T5807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.848'. [ 53.555722][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.873'. [ 53.565899][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.873'. [ 53.602443][ T5864] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 53.721571][ T5892] loop3: detected capacity change from 0 to 128 [ 53.784083][ T5901] loop0: detected capacity change from 0 to 1024 [ 53.821324][ T5901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.838683][ T5892] bio_check_eod: 19649 callbacks suppressed [ 53.838695][ T5892] syz.3.887: attempt to access beyond end of device [ 53.838695][ T5892] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 53.859114][ T5892] syz.3.887: attempt to access beyond end of device [ 53.859114][ T5892] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 53.873506][ T5892] syz.3.887: attempt to access beyond end of device [ 53.873506][ T5892] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 53.887527][ T5892] syz.3.887: attempt to access beyond end of device [ 53.887527][ T5892] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 53.901217][ T5892] syz.3.887: attempt to access beyond end of device [ 53.901217][ T5892] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 53.919710][ T5892] syz.3.887: attempt to access beyond end of device [ 53.919710][ T5892] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 53.934721][ T5892] syz.3.887: attempt to access beyond end of device [ 53.934721][ T5892] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 53.948156][ T5892] syz.3.887: attempt to access beyond end of device [ 53.948156][ T5892] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 53.961624][ T5892] syz.3.887: attempt to access beyond end of device [ 53.961624][ T5892] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 53.972448][ T5901] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.892: Allocating blocks 449-513 which overlap fs metadata [ 53.975163][ T5892] syz.3.887: attempt to access beyond end of device [ 53.975163][ T5892] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 54.056341][ T5921] SELinux: security_context_str_to_sid () failed with errno=-22 [ 54.060455][ T5900] EXT4-fs (loop0): pa ffff88810770d150: logic 48, phys. 177, len 21 [ 54.072207][ T5900] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 54.090263][ T5923] loop4: detected capacity change from 0 to 4096 [ 54.100857][ T5923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.126093][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.157315][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.192349][ T5936] loop0: detected capacity change from 0 to 1024 [ 54.225821][ T5936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.312996][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.324067][ T5958] netlink: 'syz.3.914': attribute type 4 has an invalid length. [ 54.337493][ T5954] hub 8-0:1.0: USB hub found [ 54.342332][ T5954] hub 8-0:1.0: 8 ports detected [ 54.513712][ T23] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=23 comm=kworker/1:0 [ 54.529070][ T5980] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 54.682126][ T6001] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 54.710330][ T6005] netlink: 'syz.5.934': attribute type 1 has an invalid length. [ 54.723906][ T6005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.743181][ T6005] bond1: (slave gretap1): making interface the new active one [ 54.751797][ T6005] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 54.862549][ T6022] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 54.873566][ T6021] IPVS: stopping master sync thread 6022 ... [ 55.029779][ T6040] bridge0: entered promiscuous mode [ 55.035087][ T6040] macsec1: entered promiscuous mode [ 55.041528][ T6040] bridge0: port 4(macsec1) entered blocking state [ 55.047975][ T6040] bridge0: port 4(macsec1) entered disabled state [ 55.056070][ T6040] macsec1: entered allmulticast mode [ 55.061422][ T6040] bridge0: entered allmulticast mode [ 55.067532][ T6040] macsec1: left allmulticast mode [ 55.072599][ T6040] bridge0: left allmulticast mode [ 55.079648][ T6040] bridge0: left promiscuous mode [ 55.131726][ T1092] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.299598][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 55.308399][ T6067] netlink: 'syz.3.958': attribute type 15 has an invalid length. [ 55.320525][ T6067] vxlan0: entered promiscuous mode [ 55.326427][ T5445] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.336353][ T5445] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.364063][ T5445] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.375629][ T5445] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.462278][ T6081] loop2: detected capacity change from 0 to 512 [ 55.810744][ T6099] netlink: 'syz.2.977': attribute type 1 has an invalid length. [ 55.824758][ T6099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.846088][ T6099] bond1: (slave gretap1): making interface the new active one [ 55.855278][ T6099] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 56.144132][ T6123] netlink: 'syz.0.987': attribute type 1 has an invalid length. [ 56.152036][ T6123] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.987'. [ 56.161331][ T6124] loop2: detected capacity change from 0 to 512 [ 56.168959][ T6124] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.210220][ T6128] netlink: 104 bytes leftover after parsing attributes in process `syz.0.989'. [ 56.230407][ T6124] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.984: bg 0: block 4: invalid block bitmap [ 56.290834][ T6124] EXT4-fs (loop2): Remounting filesystem read-only [ 56.299642][ T6124] EXT4-fs (loop2): 1 truncate cleaned up [ 56.307173][ T6124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.391735][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.562061][ T6147] loop3: detected capacity change from 0 to 32768 [ 56.670410][ T6171] SELinux: Context system_u:object_r:ksm_device_t:s0 is not valid (left unmapped). [ 56.735076][ T6180] loop3: detected capacity change from 0 to 512 [ 56.742435][ T6180] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.749746][ T6180] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.765624][ T6180] EXT4-fs (loop3): 1 truncate cleaned up [ 56.772373][ T6180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.801001][ T6189] netlink: 'syz.2.1012': attribute type 29 has an invalid length. [ 56.811768][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.821476][ T6189] netlink: 'syz.2.1012': attribute type 29 has an invalid length. [ 56.831774][ T6189] netlink: 'syz.2.1012': attribute type 29 has an invalid length. [ 56.850866][ T6193] loop3: detected capacity change from 0 to 512 [ 56.852643][ T6189] netlink: 'syz.2.1012': attribute type 29 has an invalid length. [ 56.871779][ T6193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.884903][ T6193] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.902267][ T6199] loop5: detected capacity change from 0 to 512 [ 56.909291][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.942302][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 56.942314][ T29] audit: type=1400 audit(1756050001.872:2291): avc: denied { create } for pid=6203 comm="syz.3.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 57.055747][ T29] audit: type=1400 audit(1756050001.982:2292): avc: denied { read append } for pid=6211 comm="syz.2.1022" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.080000][ T29] audit: type=1400 audit(1756050001.982:2293): avc: denied { open } for pid=6211 comm="syz.2.1022" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.104110][ T29] audit: type=1400 audit(1756050001.992:2294): avc: denied { ioctl } for pid=6211 comm="syz.2.1022" path="/newroot/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.142815][ T29] audit: type=1400 audit(1756050002.072:2295): avc: denied { create } for pid=6215 comm="syz.2.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.163857][ T29] audit: type=1400 audit(1756050002.092:2296): avc: denied { bind } for pid=6215 comm="syz.2.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.188571][ T29] audit: type=1326 audit(1756050002.112:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a954ebe9 code=0x7ffc0000 [ 57.212142][ T29] audit: type=1326 audit(1756050002.112:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a954ebe9 code=0x7ffc0000 [ 57.212168][ T29] audit: type=1326 audit(1756050002.112:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40a954ebe9 code=0x7ffc0000 [ 57.212190][ T29] audit: type=1326 audit(1756050002.112:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a954ebe9 code=0x7ffc0000 [ 57.316475][ T6224] netlink: 'syz.4.1026': attribute type 1 has an invalid length. [ 57.336420][ T6224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 57.369478][ T6224] bond3: (slave gretap1): making interface the new active one [ 57.377985][ T6224] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 57.643036][ T36] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=36 comm=kworker/1:1 [ 57.657032][ T6262] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 58.098920][ T6290] loop3: detected capacity change from 0 to 1024 [ 58.110843][ T6290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.132780][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.199342][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 58.208247][ T6298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1059'. [ 58.217613][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 58.226506][ T6298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1059'. [ 58.380791][ T3305] block device autoloading is deprecated and will be removed. [ 59.011621][ T6400] loop0: detected capacity change from 0 to 1024 [ 59.018592][ T6400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.028600][ T6400] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 59.036804][ T6400] System zones: 0-1, 3-36 [ 59.043110][ T6400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.073878][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.131678][ T6422] loop5: detected capacity change from 0 to 128 [ 59.151078][ T6422] bio_check_eod: 66 callbacks suppressed [ 59.151090][ T6422] syz.5.1111: attempt to access beyond end of device [ 59.151090][ T6422] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 59.173656][ T6422] syz.5.1111: attempt to access beyond end of device [ 59.173656][ T6422] loop5: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 59.187192][ T6422] buffer_io_error: 19646 callbacks suppressed [ 59.187205][ T6422] Buffer I/O error on dev loop5, logical block 72, lost async page write [ 59.221419][ T6425] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1124'. [ 59.623961][ T6477] serio: Serial port ttyS3 [ 59.815331][ T6500] loop4: detected capacity change from 0 to 512 [ 59.850730][ T6500] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.865954][ T6500] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1157: bg 0: block 4: invalid block bitmap [ 59.871523][ T6502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1149'. [ 59.878950][ T6500] EXT4-fs (loop4): Remounting filesystem read-only [ 59.894544][ T6500] EXT4-fs (loop4): 1 truncate cleaned up [ 59.900790][ T6500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.996977][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.101070][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1161'. [ 60.610401][ T6584] netlink: 'syz.2.1188': attribute type 30 has an invalid length. [ 60.620083][ T6585] __nla_validate_parse: 2 callbacks suppressed [ 60.620097][ T6585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1178'. [ 60.662363][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1191'. [ 60.673273][ T6587] netlink: 'syz.5.1189': attribute type 3 has an invalid length. [ 60.680271][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1191'. [ 60.681073][ T6587] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1189'. [ 60.733101][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1191'. [ 60.791863][ T6607] loop3: detected capacity change from 0 to 2048 [ 60.842490][ T6607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.885762][ T6607] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1196: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 60.985698][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.995097][ T6621] loop0: detected capacity change from 0 to 512 [ 61.009235][ T6621] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.055418][ T6621] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1204: bg 0: block 4: invalid block bitmap [ 61.097693][ T6621] EXT4-fs (loop0): Remounting filesystem read-only [ 61.104680][ T6621] EXT4-fs (loop0): 1 truncate cleaned up [ 61.111035][ T6621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.137873][ T6650] loop5: detected capacity change from 0 to 1024 [ 61.160523][ T6650] EXT4-fs: Ignoring removed oldalloc option [ 61.168228][ T6650] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 61.169545][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.199366][ T6650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.320435][ T4713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.338094][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1225'. [ 61.383615][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1223'. [ 61.419829][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 61.426276][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.434101][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.441935][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.449758][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.457574][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.465401][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.473226][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.481036][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.488857][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.496668][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.504495][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.512311][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.520131][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.527924][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.535754][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.543575][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.551403][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.559332][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.567164][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.575004][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.582852][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.590675][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.598514][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.606324][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.614153][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.621969][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.629810][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.637628][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.645444][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.653267][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.661089][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.668898][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.676734][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.684537][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.692364][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.700175][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.707957][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.715753][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.723572][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.731365][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.739184][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.746973][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.754795][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.762597][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.770409][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.778193][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.786003][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.793821][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.801649][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.809456][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.817237][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.825030][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.832842][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.840646][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.848461][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.856253][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.864070][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.871888][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.879690][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.887485][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.895293][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.903183][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.910987][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.918795][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.926618][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.934438][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.942942][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.950765][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.958546][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.966340][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.974153][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.981949][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 61.989765][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 61.997557][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.005407][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.013214][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.021020][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.028823][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.036639][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.044471][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.052275][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.060078][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.067869][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.075682][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.083524][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.091331][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.099194][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.106986][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.114809][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.122627][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.130451][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.138244][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.146061][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.153906][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.161725][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.169523][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.177310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.185104][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.192954][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.200750][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.208551][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.216352][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.224176][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.231976][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.239807][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.247603][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.255448][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.263259][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.271082][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.278871][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.286715][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.294552][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.302378][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.310179][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.317981][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.325793][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.333609][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.341402][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.349213][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.357008][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.364867][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.372668][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.380576][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.388365][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.396215][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.404030][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.411861][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.419681][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.427484][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.435280][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.443101][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.450897][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.458705][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.466515][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.474358][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.482153][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.489961][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.497754][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.505589][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.513401][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.521229][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.529032][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.536867][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.544674][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.552493][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.560314][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.568127][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.575927][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.583751][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.591579][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.599403][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.607193][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.615022][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.622825][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.630652][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.638444][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.646261][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.654064][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.661893][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.669699][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.677570][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.685382][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.693210][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.701017][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.708846][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.716650][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.724465][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.732360][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.740172][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.747962][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.755800][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.763603][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.771409][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.779219][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.787026][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.794848][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.802665][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.810463][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.818269][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.826083][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.833894][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.841700][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.849552][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.857355][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.865173][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.872975][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.880817][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.888607][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.896411][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.904217][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.912110][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.919937][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.927734][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 62.935531][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 62.966483][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 62.966495][ T29] audit: type=1400 audit(1756050007.892:2501): avc: denied { name_bind } for pid=6684 comm="syz.4.1231" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 63.006719][ T29] audit: type=1400 audit(1756050007.932:2502): avc: denied { name_connect } for pid=6684 comm="syz.4.1231" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 63.076187][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.086004][ T29] audit: type=1400 audit(1756050008.002:2503): avc: denied { write } for pid=6699 comm="syz.2.1238" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.109195][ T29] audit: type=1400 audit(1756050008.002:2504): avc: denied { ioctl } for pid=6699 comm="syz.2.1238" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.137118][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.150338][ T6703] loop4: detected capacity change from 0 to 512 [ 63.159065][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1239'. [ 63.171439][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1239'. [ 63.171686][ T6703] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1240: corrupted in-inode xattr: invalid ea_ino [ 63.194299][ T6703] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1240: couldn't read orphan inode 15 (err -117) [ 63.207087][ T6703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.226437][ T29] audit: type=1400 audit(1756050008.152:2505): avc: denied { bind } for pid=6708 comm="syz.5.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.245935][ T29] audit: type=1400 audit(1756050008.152:2506): avc: denied { listen } for pid=6708 comm="syz.5.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.265654][ T29] audit: type=1400 audit(1756050008.152:2507): avc: denied { setopt } for pid=6708 comm="syz.5.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.285201][ T6713] loop3: detected capacity change from 0 to 512 [ 63.285564][ T6713] EXT4-fs: Ignoring removed oldalloc option [ 63.291639][ T29] audit: type=1400 audit(1756050008.152:2508): avc: denied { write } for pid=6708 comm="syz.5.1242" path="socket:[18687]" dev="sockfs" ino=18687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.303889][ T6713] EXT4-fs (loop3): 1 truncate cleaned up [ 63.332860][ T6710] netlink: 'syz.0.1243': attribute type 10 has an invalid length. [ 63.340929][ T6713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.341703][ T6710] team0: Device hsr_slave_0 failed to register rx_handler [ 63.373577][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.436613][ T29] audit: type=1400 audit(1756050008.352:2509): avc: denied { setattr } for pid=6712 comm="syz.3.1244" path="/226/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.466452][ T29] audit: type=1400 audit(1756050008.392:2510): avc: denied { connect } for pid=6726 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.516235][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.533357][ T6734] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 63.856284][ T6776] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1270'. [ 63.898491][ T6784] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 64.164308][ T6814] loop2: detected capacity change from 0 to 128 [ 64.174294][ T6814] FAT-fs (loop2): Directory bread(block 32) failed [ 64.181114][ T6814] FAT-fs (loop2): Directory bread(block 33) failed [ 64.187690][ T6814] FAT-fs (loop2): Directory bread(block 34) failed [ 64.194286][ T6814] FAT-fs (loop2): Directory bread(block 35) failed [ 64.200944][ T6814] FAT-fs (loop2): Directory bread(block 36) failed [ 64.207510][ T6814] FAT-fs (loop2): Directory bread(block 37) failed [ 64.215633][ T6814] FAT-fs (loop2): Directory bread(block 38) failed [ 64.222329][ T6814] FAT-fs (loop2): Directory bread(block 39) failed [ 64.230441][ T6814] FAT-fs (loop2): Directory bread(block 40) failed [ 64.230488][ T6816] loop4: detected capacity change from 0 to 764 [ 64.230566][ T6814] FAT-fs (loop2): Directory bread(block 41) failed [ 64.237399][ T6816] iso9660: Unknown parameter '0xffffffffffffffff' [ 64.275031][ T6814] syz.2.1288: attempt to access beyond end of device [ 64.275031][ T6814] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 64.288683][ T6814] FAT-fs (loop2): Filesystem has been set read-only [ 64.295472][ T6814] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 64.488724][ T6827] pim6reg: entered allmulticast mode [ 64.497605][ T6827] pim6reg: left allmulticast mode [ 64.498325][ T6829] loop2: detected capacity change from 0 to 512 [ 64.510268][ T6829] EXT4-fs (loop2): filesystem is read-only [ 64.516261][ T6829] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 64.528090][ T6829] EXT4-fs (loop2): filesystem is read-only [ 64.534425][ T6829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 64.569010][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.697416][ T6853] loop5: detected capacity change from 0 to 128 [ 64.707637][ T6853] syz.5.1305: attempt to access beyond end of device [ 64.707637][ T6853] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 64.724193][ T6853] syz.5.1305: attempt to access beyond end of device [ 64.724193][ T6853] loop5: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 64.737639][ T6853] Buffer I/O error on dev loop5, logical block 72, lost async page write [ 64.748038][ T6853] syz.5.1305: attempt to access beyond end of device [ 64.748038][ T6853] loop5: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 64.768818][ T6853] syz.5.1305: attempt to access beyond end of device [ 64.768818][ T6853] loop5: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 64.782265][ T6853] Buffer I/O error on dev loop5, logical block 72, lost async page write [ 64.854407][ T6861] loop3: detected capacity change from 0 to 1024 [ 64.861595][ T6861] EXT4-fs: Ignoring removed orlov option [ 64.985159][ T6879] loop0: detected capacity change from 0 to 1024 [ 65.075173][ T6891] loop2: detected capacity change from 0 to 8192 [ 65.213723][ T6891] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 65.221431][ T6891] FAT-fs (loop2): Filesystem has been set read-only [ 65.232503][ T6897] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 65.289428][ T6905] Falling back ldisc for ttyS3. [ 65.464473][ T6926] bridge_slave_1: left allmulticast mode [ 65.470180][ T6926] bridge_slave_1: left promiscuous mode [ 65.475888][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.496990][ T6926] bridge_slave_0: left allmulticast mode [ 65.502848][ T6926] bridge_slave_0: left promiscuous mode [ 65.508662][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.625403][ T6932] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 65.647765][ T6932] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 65.664658][ T6941] loop3: detected capacity change from 0 to 164 [ 65.672082][ T6937] openvswitch: netlink: Message has 6 unknown bytes. [ 65.681173][ T6941] rock: directory entry would overflow storage [ 65.687328][ T6941] rock: sig=0x66, size=4, remaining=3 [ 65.732654][ T6944] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6944 comm=syz.3.1344 [ 65.745164][ T6944] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6944 comm=syz.3.1344 [ 65.843248][ T6959] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 65.881781][ T6965] loop2: detected capacity change from 0 to 1024 [ 65.925016][ T6965] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.947112][ T6946] netlink: 'syz.4.1345': attribute type 13 has an invalid length. [ 65.950465][ T6965] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 65.955086][ T6946] netlink: 'syz.4.1345': attribute type 17 has an invalid length. [ 65.980769][ T6946] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 65.988173][ T6965] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 66.008732][ T6965] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.008732][ T6965] [ 66.018371][ T6965] EXT4-fs (loop2): Total free blocks count 0 [ 66.024493][ T6965] EXT4-fs (loop2): Free/Dirty block details [ 66.030387][ T6965] EXT4-fs (loop2): free_blocks=4293918720 [ 66.036086][ T6965] EXT4-fs (loop2): dirty_blocks=16 [ 66.041230][ T6965] EXT4-fs (loop2): Block reservation details [ 66.047236][ T6965] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 66.092449][ T6985] __nla_validate_parse: 7 callbacks suppressed [ 66.092465][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1360'. [ 66.108152][ T6985] netem: change failed [ 66.113447][ T51] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 3) [ 66.128430][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 66.140836][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.140836][ T51] [ 66.141946][ T6989] loop3: detected capacity change from 0 to 256 [ 66.174711][ T6992] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1362'. [ 66.184827][ T6992] hsr_slave_0: left promiscuous mode [ 66.190632][ T6992] hsr_slave_1: left promiscuous mode [ 66.390467][ T7010] syz_tun: entered promiscuous mode [ 66.398415][ T7010] batadv_slave_0: entered promiscuous mode [ 66.417433][ T7014] loop2: detected capacity change from 0 to 764 [ 66.431886][ T7014] iso9660: Unknown parameter '0xffffffffffffffff' [ 66.492745][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.502445][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.588596][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'. [ 66.597888][ T7034] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1383'. [ 66.607016][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'. [ 66.765821][ T7054] loop2: detected capacity change from 0 to 512 [ 66.813228][ T7054] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 66.839368][ T7054] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.856888][ T7054] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1393: corrupted inode contents [ 66.879595][ T7054] EXT4-fs (loop2): Remounting filesystem read-only [ 66.889739][ T7054] EXT4-fs (loop2): 1 truncate cleaned up [ 66.896334][ T1659] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 66.906918][ T1659] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 66.919283][ T1659] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 66.930007][ T7054] EXT4-fs mount: 6 callbacks suppressed [ 66.930021][ T7054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.981098][ T7054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.111551][ T7084] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.142223][ T7084] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.171889][ T7080] ================================================================== [ 67.179996][ T7080] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 67.187376][ T7080] [ 67.189686][ T7080] read-write to 0xffff8881033d2b88 of 8 bytes by interrupt on cpu 1: [ 67.197739][ T7080] rtc_pie_update_irq+0x93/0xf0 [ 67.202592][ T7080] __hrtimer_run_queues+0x20c/0x5a0 [ 67.207779][ T7080] hrtimer_interrupt+0x21a/0x460 [ 67.212701][ T7080] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 67.218587][ T7080] sysvec_apic_timer_interrupt+0x6f/0x80 [ 67.224221][ T7080] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 67.230187][ T7080] kcsan_setup_watchpoint+0x415/0x430 [ 67.235550][ T7080] stack_trace_consume_entry+0x6d/0xc0 [ 67.241001][ T7080] arch_stack_walk+0x10d/0x150 [ 67.245750][ T7080] stack_trace_save+0x5e/0x90 [ 67.250413][ T7080] ref_tracker_free+0x94/0x3e0 [ 67.255172][ T7080] in6_dev_finish_destroy+0x7c/0x150 [ 67.260459][ T7080] addrconf_ifdown+0xe1b/0xf30 [ 67.265220][ T7080] addrconf_notify+0x222/0x930 [ 67.269971][ T7080] raw_notifier_call_chain+0x6c/0x1b0 [ 67.275327][ T7080] call_netdevice_notifiers_info+0xae/0x100 [ 67.281213][ T7080] unregister_netdevice_many_notify+0xda9/0x15d0 [ 67.287529][ T7080] unregister_netdevice_many+0x19/0x20 [ 67.292975][ T7080] ops_undo_list+0x213/0x410 [ 67.297553][ T7080] cleanup_net+0x2de/0x4d0 [ 67.301957][ T7080] process_scheduled_works+0x4ce/0x9d0 [ 67.307404][ T7080] worker_thread+0x582/0x770 [ 67.311986][ T7080] kthread+0x486/0x510 [ 67.316042][ T7080] ret_from_fork+0xda/0x150 [ 67.320529][ T7080] ret_from_fork_asm+0x1a/0x30 [ 67.325276][ T7080] [ 67.327580][ T7080] read to 0xffff8881033d2b88 of 8 bytes by task 7080 on cpu 0: [ 67.335102][ T7080] rtc_dev_poll+0x78/0xb0 [ 67.339420][ T7080] __io_read+0x2e4/0xc20 [ 67.343649][ T7080] io_read+0x1c/0x60 [ 67.347526][ T7080] __io_issue_sqe+0xfe/0x2e0 [ 67.352099][ T7080] io_issue_sqe+0x53/0x970 [ 67.356495][ T7080] io_req_task_submit+0x6b/0xd0 [ 67.361336][ T7080] io_handle_tw_list+0x190/0x1c0 [ 67.366264][ T7080] tctx_task_work_run+0x6d/0x1a0 [ 67.371190][ T7080] tctx_task_work+0x3f/0x80 [ 67.375686][ T7080] task_work_run+0x131/0x1a0 [ 67.380261][ T7080] get_signal+0xe13/0xf70 [ 67.384584][ T7080] arch_do_signal_or_restart+0x96/0x480 [ 67.390115][ T7080] exit_to_user_mode_loop+0x7a/0x100 [ 67.395383][ T7080] do_syscall_64+0x1d6/0x200 [ 67.399961][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.405837][ T7080] [ 67.408140][ T7080] value changed: 0x00000000000065c0 -> 0x00000000000066c0 [ 67.415226][ T7080] [ 67.417530][ T7080] Reported by Kernel Concurrency Sanitizer on: [ 67.423659][ T7080] CPU: 0 UID: 0 PID: 7080 Comm: syz.5.1404 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.433360][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.443398][ T7080] ================================================================== [ 67.470978][ T7084] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.571331][ T7084] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.633558][ T5463] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.644872][ T5476] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.655892][ T5476] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.666745][ T5476] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0