last executing test programs: 18.224718138s ago: executing program 1 (id=1287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 18.160560785s ago: executing program 1 (id=1289): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$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") chdir(&(0x7f0000000380)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 18.099407821s ago: executing program 1 (id=1294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x3, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 17.995036881s ago: executing program 1 (id=1304): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1100) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 17.981905562s ago: executing program 1 (id=1306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 17.948338716s ago: executing program 2 (id=1308): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) 17.80319794s ago: executing program 1 (id=1313): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000014c0)="aeb3", 0x2}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38, 0x80}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r6, 0x0, 0x39000, 0x0) 17.775041893s ago: executing program 32 (id=1313): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000014c0)="aeb3", 0x2}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38, 0x80}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r6, 0x0, 0x39000, 0x0) 17.662489964s ago: executing program 2 (id=1315): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) rt_sigpending(0x0, 0x0) 17.591908111s ago: executing program 2 (id=1316): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 17.583168552s ago: executing program 2 (id=1317): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1100) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 17.535307367s ago: executing program 2 (id=1318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) fsetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='user.incfs.id\x00', &(0x7f0000000300)='sys_enter\x00', 0xa, 0x2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 17.031983957s ago: executing program 2 (id=1328): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 17.031481317s ago: executing program 33 (id=1328): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1.914306419s ago: executing program 6 (id=1844): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) 1.522270528s ago: executing program 4 (id=1855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 1.452604665s ago: executing program 4 (id=1858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x8d, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 1.30571206s ago: executing program 4 (id=1860): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_usb_disconnect(0xffffffffffffffff) 1.30526225s ago: executing program 5 (id=1861): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x26080, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000980)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)) 1.30181394s ago: executing program 6 (id=1863): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x4, 0x5, 0x7, 0x7fc0000000000000, 0x2, 0xc, 0x2000000000000007, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 591.874961ms ago: executing program 4 (id=1872): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) close(0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 540.330436ms ago: executing program 4 (id=1876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 466.869823ms ago: executing program 5 (id=1880): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) 466.470433ms ago: executing program 0 (id=1881): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 434.768046ms ago: executing program 4 (id=1883): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0x22, 0x2e, 0x0, 0x4}, 0x9c) 413.652529ms ago: executing program 5 (id=1885): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1000000000000}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 400.8484ms ago: executing program 6 (id=1886): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000190081084e81f783db4cb9040a07290006007c09e8fc55a10a0015000600142603600e120800020081000401040001162a0d00fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5a", 0x86}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x10, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 374.218073ms ago: executing program 0 (id=1887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 356.765815ms ago: executing program 6 (id=1888): sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 353.191685ms ago: executing program 3 (id=1889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 338.827416ms ago: executing program 0 (id=1890): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 310.688019ms ago: executing program 5 (id=1891): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 268.732253ms ago: executing program 3 (id=1892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 247.721385ms ago: executing program 5 (id=1893): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 222.144288ms ago: executing program 6 (id=1894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 220.727258ms ago: executing program 3 (id=1895): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 212.975219ms ago: executing program 0 (id=1896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) shutdown(r2, 0x1) 162.010624ms ago: executing program 3 (id=1897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000440000000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 141.135696ms ago: executing program 5 (id=1898): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 135.926187ms ago: executing program 0 (id=1899): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @random="442266eb5396", 'erspan0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e) 103.55136ms ago: executing program 6 (id=1900): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='mm_page_free\x00', r0, 0x0, 0x1000000}, 0x18) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@block_validity}, {@norecovery}, {@auto_da_alloc}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000f80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 80.594172ms ago: executing program 3 (id=1901): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8081) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 52.796795ms ago: executing program 0 (id=1902): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) 0s ago: executing program 3 (id=1903): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000001680)={0x28, 0x14, 0x211, 0x70bd29, 0x25dfdc00, {0x28}, [@INET_DIAG_REQ_BYTECODE={0xd, 0xfa, "4ac2411e47060aefad"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): ace with an up link [ 37.227781][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.234866][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.242162][ T3320] bridge_slave_0: entered allmulticast mode [ 37.248579][ T3320] bridge_slave_0: entered promiscuous mode [ 37.266361][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.275769][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.282799][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.308959][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.319801][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.326886][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.334134][ T3320] bridge_slave_1: entered allmulticast mode [ 37.340501][ T3320] bridge_slave_1: entered promiscuous mode [ 37.362565][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.369574][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.395771][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.412579][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.419623][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.445610][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.456441][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.463542][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.470904][ T3315] bridge_slave_0: entered allmulticast mode [ 37.477543][ T3315] bridge_slave_0: entered promiscuous mode [ 37.497332][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.504366][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.530284][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.541035][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.548305][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.555786][ T3315] bridge_slave_1: entered allmulticast mode [ 37.562305][ T3315] bridge_slave_1: entered promiscuous mode [ 37.575168][ T3318] team0: Port device team_slave_0 added [ 37.582078][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.591778][ T3318] team0: Port device team_slave_1 added [ 37.617948][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.643204][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.654370][ T3322] hsr_slave_0: entered promiscuous mode [ 37.660639][ T3322] hsr_slave_1: entered promiscuous mode [ 37.677456][ T3320] team0: Port device team_slave_0 added [ 37.684142][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.693917][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.700921][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.726876][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.743991][ T3320] team0: Port device team_slave_1 added [ 37.769120][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.776099][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.802136][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.815068][ T3314] hsr_slave_0: entered promiscuous mode [ 37.821319][ T3314] hsr_slave_1: entered promiscuous mode [ 37.827174][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.832913][ T3314] Cannot create hsr debugfs directory [ 37.875844][ T3315] team0: Port device team_slave_0 added [ 37.887451][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.894428][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.920418][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.934675][ T3315] team0: Port device team_slave_1 added [ 37.951066][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.958229][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.984416][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.014133][ T3318] hsr_slave_0: entered promiscuous mode [ 38.020313][ T3318] hsr_slave_1: entered promiscuous mode [ 38.026205][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 38.031983][ T3318] Cannot create hsr debugfs directory [ 38.047751][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.054725][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.080754][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.116663][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.123736][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.149698][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.171117][ T3320] hsr_slave_0: entered promiscuous mode [ 38.177250][ T3320] hsr_slave_1: entered promiscuous mode [ 38.183166][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 38.189044][ T3320] Cannot create hsr debugfs directory [ 38.252270][ T3315] hsr_slave_0: entered promiscuous mode [ 38.258314][ T3315] hsr_slave_1: entered promiscuous mode [ 38.264142][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 38.269909][ T3315] Cannot create hsr debugfs directory [ 38.366608][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.382139][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.391385][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.402492][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.435836][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.444726][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.454616][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.466087][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.494922][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.503674][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.515598][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.524476][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.580126][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.589177][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.604193][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.614929][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.624676][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.649516][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.662541][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.672567][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.685757][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.695132][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.705365][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.712461][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.725810][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.738146][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.745303][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.777981][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.791611][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.802466][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.809663][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.827937][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.838370][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.856416][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.885025][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.894887][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.901999][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.925112][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.932250][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.952480][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.959663][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.980003][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.995382][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.005851][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.019548][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.028039][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.035150][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.049727][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.056846][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.068863][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.119092][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.151716][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.187961][ T555] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.195050][ T555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.223838][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.233733][ T555] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.240847][ T555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.260206][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.369672][ T3318] veth0_vlan: entered promiscuous mode [ 39.383317][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.402719][ T3318] veth1_vlan: entered promiscuous mode [ 39.446905][ T3320] veth0_vlan: entered promiscuous mode [ 39.455284][ T3318] veth0_macvtap: entered promiscuous mode [ 39.465656][ T3314] veth0_vlan: entered promiscuous mode [ 39.472914][ T3320] veth1_vlan: entered promiscuous mode [ 39.480007][ T3318] veth1_macvtap: entered promiscuous mode [ 39.494933][ T3322] veth0_vlan: entered promiscuous mode [ 39.503672][ T3314] veth1_vlan: entered promiscuous mode [ 39.512219][ T3322] veth1_vlan: entered promiscuous mode [ 39.526477][ T3322] veth0_macvtap: entered promiscuous mode [ 39.541450][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.549968][ T3322] veth1_macvtap: entered promiscuous mode [ 39.568615][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.580843][ T3314] veth0_macvtap: entered promiscuous mode [ 39.588462][ T3320] veth0_macvtap: entered promiscuous mode [ 39.595192][ T3314] veth1_macvtap: entered promiscuous mode [ 39.615990][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.626176][ T3320] veth1_macvtap: entered promiscuous mode [ 39.634379][ T3315] veth0_vlan: entered promiscuous mode [ 39.643833][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.651414][ T3315] veth1_vlan: entered promiscuous mode [ 39.657975][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.668002][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.682626][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.691424][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.700895][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.710029][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.725183][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.734461][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.748080][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.758482][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.770813][ T3315] veth0_macvtap: entered promiscuous mode [ 39.776726][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 39.776748][ T29] audit: type=1400 audit(1763359352.485:81): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.8K2lnb/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.807233][ T29] audit: type=1400 audit(1763359352.485:82): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.829278][ T29] audit: type=1400 audit(1763359352.485:83): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.8K2lnb/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.854801][ T29] audit: type=1400 audit(1763359352.485:84): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.876686][ T29] audit: type=1400 audit(1763359352.485:85): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.8K2lnb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.903358][ T29] audit: type=1400 audit(1763359352.485:86): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.8K2lnb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.930786][ T29] audit: type=1400 audit(1763359352.485:87): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.952348][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.957287][ T29] audit: type=1400 audit(1763359352.485:88): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.983850][ T29] audit: type=1400 audit(1763359352.485:89): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="gadgetfs" ino=4484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.008721][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.013892][ T3315] veth1_macvtap: entered promiscuous mode [ 40.034447][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.043844][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.064740][ T29] audit: type=1400 audit(1763359352.775:90): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.099293][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.112073][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.128192][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.168771][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.192610][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.236581][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.241120][ T3493] loop2: detected capacity change from 0 to 1024 [ 40.273183][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.294875][ T3493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.320559][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.345039][ T3493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.349176][ T3498] bond1: entered promiscuous mode [ 40.362418][ T3498] bond1: entered allmulticast mode [ 40.372518][ T3498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.396367][ T3498] bond1 (unregistering): Released all slaves [ 40.407317][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.416117][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.439984][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.525004][ T3516] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.530468][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.573129][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.838711][ T3537] loop1: detected capacity change from 0 to 512 [ 40.875539][ T3537] EXT4-fs: Ignoring removed orlov option [ 40.897476][ T3537] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 40.927951][ T3537] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.20: corrupted in-inode xattr: e_value size too large [ 40.951262][ T3493] syz.2.3 (3493) used greatest stack depth: 10624 bytes left [ 40.966456][ T3537] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.20: couldn't read orphan inode 15 (err -117) [ 41.003931][ T3537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.029211][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.092490][ T3555] all: renamed from lo (while UP) [ 41.129732][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.144288][ T3559] program syz.4.29 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.235875][ T3568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.34'. [ 41.286117][ T3573] SELinux: syz.1.36 (3573) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 41.345780][ T3578] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 41.361726][ T3582] unsupported nla_type 52263 [ 41.420278][ T3589] netlink: 27 bytes leftover after parsing attributes in process `syz.0.43'. [ 41.434349][ T3592] process 'syz.2.44' launched '/dev/fd/5' with NULL argv: empty string added [ 41.466055][ T3597] vhci_hcd: invalid port number 9 [ 41.471306][ T3597] vhci_hcd: invalid port number 9 [ 41.671434][ T3629] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 41.723753][ T3427] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.731334][ T3427] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.738962][ T3427] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.748872][ T3427] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.756340][ T3427] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.763905][ T3427] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.771367][ T3427] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.778810][ T3427] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.786228][ T3427] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.793758][ T3427] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.803009][ T3427] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 41.859572][ T3646] fido_id[3646]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.066478][ T3680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 42.129429][ T3686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.55'. [ 42.214432][ T3696] loop0: detected capacity change from 0 to 1024 [ 42.221329][ T3696] ======================================================= [ 42.221329][ T3696] WARNING: The mand mount option has been deprecated and [ 42.221329][ T3696] and is ignored by this kernel. Remove the mand [ 42.221329][ T3696] option from the mount to silence this warning. [ 42.221329][ T3696] ======================================================= [ 42.314859][ T3696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.367326][ T3696] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.402537][ T3696] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.64: Freeing blocks not in datazone - block = 0, count = 16 [ 42.423838][ T3696] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.64: bg 0: block 112: padding at end of block bitmap is not set [ 42.449921][ T3696] syz.0.64 (3696) used greatest stack depth: 10176 bytes left [ 42.494931][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.924193][ T3748] @: renamed from vlan0 (while UP) [ 42.939141][ T3750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.960846][ T3750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.318609][ T3760] Zero length message leads to an empty skb [ 43.688835][ T3789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.105'. [ 43.692577][ T3785] vhci_hcd: invalid port number 96 [ 43.703081][ T3785] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 43.754434][ T3794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.107'. [ 43.778351][ T3794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 44.005250][ C0] hrtimer: interrupt took 27987 ns [ 44.110016][ T3841] loop2: detected capacity change from 0 to 8192 [ 44.126603][ T3847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 44.136145][ T3847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 44.147681][ T3307] loop2: p1 < > p2 p4 < p5 > [ 44.152394][ T3307] loop2: partition table partially beyond EOD, truncated [ 44.158470][ T3848] syz.0.129 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.164396][ T3307] loop2: p1 start 117440512 is beyond EOD, truncated [ 44.176504][ T3307] loop2: p2 size 65536 extends beyond EOD, truncated [ 44.203150][ T3307] loop2: p5 size 65536 extends beyond EOD, truncated [ 44.243447][ T3841] loop2: p1 < > p2 p4 < p5 > [ 44.248211][ T3841] loop2: partition table partially beyond EOD, truncated [ 44.286345][ T3841] loop2: p1 start 117440512 is beyond EOD, truncated [ 44.293132][ T3841] loop2: p2 size 65536 extends beyond EOD, truncated [ 44.318253][ T3841] loop2: p5 size 65536 extends beyond EOD, truncated [ 44.451401][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 44.452643][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 44.469037][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 45.271216][ T3869] loop2: detected capacity change from 0 to 1024 [ 45.287690][ T3869] EXT4-fs: Ignoring removed orlov option [ 45.311938][ T3869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.338276][ T3874] syz.0.136 (3874) used greatest stack depth: 9160 bytes left [ 45.364014][ T3876] loop0: detected capacity change from 0 to 1024 [ 45.365346][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.406549][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 45.406593][ T29] audit: type=1400 audit(1763359358.115:355): avc: denied { create } for pid=3878 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.433602][ T3876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.451322][ T29] audit: type=1400 audit(1763359358.155:356): avc: denied { ioctl } for pid=3878 comm="syz.2.139" path="socket:[5776]" dev="sockfs" ino=5776 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.476213][ T29] audit: type=1400 audit(1763359358.155:357): avc: denied { bind } for pid=3878 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.486000][ T3876] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 16: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 45.495486][ T29] audit: type=1400 audit(1763359358.165:358): avc: denied { write } for pid=3878 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.555375][ T29] audit: type=1400 audit(1763359358.265:359): avc: denied { read write } for pid=3883 comm="syz.3.142" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 45.555701][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.579592][ T29] audit: type=1400 audit(1763359358.265:360): avc: denied { open } for pid=3883 comm="syz.3.142" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 45.640970][ T29] audit: type=1400 audit(1763359358.355:361): avc: denied { mount } for pid=3885 comm="syz.0.141" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 45.675216][ T3889] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 45.685021][ T3887] IPVS: stopping master sync thread 3889 ... [ 45.693387][ T29] audit: type=1400 audit(1763359358.385:362): avc: denied { unmount } for pid=3885 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 45.721671][ T29] audit: type=1400 audit(1763359358.435:363): avc: denied { setopt } for pid=3892 comm="syz.3.145" lport=43199 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 45.851280][ T3913] tipc: Failed to remove unknown binding: 66,1,1/0:1250859836/1250859838 [ 45.859958][ T3913] tipc: Failed to remove unknown binding: 66,1,1/0:1250859836/1250859838 [ 45.966793][ T29] audit: type=1400 audit(1763359358.675:364): avc: denied { create } for pid=3924 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 46.027748][ T3833] Bluetooth: hci0: command 0x1003 tx timeout [ 46.040208][ T3792] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.159513][ T3936] loop2: detected capacity change from 0 to 7 [ 46.231354][ T3940] loop0: detected capacity change from 0 to 128 [ 46.281878][ T3942] loop2: detected capacity change from 0 to 512 [ 46.283697][ T3942] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.303092][ T3942] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.502731][ T3942] EXT4-fs (loop2): 1 truncate cleaned up [ 46.503119][ T3942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.571747][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.598345][ T3951] IPv6: NLM_F_CREATE should be specified when creating new route [ 46.687980][ T12] kworker/u8:0: attempt to access beyond end of device [ 46.687980][ T12] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 46.688084][ T12] kworker/u8:0: attempt to access beyond end of device [ 46.688084][ T12] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 46.688127][ T12] kworker/u8:0: attempt to access beyond end of device [ 46.688127][ T12] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 46.688163][ T12] kworker/u8:0: attempt to access beyond end of device [ 46.688163][ T12] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 46.688248][ T12] kworker/u8:0: attempt to access beyond end of device [ 46.688248][ T12] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 46.688285][ T12] kworker/u8:0: attempt to access beyond end of device [ 46.688285][ T12] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 46.688327][ T12] kworker/u8:0: attempt to access beyond end of device [ 46.688327][ T12] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 46.688416][ T12] kworker/u8:0: attempt to access beyond end of device [ 46.688416][ T12] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 46.688453][ T12] kworker/u8:0: attempt to access beyond end of device [ 46.688453][ T12] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 46.688493][ T12] kworker/u8:0: attempt to access beyond end of device [ 46.688493][ T12] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 46.904195][ T3959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 46.915500][ T3959] team0 (unregistering): Port device team_slave_0 removed [ 46.917710][ T3959] team0 (unregistering): Port device team_slave_1 removed [ 47.152064][ T3968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3968 comm=syz.2.174 [ 47.167496][ T3968] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 47.225843][ T3968] bond1: (slave bridge1): making interface the new active one [ 47.226188][ T3968] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 47.315659][ T3974] macvtap0: refused to change device tx_queue_len [ 47.353517][ T3976] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 47.368979][ T3976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 47.536698][ T3979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.536724][ T3979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.554824][ T3979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.554845][ T3979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.291049][ T3994] syz.0.184 uses obsolete (PF_INET,SOCK_PACKET) [ 48.466338][ T3998] netlink: 60 bytes leftover after parsing attributes in process `syz.4.185'. [ 48.475449][ T3998] netlink: 60 bytes leftover after parsing attributes in process `syz.4.185'. [ 48.576070][ T3998] netlink: 60 bytes leftover after parsing attributes in process `syz.4.185'. [ 48.585043][ T3998] netlink: 60 bytes leftover after parsing attributes in process `syz.4.185'. [ 48.585264][ T4005] serio: Serial port ttyS3 [ 48.697146][ T3998] netlink: 60 bytes leftover after parsing attributes in process `syz.4.185'. [ 48.706069][ T3998] netlink: 60 bytes leftover after parsing attributes in process `syz.4.185'. [ 48.852616][ T4024] ip6tnl1: entered promiscuous mode [ 48.857922][ T4024] ip6tnl1: entered allmulticast mode [ 49.065689][ T4044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'. [ 49.137834][ T4051] rdma_op ffff888128201580 conn xmit_rdma 0000000000000000 [ 49.565178][ T4090] Driver unsupported XDP return value 0 on prog (id 173) dev N/A, expect packet loss! [ 49.572227][ T4088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.221'. [ 49.614662][ T4092] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.645811][ T4092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 49.656523][ T4092] bridge_slave_1: left allmulticast mode [ 49.662422][ T4092] bridge_slave_1: left promiscuous mode [ 49.668293][ T4092] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.687159][ T4092] bridge_slave_0: left allmulticast mode [ 49.692862][ T4092] bridge_slave_0: left promiscuous mode [ 49.698673][ T4092] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.169506][ T4132] mmap: syz.4.238 (4132) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.309836][ T4137] loop4: detected capacity change from 0 to 4096 [ 50.368467][ T4137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.392396][ T4153] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 50.425695][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 50.425710][ T29] audit: type=1400 audit(1763359363.135:421): avc: denied { create } for pid=4154 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.470553][ T29] audit: type=1400 audit(1763359363.175:422): avc: denied { setopt } for pid=4154 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.489897][ T29] audit: type=1400 audit(1763359363.175:423): avc: denied { connect } for pid=4154 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.509560][ T29] audit: type=1400 audit(1763359363.195:424): avc: denied { setattr } for pid=4136 comm="syz.4.241" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.634557][ T4163] tipc: Started in network mode [ 50.639769][ T4163] tipc: Node identity ac14140f, cluster identity 4711 [ 50.652986][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.674170][ T4163] tipc: New replicast peer: 255.255.255.83 [ 50.680150][ T4163] tipc: Enabled bearer , priority 10 [ 50.722782][ T29] audit: type=1400 audit(1763359363.405:425): avc: denied { connect } for pid=4166 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.742708][ T29] audit: type=1400 audit(1763359363.405:426): avc: denied { ioctl } for pid=4166 comm="syz.0.255" path="socket:[7183]" dev="sockfs" ino=7183 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.784748][ T29] audit: type=1400 audit(1763359363.495:427): avc: denied { setopt } for pid=4170 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.865781][ T4179] loop1: detected capacity change from 0 to 2048 [ 50.873924][ T4179] EXT4-fs: Ignoring removed bh option [ 50.880389][ T4177] $H: renamed from bond0 (while UP) [ 50.888765][ T4177] $H: entered promiscuous mode [ 50.893836][ T4177] bond_slave_0: entered promiscuous mode [ 50.899637][ T4177] bond_slave_1: entered promiscuous mode [ 50.922048][ T4179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.962148][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.974979][ T4183] hub 8-0:1.0: USB hub found [ 50.979921][ T4183] hub 8-0:1.0: 8 ports detected [ 51.061038][ T29] audit: type=1400 audit(1763359363.775:428): avc: denied { ioctl } for pid=4194 comm="syz.1.265" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.169012][ T4203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4203 comm=syz.1.271 [ 51.204759][ T29] audit: type=1400 audit(1763359363.915:429): avc: denied { ioctl } for pid=4206 comm="syz.2.273" path="socket:[6600]" dev="sockfs" ino=6600 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.301017][ T29] audit: type=1400 audit(1763359364.015:430): avc: denied { write } for pid=4214 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.513921][ T4243] loop2: detected capacity change from 0 to 256 [ 51.563658][ T4243] FAT-fs (loop2): codepage cp866 not found [ 51.602301][ T4243] loop2: detected capacity change from 0 to 1024 [ 51.657415][ T4243] EXT4-fs (loop2): filesystem is read-only [ 51.671442][ T4243] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 51.682426][ T4243] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 51.715636][ T4243] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 51.745173][ T4243] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.290: inode #1: comm syz.2.290: iget: illegal inode # [ 51.786711][ T4243] EXT4-fs (loop2): no journal found [ 51.792108][ T4243] EXT4-fs (loop2): can't get journal size [ 51.798918][ T36] tipc: Node number set to 2886997007 [ 51.818040][ T4243] EXT4-fs error (device loop2): __ext4_fill_super:5512: inode #2: comm syz.2.290: iget: bad extra_isize 65535 (inode size 1024) [ 51.831702][ T4243] EXT4-fs (loop2): get root inode failed [ 51.837508][ T4243] EXT4-fs (loop2): mount failed [ 51.875155][ T4284] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 51.943468][ T4291] pimreg: entered allmulticast mode [ 51.969236][ T4291] pimreg: left allmulticast mode [ 52.377522][ T4330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.386041][ T4330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.591560][ T4341] netlink: 'syz.1.326': attribute type 3 has an invalid length. [ 52.599399][ T4341] netlink: 'syz.1.326': attribute type 1 has an invalid length. [ 52.607194][ T4341] __nla_validate_parse: 3 callbacks suppressed [ 52.607209][ T4341] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.326'. [ 53.543038][ T4397] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 53.687599][ T4411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 53.925357][ T4442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.373'. [ 54.041470][ T4461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 54.516709][ T4502] veth0: entered promiscuous mode [ 54.539136][ T4501] veth0: left promiscuous mode [ 54.588619][ T4504] xt_CT: No such helper "pptp" [ 54.686342][ T4520] netlink: 27 bytes leftover after parsing attributes in process `syz.1.407'. [ 55.141128][ T4584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 55.388705][ T4613] smc: net device bond0 applied user defined pnetid SYZ0 [ 55.397544][ T4613] smc: net device bond0 erased user defined pnetid SYZ0 [ 55.418159][ T4616] loop0: detected capacity change from 0 to 1024 [ 55.425199][ T4616] EXT4-fs: inline encryption not supported [ 55.431172][ T4616] EXT4-fs: Ignoring removed orlov option [ 55.463989][ T4616] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 55.490348][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 55.490363][ T29] audit: type=1400 audit(1763359368.205:551): avc: denied { create } for pid=4620 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.538445][ T4616] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 55.538846][ T29] audit: type=1400 audit(1763359368.245:552): avc: denied { setopt } for pid=4620 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.571060][ T4616] System zones: 0-1, 3-12 [ 55.596875][ T4637] tipc: Started in network mode [ 55.601993][ T4637] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 55.618624][ T4616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.669495][ T4637] tipc: Enabled bearer , priority 10 [ 55.690537][ T29] audit: type=1400 audit(1763359368.405:553): avc: denied { create } for pid=4615 comm="syz.0.427" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.729539][ T4644] loop3: detected capacity change from 0 to 128 [ 55.763268][ T29] audit: type=1400 audit(1763359368.475:554): avc: denied { mount } for pid=4643 comm="syz.3.436" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 55.788216][ T4644] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 55.796283][ T4644] FAT-fs (loop3): Filesystem has been set read-only [ 55.803921][ T4651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 55.814714][ T4651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 55.817901][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.839367][ T4644] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 56.014757][ T29] audit: type=1400 audit(1763359368.725:555): avc: denied { write } for pid=4670 comm="syz.1.447" path="socket:[8298]" dev="sockfs" ino=8298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.117848][ T4677] bridge0: port 3(gretap0) entered blocking state [ 56.124365][ T4677] bridge0: port 3(gretap0) entered disabled state [ 56.137457][ T4679] netlink: 36 bytes leftover after parsing attributes in process `syz.4.449'. [ 56.182607][ T4677] gretap0: entered allmulticast mode [ 56.198926][ T4677] gretap0: entered promiscuous mode [ 56.200412][ T4682] netlink: 'syz.2.451': attribute type 1 has an invalid length. [ 56.215577][ T4677] bridge0: port 3(gretap0) entered blocking state [ 56.222095][ T4677] bridge0: port 3(gretap0) entered forwarding state [ 56.249037][ T4684] gretap0: left allmulticast mode [ 56.254161][ T4684] gretap0: left promiscuous mode [ 56.259360][ T4684] bridge0: port 3(gretap0) entered disabled state [ 56.283133][ T4689] loop1: detected capacity change from 0 to 512 [ 56.378037][ T29] audit: type=1400 audit(1763359369.085:556): avc: denied { mounton } for pid=4688 comm="syz.1.455" path="/58/file0/file0" dev="loop1" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 56.443626][ T4698] loop2: detected capacity change from 0 to 164 [ 56.494561][ T4702] loop0: detected capacity change from 0 to 128 [ 56.528240][ T4702] bio_check_eod: 64 callbacks suppressed [ 56.528256][ T4702] syz.0.461: attempt to access beyond end of device [ 56.528256][ T4702] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 56.571330][ T4702] syz.0.461: attempt to access beyond end of device [ 56.571330][ T4702] loop0: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 56.584791][ T4702] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 56.593737][ T4702] syz.0.461: attempt to access beyond end of device [ 56.593737][ T4702] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 56.607364][ T4702] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 56.616313][ T4702] syz.0.461: attempt to access beyond end of device [ 56.616313][ T4702] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 56.636589][ T29] audit: type=1400 audit(1763359369.345:557): avc: denied { mount } for pid=4697 comm="syz.2.458" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 56.644808][ T4702] syz.0.461: attempt to access beyond end of device [ 56.644808][ T4702] loop0: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 56.667861][ T29] audit: type=1400 audit(1763359369.345:558): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 56.672512][ T4702] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 56.756038][ T4702] syz.0.461: attempt to access beyond end of device [ 56.756038][ T4702] loop0: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 56.765916][ T29] audit: type=1400 audit(1763359369.465:559): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 56.769450][ T4702] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 56.807087][ T3403] tipc: Node number set to 4269801494 [ 56.824359][ T4702] syz.0.461: attempt to access beyond end of device [ 56.824359][ T4702] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 56.847388][ T29] audit: type=1400 audit(1763359369.525:560): avc: denied { read } for pid=4711 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.873989][ T4719] sg_write: data in/out 2011/154 bytes for SCSI command 0x0-- guessing data in; [ 56.873989][ T4719] program syz.1.468 not setting count and/or reply_len properly [ 56.891540][ T4702] syz.0.461: attempt to access beyond end of device [ 56.891540][ T4702] loop0: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 56.905005][ T4702] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 56.930854][ T4702] syz.0.461: attempt to access beyond end of device [ 56.930854][ T4702] loop0: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 56.944339][ T4702] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 56.956061][ T4702] syz.0.461: attempt to access beyond end of device [ 56.956061][ T4702] loop0: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 56.971151][ T4702] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 56.980080][ T4702] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 57.002332][ T4702] Buffer I/O error on dev loop0, logical block 111, lost async page write [ 57.041277][ T4702] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 57.246811][ T4735] capability: warning: `syz.3.476' uses deprecated v2 capabilities in a way that may be insecure [ 57.400744][ T4751] loop0: detected capacity change from 0 to 128 [ 57.520839][ T4765] uprobe: syz.4.490:4765 failed to unregister, leaking uprobe [ 57.561279][ T4774] loop0: detected capacity change from 0 to 512 [ 57.570225][ T4774] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.589092][ T4774] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #17: comm syz.0.493: inode has both inline data and extents flags [ 57.608979][ T4774] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.493: couldn't read orphan inode 17 (err -117) [ 57.621702][ T4774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.640424][ T4774] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.493: bg 0: block 65: padding at end of block bitmap is not set [ 57.655068][ T4774] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.493: Failed to acquire dquot type 0 [ 57.680023][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.702342][ T4787] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 58.046445][ T4820] xt_hashlimit: max too large, truncated to 1048576 [ 58.080550][ T4822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 58.157575][ T4822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 58.179997][ T555] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.201419][ T555] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.231066][ T555] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.260320][ T555] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.378237][ T4856] bond0: entered promiscuous mode [ 58.383704][ T4856] bond_slave_0: entered promiscuous mode [ 58.389549][ T4856] bond_slave_1: entered promiscuous mode [ 58.431014][ T4848] SELinux: failed to load policy [ 58.476416][ T4863] loop4: detected capacity change from 0 to 512 [ 58.510964][ T4863] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.529: inode has both inline data and extents flags [ 58.530984][ T4863] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.529: couldn't read orphan inode 15 (err -117) [ 58.543906][ T4863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.582220][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.810179][ T4892] vlan2: entered allmulticast mode [ 58.883193][ T4898] ipip0: entered promiscuous mode [ 58.944248][ T4904] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4904 comm=syz.4.548 [ 58.956882][ T4904] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4904 comm=syz.4.548 [ 58.978142][ T4906] netlink: 'syz.2.547': attribute type 4 has an invalid length. [ 59.159348][ T4933] loop1: detected capacity change from 0 to 2048 [ 59.189057][ T4939] netlink: 'syz.4.563': attribute type 13 has an invalid length. [ 59.196853][ T4939] netlink: 164 bytes leftover after parsing attributes in process `syz.4.563'. [ 59.206172][ T4939] syz_tun: refused to change device tx_queue_len [ 59.217088][ T4933] loop1: p1 < > p3 [ 59.222299][ T4933] loop1: p3 size 134217728 extends beyond EOD, truncated [ 59.286489][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 59.301884][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 59.342400][ T4947] loop4: detected capacity change from 0 to 512 [ 59.369752][ T4947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.402532][ T4947] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.429331][ T4956] netlink: 'syz.3.569': attribute type 1 has an invalid length. [ 59.463422][ T4956] bond1: (slave geneve2): making interface the new active one [ 59.471377][ T4956] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 59.479524][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.489184][ T568] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 59.505614][ T568] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 59.533159][ T4960] vlan2: entered allmulticast mode [ 59.552569][ T568] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 59.567065][ T568] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 59.576899][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 59.641732][ T4973] geneve2: entered promiscuous mode [ 59.647140][ T4973] geneve2: entered allmulticast mode [ 60.240386][ T5015] netlink: 'syz.2.594': attribute type 12 has an invalid length. [ 60.529294][ T5039] netlink: 220 bytes leftover after parsing attributes in process `syz.4.604'. [ 60.538875][ T5039] netlink: 220 bytes leftover after parsing attributes in process `syz.4.604'. [ 60.662191][ T5047] hub 8-0:1.0: USB hub found [ 60.667381][ T5047] hub 8-0:1.0: 8 ports detected [ 60.830712][ T5059] loop4: detected capacity change from 0 to 2048 [ 60.839527][ T5059] EXT4-fs: Ignoring removed bh option [ 60.868532][ T5059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.897208][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.037905][ T5085] $H: renamed from bond0 [ 61.217148][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 61.217166][ T29] audit: type=1326 audit(1763359373.925:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 61.350731][ T5107] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 61.370070][ T29] audit: type=1326 audit(1763359373.965:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 61.393771][ T29] audit: type=1326 audit(1763359373.965:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 61.417128][ T29] audit: type=1326 audit(1763359373.965:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 61.441183][ T29] audit: type=1326 audit(1763359373.965:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 61.464764][ T29] audit: type=1326 audit(1763359374.045:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 61.488117][ T29] audit: type=1326 audit(1763359374.045:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 61.511491][ T29] audit: type=1326 audit(1763359374.045:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 61.534841][ T29] audit: type=1326 audit(1763359374.065:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 61.558532][ T29] audit: type=1326 audit(1763359374.065:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 61.582678][ T5111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'. [ 61.786223][ T5126] netlink: 220 bytes leftover after parsing attributes in process `syz.1.637'. [ 61.798354][ T5126] netlink: 220 bytes leftover after parsing attributes in process `syz.1.637'. [ 61.921536][ T5139] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 61.972006][ T5139] bond1: (slave geneve2): making interface the new active one [ 61.980027][ T5139] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 61.989387][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 62.016796][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 62.063003][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 62.072212][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 62.229940][ T5146] netlink: 60 bytes leftover after parsing attributes in process `syz.1.646'. [ 62.459058][ T5158] netlink: 'syz.3.650': attribute type 7 has an invalid length. [ 62.502806][ T5162] loop0: detected capacity change from 0 to 512 [ 62.510462][ T5164] loop2: detected capacity change from 0 to 128 [ 62.676773][ T3442] bio_check_eod: 32 callbacks suppressed [ 62.676788][ T3442] kworker/u8:8: attempt to access beyond end of device [ 62.676788][ T3442] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 62.798870][ T3442] kworker/u8:8: attempt to access beyond end of device [ 62.798870][ T3442] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 62.821715][ T3442] kworker/u8:8: attempt to access beyond end of device [ 62.821715][ T3442] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 62.837200][ T3442] kworker/u8:8: attempt to access beyond end of device [ 62.837200][ T3442] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 62.861870][ T3442] kworker/u8:8: attempt to access beyond end of device [ 62.861870][ T3442] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 62.889237][ T3442] kworker/u8:8: attempt to access beyond end of device [ 62.889237][ T3442] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 62.955802][ T3442] kworker/u8:8: attempt to access beyond end of device [ 62.955802][ T3442] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 62.969609][ T3442] kworker/u8:8: attempt to access beyond end of device [ 62.969609][ T3442] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 62.989647][ T3442] kworker/u8:8: attempt to access beyond end of device [ 62.989647][ T3442] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 63.005647][ T3442] kworker/u8:8: attempt to access beyond end of device [ 63.005647][ T3442] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 63.073065][ T5184] loop2: detected capacity change from 0 to 256 [ 63.107289][ T5184] FAT-fs (loop2): Directory bread(block 64) failed [ 63.117197][ T5184] FAT-fs (loop2): Directory bread(block 65) failed [ 63.127844][ T5184] FAT-fs (loop2): Directory bread(block 66) failed [ 63.144569][ T5184] FAT-fs (loop2): Directory bread(block 67) failed [ 63.187463][ T5184] FAT-fs (loop2): Directory bread(block 68) failed [ 63.207782][ T5184] FAT-fs (loop2): Directory bread(block 69) failed [ 63.217880][ T5184] FAT-fs (loop2): Directory bread(block 70) failed [ 63.224558][ T5184] FAT-fs (loop2): Directory bread(block 71) failed [ 63.241995][ T5184] FAT-fs (loop2): Directory bread(block 72) failed [ 63.258887][ T5184] FAT-fs (loop2): Directory bread(block 73) failed [ 63.560601][ T5213] SELinux: failed to load policy [ 63.568969][ T5150] syz.4.647 (5150) used greatest stack depth: 7048 bytes left [ 63.668919][ T5235] loop2: detected capacity change from 0 to 512 [ 63.719785][ T5235] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.737176][ T5235] EXT4-fs (loop2): mount failed [ 63.857180][ T5256] __nla_validate_parse: 6 callbacks suppressed [ 63.857199][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 63.874274][ T5256] bridge_slave_1: left allmulticast mode [ 63.880104][ T5256] bridge_slave_1: left promiscuous mode [ 63.886011][ T5256] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.912323][ T5256] bridge_slave_0: left promiscuous mode [ 63.918278][ T5256] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.930262][ T5258] SELinux: failed to load policy [ 63.994928][ T5264] sock: sock_timestamping_bind_phc: sock not bind to device [ 64.074545][ T5269] vlan2: entered allmulticast mode [ 64.294022][ T5303] netlink: 176 bytes leftover after parsing attributes in process `syz.4.711'. [ 64.378638][ T5319] loop1: detected capacity change from 0 to 256 [ 64.399895][ T5319] FAT-fs (loop1): bogus number of FAT sectors [ 64.406094][ T5319] FAT-fs (loop1): Can't find a valid FAT filesystem [ 64.420388][ T5323] vlan2: entered allmulticast mode [ 64.598267][ T5338] loop1: detected capacity change from 0 to 128 [ 64.655880][ T5338] EXT4-fs: Ignoring removed nobh option [ 64.689594][ T5338] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.711916][ T5338] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.761814][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.916987][ T5375] netlink: 96 bytes leftover after parsing attributes in process `syz.0.739'. [ 65.078882][ T5393] loop2: detected capacity change from 0 to 512 [ 65.173008][ T36] hid_parser_main: 22 callbacks suppressed [ 65.173031][ T36] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 65.186455][ T36] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 65.194086][ T36] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 65.201569][ T36] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 65.209024][ T36] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 65.216433][ T36] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 65.223886][ T36] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 65.231369][ T36] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 65.238803][ T36] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 65.246314][ T36] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 65.326207][ T36] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 65.426248][ T5414] fido_id[5414]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.505315][ T5416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.748'. [ 65.576589][ T5423] vlan2: entered allmulticast mode [ 65.684948][ T5435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.757'. [ 65.845268][ T5451] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=5451 comm=syz.2.765 [ 66.215263][ T5484] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5484 comm=syz.3.779 [ 66.227893][ T5484] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5484 comm=syz.3.779 [ 66.338269][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 66.361790][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 66.430526][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 66.430545][ T29] audit: type=1400 audit(1763359379.145:880): avc: denied { connect } for pid=5506 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.631494][ T5515] loop1: detected capacity change from 0 to 8192 [ 66.641369][ T5529] loop4: detected capacity change from 0 to 512 [ 66.690619][ T3307] loop1: p1 < > p2 < > p3 p4 < > [ 66.695737][ T3307] loop1: partition table partially beyond EOD, truncated [ 66.706428][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 66.707662][ T5529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.740931][ T3307] loop1: p1 start 67108864 is beyond EOD, truncated [ 66.747681][ T3307] loop1: p2 start 4278190080 is beyond EOD, truncated [ 66.754591][ T3307] loop1: p3 start 100859904 is beyond EOD, truncated [ 66.787170][ T5529] ext4 filesystem being mounted at /117/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.801563][ T5515] loop1: p1 < > p2 < > p3 p4 < > [ 66.806641][ T5515] loop1: partition table partially beyond EOD, truncated [ 66.820335][ T29] audit: type=1326 audit(1763359379.535:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecea0f6c9 code=0x7ffc0000 [ 66.820525][ T5529] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.798: corrupted xattr block 33: invalid ea_ino [ 66.861029][ T5515] loop1: p1 start 67108864 is beyond EOD, truncated [ 66.867791][ T5515] loop1: p2 start 4278190080 is beyond EOD, truncated [ 66.874607][ T5515] loop1: p3 start 100859904 is beyond EOD, truncated [ 66.886227][ T5529] EXT4-fs (loop4): Remounting filesystem read-only [ 66.892869][ T5529] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 66.902599][ T5529] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 66.912054][ T5529] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 66.921501][ T29] audit: type=1326 audit(1763359379.535:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f1ecea0f6c9 code=0x7ffc0000 [ 66.944954][ T29] audit: type=1400 audit(1763359379.625:883): avc: denied { read } for pid=5528 comm="syz.4.798" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.982228][ T29] audit: type=1400 audit(1763359379.635:884): avc: denied { watch watch_reads } for pid=5528 comm="syz.4.798" path="/117/file7/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.006797][ T29] audit: type=1326 audit(1763359379.635:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecea0f6c9 code=0x7ffc0000 [ 67.030075][ T29] audit: type=1326 audit(1763359379.635:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecea0f6c9 code=0x7ffc0000 [ 67.068429][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 67.089930][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.108846][ T5544] loop1: detected capacity change from 0 to 128 [ 67.210920][ T5559] netlink: 204 bytes leftover after parsing attributes in process `syz.3.808'. [ 67.236090][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 67.318769][ T29] audit: type=1326 audit(1763359380.035:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71cb5df6c9 code=0x7ffc0000 [ 67.360503][ T29] audit: type=1326 audit(1763359380.055:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71cb5df6c9 code=0x7ffc0000 [ 67.384001][ T29] audit: type=1326 audit(1763359380.055:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.3.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71cb5df6c9 code=0x7ffc0000 [ 67.499134][ T5589] SELinux: Context system_u:object_r:memory_device_t:s0 is not valid (left unmapped). [ 67.553521][ T5591] loop4: detected capacity change from 0 to 512 [ 67.677594][ T5610] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 67.849054][ T5624] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 68.052154][ T5634] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 68.106087][ T5634] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 68.168688][ T3442] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.341275][ T5726] tipc: Started in network mode [ 69.346382][ T5726] tipc: Node identity ac14140f, cluster identity 4711 [ 69.353587][ T5726] tipc: New replicast peer: 255.255.255.83 [ 69.359629][ T5726] tipc: Enabled bearer , priority 10 [ 69.893326][ T5764] vlan2: entered allmulticast mode [ 69.955426][ T5768] __nla_validate_parse: 17 callbacks suppressed [ 69.955446][ T5768] netlink: 36 bytes leftover after parsing attributes in process `syz.2.900'. [ 70.112005][ T5791] netlink: 64 bytes leftover after parsing attributes in process `syz.2.908'. [ 70.190489][ T3792] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.487192][ T10] tipc: Node number set to 2886997007 [ 70.775585][ T5841] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5841 comm=syz.4.930 [ 70.788123][ T5841] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5841 comm=syz.4.930 [ 70.879928][ T5851] geneve3: entered promiscuous mode [ 71.262242][ T5899] pimreg: entered allmulticast mode [ 71.275733][ T5899] pimreg: left allmulticast mode [ 71.284647][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.958'. [ 71.301326][ T5903] team0: Port device team_slave_1 removed [ 71.362196][ T5911] netlink: 'syz.3.972': attribute type 1 has an invalid length. [ 71.413077][ T5911] bond0: (slave bridge3): making interface the new active one [ 71.425116][ T5911] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 71.804454][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.966'. [ 72.512409][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 72.512425][ T29] audit: type=1326 audit(1763359385.225:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 72.582765][ T29] audit: type=1326 audit(1763359385.255:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 72.606380][ T29] audit: type=1326 audit(1763359385.265:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 72.629776][ T29] audit: type=1326 audit(1763359385.265:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 72.653145][ T29] audit: type=1326 audit(1763359385.265:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 72.676560][ T29] audit: type=1326 audit(1763359385.265:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 72.699878][ T29] audit: type=1326 audit(1763359385.265:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 72.723206][ T29] audit: type=1326 audit(1763359385.265:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 72.746567][ T29] audit: type=1326 audit(1763359385.265:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 72.770192][ T29] audit: type=1326 audit(1763359385.265:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 72.878610][ T5982] netlink: 96 bytes leftover after parsing attributes in process `syz.4.991'. [ 72.908623][ T5985] netlink: 'syz.3.993': attribute type 1 has an invalid length. [ 72.969381][ T5985] bond2: (slave geneve3): making interface the new active one [ 73.007592][ T5985] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 73.033114][ T12] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 73.050959][ T12] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 73.062870][ T12] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 73.072961][ T12] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 73.222712][ T6014] loop4: detected capacity change from 0 to 1024 [ 73.256927][ T6016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1002'. [ 73.281664][ T6019] netlink: 'syz.0.1008': attribute type 3 has an invalid length. [ 73.291108][ T6014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.340209][ T6014] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.1006: Allocating blocks 449-513 which overlap fs metadata [ 73.364700][ T6012] EXT4-fs (loop4): pa ffff88810060c150: logic 48, phys. 177, len 21 [ 73.373007][ T6012] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 73.406981][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.636974][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 73.832742][ T6073] netlink: 'syz.4.1029': attribute type 5 has an invalid length. [ 74.048112][ T6091] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1037'. [ 74.150704][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 74.159760][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 74.285343][ T6110] loop2: detected capacity change from 0 to 512 [ 74.342602][ T6110] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.2.1045: corrupted xattr block 95: invalid header [ 74.421048][ T6110] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 74.450172][ T6110] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1045: bg 0: block 7: invalid block bitmap [ 74.473052][ T6110] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 74.506807][ T6110] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2967: inode #11: comm syz.2.1045: corrupted xattr block 95: invalid header [ 74.549444][ T6110] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 74.578831][ T6110] EXT4-fs (loop2): 1 orphan inode deleted [ 74.598657][ T6110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.678121][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.977046][ T6156] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 74.990625][ T6156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.016496][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1064'. [ 75.089522][ T6156] bond0 (unregistering): Released all slaves [ 75.785088][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1095'. [ 75.795170][ T6227] hsr_slave_0: left promiscuous mode [ 75.804722][ T6227] hsr_slave_1: left promiscuous mode [ 75.836866][ T6230] loop9: detected capacity change from 0 to 7 [ 75.846370][ T6230] buffer_io_error: 18 callbacks suppressed [ 75.846388][ T6230] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.865689][ T6230] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.873675][ T6230] loop9: unable to read partition table [ 75.919147][ T6230] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 75.919147][ T6230] ) failed (rc=-5) [ 76.254176][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1109'. [ 76.384892][ T6280] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 76.385360][ T6279] IPVS: stopping master sync thread 6280 ... [ 77.290843][ T6326] pimreg: entered allmulticast mode [ 77.322656][ T6326] pimreg: left allmulticast mode [ 77.597243][ T29] kauditd_printk_skb: 513 callbacks suppressed [ 77.597261][ T29] audit: type=1326 audit(1763359646.316:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 77.634920][ T29] audit: type=1326 audit(1763359646.316:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 77.671260][ T29] audit: type=1326 audit(1763359646.356:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 77.694828][ T29] audit: type=1326 audit(1763359646.356:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 77.718497][ T29] audit: type=1326 audit(1763359646.356:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 77.742035][ T29] audit: type=1326 audit(1763359646.376:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 77.765540][ T29] audit: type=1326 audit(1763359646.376:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 77.789054][ T29] audit: type=1326 audit(1763359646.376:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 77.812570][ T29] audit: type=1326 audit(1763359646.376:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 77.836134][ T29] audit: type=1326 audit(1763359646.376:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09232ef6c9 code=0x7ffc0000 [ 77.967565][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 78.407959][ T6396] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1168'. [ 78.438781][ T6402] sd 0:0:1:0: device reset [ 79.180627][ T6451] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 79.749143][ T6489] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 80.003119][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1220'. [ 80.019765][ T6515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1219'. [ 80.028839][ T6515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1219'. [ 80.080644][ T6515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1219'. [ 80.089805][ T6515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1219'. [ 80.156144][ T6515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1219'. [ 80.165476][ T6515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1219'. [ 80.206335][ T6536] netlink: 'syz.3.1226': attribute type 1 has an invalid length. [ 80.762197][ T6589] loop2: detected capacity change from 0 to 1024 [ 80.796390][ T6589] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.807391][ T6589] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 80.854812][ T6589] JBD2: no valid journal superblock found [ 80.860602][ T6589] EXT4-fs (loop2): Could not load journal inode [ 80.926337][ T6604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.936767][ T6604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.027413][ T6618] loop4: detected capacity change from 0 to 1024 [ 81.035141][ T6618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.044346][ T6618] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 81.055578][ T6618] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 81.065751][ T6618] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 81.075959][ T6618] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: comm syz.4.1265: inode #1: comm syz.4.1265: iget: illegal inode # [ 81.091203][ T6620] loop2: detected capacity change from 0 to 512 [ 81.092125][ T6604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.097672][ T6618] EXT4-fs (loop4): Remounting filesystem read-only [ 81.107881][ T6604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.114436][ T6618] EXT4-fs (loop4): no journal found [ 81.146271][ T6620] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1263: error while reading EA inode 32 err=-116 [ 81.170977][ T6604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.178702][ T6625] loop4: detected capacity change from 0 to 2048 [ 81.181405][ T6604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.199488][ T6620] EXT4-fs (loop2): Remounting filesystem read-only [ 81.206323][ T6620] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 81.216463][ T6620] EXT4-fs (loop2): 1 orphan inode deleted [ 81.218208][ T6625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.222675][ T6620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.249329][ T6620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.275426][ T6631] netlink: 'syz.1.1268': attribute type 3 has an invalid length. [ 81.288718][ T6604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.299319][ T6604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.344479][ T3314] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 81.360948][ T3314] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 81.374706][ T6635] netlink: 'syz.1.1269': attribute type 1 has an invalid length. [ 81.383560][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.395531][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.403899][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.433944][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.442400][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.454452][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.462749][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.534481][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.542767][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.804417][ T6673] rdma_op ffff88812b942580 conn xmit_rdma 0000000000000000 [ 81.951447][ T6694] netem: incorrect gi model size [ 81.956530][ T6694] netem: change failed [ 82.061380][ T6711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1307'. [ 82.213654][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.224103][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 82.311527][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.322011][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 82.391263][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.401743][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 82.437815][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.448238][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 82.632575][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 82.654514][ T6755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.663068][ T6755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.663335][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.681290][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.691421][ T12] bond0 (unregistering): Released all slaves [ 82.700094][ T12] bond1 (unregistering): Released all slaves [ 82.740780][ T12] hsr_slave_0: left promiscuous mode [ 82.746927][ T12] hsr_slave_1: left promiscuous mode [ 82.752751][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.760200][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.768715][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.776271][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.788079][ T12] veth1_macvtap: left promiscuous mode [ 82.793585][ T12] veth0_macvtap: left promiscuous mode [ 82.799527][ T12] veth1_vlan: left promiscuous mode [ 82.804974][ T12] veth0_vlan: left promiscuous mode [ 82.886511][ T12] team0 (unregistering): Port device team_slave_0 removed [ 83.016459][ T6727] chnl_net:caif_netlink_parms(): no params data found [ 83.024509][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 83.024526][ T29] audit: type=1400 audit(1763359907.744:1620): avc: denied { write } for pid=6769 comm="syz.0.1331" name="file0" dev="tmpfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.053135][ T29] audit: type=1400 audit(1763359907.744:1621): avc: denied { open } for pid=6769 comm="syz.0.1331" path="/282/file0" dev="tmpfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.080541][ T6770] block device autoloading is deprecated and will be removed. [ 83.106082][ T29] audit: type=1400 audit(1763359907.824:1622): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.129507][ T29] audit: type=1400 audit(1763359907.824:1623): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.152875][ T29] audit: type=1400 audit(1763359907.824:1624): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.203546][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.210652][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.226806][ T6727] bridge_slave_0: entered allmulticast mode [ 83.233439][ T6727] bridge_slave_0: entered promiscuous mode [ 83.240255][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.247459][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.254659][ T6727] bridge_slave_1: entered allmulticast mode [ 83.261093][ T6727] bridge_slave_1: entered promiscuous mode [ 83.283560][ T6727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.306433][ T6727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.365631][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.414732][ T6727] team0: Port device team_slave_0 added [ 83.429907][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.447394][ T6727] team0: Port device team_slave_1 added [ 83.462890][ T6801] loop4: detected capacity change from 0 to 512 [ 83.476628][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.483627][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.509698][ T6727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.522721][ T6801] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1339: corrupted inode contents [ 83.536501][ T6801] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 83.545517][ T6801] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1339: corrupted inode contents [ 83.574371][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.598414][ T6801] EXT4-fs error (device loop4): ext4_evict_inode:302: inode #15: comm syz.4.1339: mark_inode_dirty error [ 83.612675][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.619738][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.630616][ T6801] EXT4-fs (loop4): 1 orphan inode deleted [ 83.645730][ T6727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.651874][ T6801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.701504][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.710182][ T6801] netlink: 'syz.4.1339': attribute type 3 has an invalid length. [ 83.744177][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.755660][ T6727] hsr_slave_0: entered promiscuous mode [ 83.761947][ T6727] hsr_slave_1: entered promiscuous mode [ 83.768929][ T6727] debugfs: 'hsr0' already exists in 'hsr' [ 83.774944][ T6727] Cannot create hsr debugfs directory [ 83.783641][ T6771] chnl_net:caif_netlink_parms(): no params data found [ 83.884172][ T12] bridge_slave_1: left allmulticast mode [ 83.889872][ T12] bridge_slave_1: left promiscuous mode [ 83.895666][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.903876][ T12] bridge_slave_0: left promiscuous mode [ 83.909741][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.055554][ T12] bond1 (unregistering): (slave bridge1): Releasing active interface [ 84.106766][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.118456][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.134321][ T12] bond0 (unregistering): Released all slaves [ 84.143698][ T12] bond1 (unregistering): Released all slaves [ 84.157470][ T12] bond2 (unregistering): Released all slaves [ 84.214700][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.221981][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.237745][ T6771] bridge_slave_0: entered allmulticast mode [ 84.244929][ T6771] bridge_slave_0: entered promiscuous mode [ 84.258189][ T12] tipc: Disabling bearer [ 84.263214][ T12] tipc: Left network mode [ 84.267841][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.274951][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.282574][ T6771] bridge_slave_1: entered allmulticast mode [ 84.289250][ T6771] bridge_slave_1: entered promiscuous mode [ 84.301240][ T12] hsr_slave_0: left promiscuous mode [ 84.307519][ T12] hsr_slave_1: left promiscuous mode [ 84.313480][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.320951][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.329053][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.336669][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.351337][ T12] veth1_macvtap: left promiscuous mode [ 84.356966][ T12] veth0_macvtap: left promiscuous mode [ 84.362758][ T12] veth1_vlan: left promiscuous mode [ 84.368088][ T12] veth0_vlan: left promiscuous mode [ 84.493422][ T6771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.524987][ T6771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.553719][ T6727] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.569654][ T6771] team0: Port device team_slave_0 added [ 84.575975][ T6727] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.588924][ T6771] team0: Port device team_slave_1 added [ 84.595709][ T6727] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.612348][ T6727] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.625568][ T6853] loop4: detected capacity change from 0 to 164 [ 84.633595][ T6771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.640649][ T6771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.666701][ T6771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.685225][ T29] audit: type=1400 audit(1763359909.404:1625): avc: denied { read write } for pid=6854 comm="syz.0.1359" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.709279][ T29] audit: type=1400 audit(1763359909.404:1626): avc: denied { open } for pid=6854 comm="syz.0.1359" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.733936][ T6771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.740935][ T6771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.766934][ T6771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.850561][ T6771] hsr_slave_0: entered promiscuous mode [ 84.867261][ T6771] hsr_slave_1: entered promiscuous mode [ 84.976643][ T6727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.002683][ T6727] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.020723][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.027854][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.053197][ T6771] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 85.061343][ T29] audit: type=1326 audit(1763359909.784:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.0.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 85.097228][ T555] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.104382][ T555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.112360][ T29] audit: type=1326 audit(1763359909.784:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.0.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 85.135919][ T29] audit: type=1326 audit(1763359909.784:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.0.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 85.160370][ T6771] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 85.169626][ T6771] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 85.179575][ T6771] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 85.202626][ T6727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.277443][ T6771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.302391][ T6727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.324369][ T6771] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.337849][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.345029][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.359520][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.366735][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.394899][ T6771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.539240][ T6771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.612488][ T6727] veth0_vlan: entered promiscuous mode [ 85.628262][ T6727] veth1_vlan: entered promiscuous mode [ 85.662400][ T6727] veth0_macvtap: entered promiscuous mode [ 85.675316][ T6727] veth1_macvtap: entered promiscuous mode [ 85.703718][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.719736][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.737840][ T3442] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.758814][ T3442] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.772774][ T3442] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.804424][ T3442] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.872220][ T6771] veth0_vlan: entered promiscuous mode [ 85.893187][ T6771] veth1_vlan: entered promiscuous mode [ 85.922372][ T6771] veth0_macvtap: entered promiscuous mode [ 85.954704][ T6771] veth1_macvtap: entered promiscuous mode [ 85.973844][ T6771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.997589][ T6771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.005828][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1376'. [ 86.014975][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1376'. [ 86.039541][ T555] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.059248][ T555] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.069799][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1380'. [ 86.086487][ T555] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.103682][ T555] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.720989][ T6976] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1392'. [ 86.953906][ T7010] netlink: 'syz.3.1403': attribute type 3 has an invalid length. [ 86.961762][ T7010] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1403'. [ 87.543920][ T7033] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.683929][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1417'. [ 87.702065][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1417'. [ 87.765702][ T7041] netem: change failed [ 87.964921][ T6996] Set syz1 is full, maxelem 65536 reached [ 88.086018][ T7060] SELinux: failed to load policy [ 88.370310][ T7095] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.1443'. [ 88.379989][ T7095] netlink: zone id is out of range [ 88.385154][ T7095] netlink: zone id is out of range [ 88.390586][ T7095] netlink: zone id is out of range [ 88.396148][ T7095] netlink: del zone limit has 8 unknown bytes [ 88.423832][ T7100] loop0: detected capacity change from 0 to 164 [ 88.435174][ T7100] bio_check_eod: 102 callbacks suppressed [ 88.435192][ T7100] syz.0.1445: attempt to access beyond end of device [ 88.435192][ T7100] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 88.455179][ T7100] syz.0.1445: attempt to access beyond end of device [ 88.455179][ T7100] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 88.468940][ T7095] loop5: detected capacity change from 0 to 8192 [ 88.525035][ T7095] loop5: p4 < > [ 88.633435][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 88.633451][ T29] audit: type=1326 audit(88.603:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 88.663072][ T29] audit: type=1326 audit(88.603:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 88.686107][ T29] audit: type=1326 audit(88.603:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 88.708932][ T29] audit: type=1326 audit(88.643:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 88.732107][ T29] audit: type=1326 audit(88.643:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 88.754945][ T29] audit: type=1326 audit(88.643:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 88.788802][ T29] audit: type=1326 audit(88.643:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 88.811701][ T29] audit: type=1326 audit(88.643:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 88.835133][ T29] audit: type=1326 audit(88.643:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 88.857923][ T29] audit: type=1326 audit(88.643:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7111 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 88.906058][ T7118] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 89.116569][ T7134] pimreg: entered allmulticast mode [ 89.132125][ T7134] pimreg: left allmulticast mode [ 89.495494][ T7172] loop4: detected capacity change from 0 to 512 [ 89.544474][ T7172] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1480: corrupted in-inode xattr: e_value size too large [ 89.574384][ T7172] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1480: couldn't read orphan inode 15 (err -117) [ 89.662123][ T7172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.728156][ T7190] loop5: detected capacity change from 0 to 512 [ 89.734996][ T7190] EXT4-fs: Ignoring removed i_version option [ 89.741045][ T7190] EXT4-fs: Ignoring removed nobh option [ 89.749768][ T7190] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.762850][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.774281][ T7190] EXT4-fs (loop5): 1 truncate cleaned up [ 89.780351][ T7190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.855504][ T6727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.896077][ T7207] loop5: detected capacity change from 0 to 128 [ 89.927250][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1495'. [ 89.942124][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1495'. [ 90.257085][ T7249] loop2: detected capacity change from 0 to 7 [ 90.263824][ T7249] loop2: [ 90.432600][ T7262] loop6: detected capacity change from 0 to 512 [ 90.467003][ T7262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.505229][ T7262] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1520: corrupted inode contents [ 90.536650][ T7262] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.1520: mark_inode_dirty error [ 90.563050][ T7262] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1520: corrupted inode contents [ 90.604183][ T7273] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1520: corrupted inode contents [ 90.621228][ T7273] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.1520: mark_inode_dirty error [ 90.650664][ T7273] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1520: corrupted inode contents [ 90.677353][ T7273] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1520: mark_inode_dirty error [ 90.692459][ T7273] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1520: corrupted inode contents [ 90.755812][ T7273] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.1520: mark_inode_dirty error [ 90.788727][ T6771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.015927][ T7329] loop4: detected capacity change from 0 to 512 [ 91.023116][ T7328] loop6: detected capacity change from 0 to 512 [ 91.054876][ T7328] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.1559: corrupted in-inode xattr: e_value size too large [ 91.083254][ T7328] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1559: couldn't read orphan inode 15 (err -117) [ 91.097607][ T7329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.113586][ T7328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.141341][ T7329] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1549: corrupted inode contents [ 91.155963][ T6771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.183335][ T7329] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.1549: mark_inode_dirty error [ 91.198411][ T7329] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1549: corrupted inode contents [ 91.225175][ T7340] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1549: corrupted inode contents [ 91.242583][ T7340] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.1549: mark_inode_dirty error [ 91.254293][ T7340] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1549: corrupted inode contents [ 91.286795][ T7340] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1549: mark_inode_dirty error [ 91.317064][ T7344] syzkaller0: entered promiscuous mode [ 91.322597][ T7344] syzkaller0: entered allmulticast mode [ 91.329010][ T7340] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1549: corrupted inode contents [ 91.344235][ T7340] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.1549: mark_inode_dirty error [ 91.395784][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.469930][ T7358] loop0: detected capacity change from 0 to 512 [ 91.478193][ T7358] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.500363][ T7358] EXT4-fs (loop0): 1 truncate cleaned up [ 91.523907][ T7358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.576317][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.615843][ T7369] __nla_validate_parse: 6 callbacks suppressed [ 91.615917][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1565'. [ 91.670558][ T7378] gretap0: entered promiscuous mode [ 91.677104][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1571'. [ 91.686099][ T7378] gretap0: left promiscuous mode [ 91.800335][ T7393] loop6: detected capacity change from 0 to 4096 [ 91.807212][ T7393] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.816417][ T7393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.868516][ T6771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.901695][ T7403] loop0: detected capacity change from 0 to 128 [ 91.914441][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'. [ 91.971959][ T7408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.981100][ T7408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.172137][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 92.280587][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1591'. [ 92.419636][ T7442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1597'. [ 92.506749][ T7452] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 92.521101][ T7454] loop5: detected capacity change from 0 to 128 [ 92.735495][ T7474] loop0: detected capacity change from 0 to 512 [ 92.757294][ T7474] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1612: error while reading EA inode 32 err=-116 [ 92.784403][ T7474] EXT4-fs (loop0): Remounting filesystem read-only [ 92.797841][ T7474] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 92.817901][ T7474] EXT4-fs (loop0): 1 orphan inode deleted [ 92.823999][ T7474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.883454][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.076349][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1625'. [ 93.418418][ T7530] loop6: detected capacity change from 0 to 256 [ 93.425487][ T7530] FAT-fs (loop6): bogus number of FAT sectors [ 93.431603][ T7530] FAT-fs (loop6): Can't find a valid FAT filesystem [ 93.673192][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 93.673208][ T29] audit: type=1400 audit(93.603:1952): avc: denied { create } for pid=7541 comm="syz.6.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.699054][ T29] audit: type=1326 audit(93.603:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.6.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc031f6c9 code=0x7ffc0000 [ 93.722084][ T29] audit: type=1326 audit(93.603:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.6.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc031f6c9 code=0x7ffc0000 [ 93.744977][ T29] audit: type=1326 audit(93.603:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.6.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f9fc031f6c9 code=0x7ffc0000 [ 93.767786][ T29] audit: type=1326 audit(93.603:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.6.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc031f6c9 code=0x7ffc0000 [ 93.837672][ T7524] Set syz1 is full, maxelem 65536 reached [ 93.843601][ T29] audit: type=1400 audit(93.813:1957): avc: denied { name_bind } for pid=7555 comm="syz.5.1658" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 93.950984][ T29] audit: type=1326 audit(93.923:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 93.959992][ T7572] loop6: detected capacity change from 0 to 512 [ 93.973912][ T29] audit: type=1326 audit(93.923:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 94.006485][ T7570] loop5: detected capacity change from 0 to 256 [ 94.025300][ T7572] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 94.035233][ T29] audit: type=1326 audit(93.983:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 94.058268][ T29] audit: type=1326 audit(93.983:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 94.081309][ T7570] FAT-fs (loop5): bogus number of FAT sectors [ 94.087500][ T7570] FAT-fs (loop5): Can't find a valid FAT filesystem [ 94.141487][ T7572] EXT4-fs (loop6): 1 truncate cleaned up [ 94.147984][ T7572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.205134][ T6771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.309599][ T7609] netlink: 'syz.0.1674': attribute type 10 has an invalid length. [ 94.317698][ T7609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1674'. [ 94.343339][ T7613] netlink: 'syz.3.1675': attribute type 1 has an invalid length. [ 94.358313][ T7609] team0: Port device geneve1 added [ 94.373199][ T7614] netlink: 'syz.4.1676': attribute type 1 has an invalid length. [ 94.382733][ T7613] 8021q: adding VLAN 0 to HW filter on device bond3 [ 94.414503][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1675'. [ 94.423525][ T7617] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1678'. [ 94.443756][ T7623] bond3 (unregistering): Released all slaves [ 94.556719][ T7643] netlink: 'syz.6.1689': attribute type 10 has an invalid length. [ 94.589174][ T7643] team0: Port device geneve1 added [ 94.632833][ T7649] loop5: detected capacity change from 0 to 512 [ 94.687172][ T7649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.042037][ T6727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.330567][ T7695] loop6: detected capacity change from 0 to 128 [ 95.428638][ T7664] Set syz1 is full, maxelem 65536 reached [ 95.510923][ T7695] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.654755][ T6771] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.993256][ T7752] xt_hashlimit: max too large, truncated to 1048576 [ 96.210597][ T7779] xt_hashlimit: max too large, truncated to 1048576 [ 96.601129][ T7817] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.621128][ T7817] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 96.718521][ T7827] __nla_validate_parse: 6 callbacks suppressed [ 96.718537][ T7827] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1776'. [ 97.047024][ T7868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1797'. [ 97.064685][ T7855] loop5: detected capacity change from 0 to 8192 [ 97.149310][ T7881] sg_write: data in/out 49276/2 bytes for SCSI command 0x6-- guessing data in; [ 97.149310][ T7881] program syz.4.1801 not setting count and/or reply_len properly [ 97.211188][ T7891] loop4: detected capacity change from 0 to 128 [ 97.220013][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1804'. [ 97.235665][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1804'. [ 97.250183][ T7891] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.288382][ T7894] tipc: Enabling of bearer rejected, failed to enable media [ 97.327005][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.492078][ T7923] siw: device registration error -23 [ 97.575449][ T7933] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 97.575449][ T7933] program syz.5.1822 not setting count and/or reply_len properly [ 97.608165][ T3403] hid_parser_main: 8 callbacks suppressed [ 97.608214][ T3403] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 97.621999][ T3403] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 97.629582][ T3403] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 97.637111][ T3403] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 97.644672][ T3403] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 97.652168][ T3403] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 97.659615][ T3403] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 97.667087][ T3403] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 97.674610][ T3403] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 97.682179][ T3403] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 97.695913][ T3403] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 98.037912][ T3427] kernel read not supported for file /vcs (pid: 3427 comm: kworker/1:4) [ 98.221559][ T7992] tipc: Enabling of bearer rejected, failed to enable media [ 98.262243][ T7956] loop0: detected capacity change from 0 to 32768 [ 98.352955][ T7956] loop0: p1 p3 < > [ 98.381767][ T8003] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1853'. [ 98.633724][ T8016] tmpfs: Bad value for 'mpol' [ 98.718094][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 98.718113][ T29] audit: type=1326 audit(2000000001.150:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 98.764272][ T29] audit: type=1326 audit(2000000001.150:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 98.787744][ T29] audit: type=1326 audit(2000000001.180:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 98.811182][ T29] audit: type=1326 audit(2000000001.180:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 98.834607][ T29] audit: type=1326 audit(2000000001.180:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f00bf7f1f85 code=0x7ffc0000 [ 98.858050][ T29] audit: type=1326 audit(2000000001.200:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 98.899734][ T29] audit: type=1326 audit(2000000001.330:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 98.923245][ T29] audit: type=1326 audit(2000000001.330:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 98.946965][ T29] audit: type=1326 audit(2000000001.330:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00bf7bf6c9 code=0x7ffc0000 [ 99.142103][ T29] audit: type=1400 audit(2000000001.570:2281): avc: denied { read } for pid=8032 comm="syz.0.1866" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.335000][ T8043] loop0: detected capacity change from 0 to 512 [ 99.343331][ T8043] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.1871: corrupted in-inode xattr: invalid ea_ino [ 99.357364][ T8043] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1871: couldn't read orphan inode 15 (err -117) [ 99.370161][ T8043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.422979][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.458203][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1876'. [ 99.483438][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1876'. [ 99.612337][ T8070] VFS: Mount too revealing [ 99.801377][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1894'. [ 99.822656][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1894'. [ 99.968165][ T8104] ================================================================== [ 99.976403][ T8104] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 99.985389][ T8104] [ 99.987750][ T8104] write to 0xffff888103709da0 of 4 bytes by task 8111 on cpu 1: [ 99.995386][ T8104] selinux_inode_permission+0x3ac/0x740 [ 100.000951][ T8104] security_inode_permission+0x6d/0xb0 [ 100.006423][ T8104] inode_permission+0x106/0x310 [ 100.011311][ T8104] link_path_walk+0x162/0x900 [ 100.016015][ T8104] path_openat+0x1de/0x2170 [ 100.020531][ T8104] do_filp_open+0x109/0x230 [ 100.025052][ T8104] io_openat2+0x272/0x390 [ 100.029487][ T8104] io_openat+0x1b/0x30 [ 100.033572][ T8104] __io_issue_sqe+0xfe/0x2e0 [ 100.038179][ T8104] io_issue_sqe+0x56/0xa80 [ 100.042614][ T8104] io_wq_submit_work+0x3f7/0x5f0 [ 100.047577][ T8104] io_worker_handle_work+0x44e/0x9b0 [ 100.052884][ T8104] io_wq_worker+0x22e/0x860 [ 100.057414][ T8104] ret_from_fork+0x122/0x1b0 [ 100.062015][ T8104] ret_from_fork_asm+0x1a/0x30 [ 100.066794][ T8104] [ 100.069124][ T8104] read to 0xffff888103709da0 of 4 bytes by task 8104 on cpu 0: [ 100.076673][ T8104] selinux_inode_permission+0x334/0x740 [ 100.082238][ T8104] security_inode_permission+0x6d/0xb0 [ 100.087716][ T8104] inode_permission+0x106/0x310 [ 100.092596][ T8104] link_path_walk+0x162/0x900 [ 100.097303][ T8104] path_openat+0x1de/0x2170 [ 100.101838][ T8104] do_filp_open+0x109/0x230 [ 100.106403][ T8104] io_openat2+0x272/0x390 [ 100.110757][ T8104] io_openat+0x1b/0x30 [ 100.114876][ T8104] __io_issue_sqe+0xfe/0x2e0 [ 100.119594][ T8104] io_issue_sqe+0x56/0xa80 [ 100.124043][ T8104] io_submit_sqes+0x675/0x1060 [ 100.128845][ T8104] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 100.134420][ T8104] __x64_sys_io_uring_enter+0x78/0x90 [ 100.139820][ T8104] x64_sys_call+0x2df0/0x3000 [ 100.144510][ T8104] do_syscall_64+0xd2/0x200 [ 100.149048][ T8104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.155040][ T8104] [ 100.157397][ T8104] value changed: 0x00000000 -> 0x00000001 [ 100.163131][ T8104] [ 100.165457][ T8104] Reported by Kernel Concurrency Sanitizer on: [ 100.171632][ T8104] CPU: 0 UID: 0 PID: 8104 Comm: syz.5.1898 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.181409][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.191503][ T8104] ================================================================== [ 100.304985][ T8116] loop6: detected capacity change from 0 to 512 [ 100.312370][ T8116] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.355538][ T8116] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 100.363509][ T8116] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 100.394140][ T8116] System zones: 0-1, 15-15, 18-18, 34-34 [ 100.400119][ T8116] EXT4-fs (loop6): orphan cleanup on readonly fs [ 100.406646][ T8116] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 100.421292][ T8116] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 100.441687][ T8116] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1900: bg 0: block 40: padding at end of block bitmap is not set [ 100.457466][ T8116] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 100.466408][ T8116] EXT4-fs (loop6): 1 truncate cleaned up [ 100.472466][ T8116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.694025][ T6771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.