last executing test programs: 1.012680673s ago: executing program 0 (id=871): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$incfs(0xffffffffffffff9c, 0x0, 0x100, 0xe1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$eJzs3V1rHFUcB+D/2d2kL2lNKoLWXhgo2IKaNGlFEcEW650XvhS8KhiTtJRu29BEsLViC/Ub6AcQvBNEvCwiRb3x1jvBDyDFIm1uvFuZzUy6bXfTvGw6tfM8sM2cORnOmSy/npmzM7MBVNZo9k8tYndEzKWI4Y66RuSVo0u/d/vWpenFW5emU7Ra7/+TIuXrit9P+c+hfOOtEfH7zymerN/f7vyFi6enms3Z83l5fOHM3Pj8hYsvnTozdXL25OzZyYlXJl4+dHDy0IG+7OfOiPh17Gjj6ok393w//c2uz3/89lqKw7Ejr+/cj34ZjdHlv0mn7O/6ar8bK0k935/Otzg1SuwQa1K8fwMR8XQMRz3uvHnD8cW7pXYO2FStFNECKirJP1RUcRyQnf8Wr3KPSICH5eaRpQmA22lpbm9xOf+NpbnB2NqeG9i+mKJzWidFRD9m5rI25p5Pw9krNmkeDuju8pWIeKbb+J/a2Rxpz+Jn+a/dlf9aRLyT/8zWv7fO9kfvKcs/PDwbyf+HHfn/aJ3tyz8AAAAAAAD0z/UjEfFit8//asvX/0SX63+GIuJwH9p/8Od/tRt9aAbo4uaRiNcjorj2b7Ej/7mRel7a2b4eYCCdONWcPRART0TE/hjYkpUnVmhjdM9vAz3rOq7/y15Z+8W1gHk/bjS23L3NzNTC1Eb2GVhy80rEs41u+U/L43/qMv5nY//cKttoHX3jl151D84/sFlaX0fs6zr+33lyRVr5+Rzj7eOB8eKo4H6fHr/2Q6/25R/Kk43/21fO/0jqfF7P/Nrb+OzvPzeQ/+7H/4PpWPuRM4P5uk+mFhbOT0QMprfvXz+59j7D46jIQ5GXLP/793Y//1/p+H9bRFxeZZvHfnrraq864z+UJ8v/zJrG/7Uv7P3gq397tb+68f9Qe0zfn68x/wcrW21Ay+4nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwf1SJiR6Ta2PJyrTY2FjEUEU/F9lrz3PzCCyfOfXx2Jqtrf/9/rfim3+Glciq+/3+kozx5T/lgROyKiC/r29rlselzzZmydx4AAAAAAAAAAAAAAAAAAAAeEUM97v/P/FUvu3fApmuU3QGgNPIP1SX/UF3yD9Ul/1Bd8g/VJf9QXfIP1SX/UF311nfHy+4DAAAAAADQN7ueu/5HiojLr21rvzKDed1AqT0DNtvhsjsAlMYjfqC6XPoH1eUcH0gPqN+67i0BAAAAAAAAAAAAgH7Zt9v9/1BVtbI7AJSm9/3/ngwAjzv3/0N1OccH3P8PAAAAAAAAAAAAAI+++QsXT081m7Pn17uwZWObW7BQnYVIfUjcQ1oo+38mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg8F8AAAD//8rF+L8=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) 703.753363ms ago: executing program 3 (id=881): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388", 0xca}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000cc0)="24e266f311bfc34d205676161ea41ddaadf890793efca7f44791a16cdbaac927fd152b30e1a0844903ed80c4455d5241cde9c46460964a6832700b1d9d8a5c8c0300865cc19dd948865c6280a0f3cb250dd3d97756dae4517286691e19487618d9223b395789ce9ca001e71c19b11800b5015550ee7b1528ae37fbe2ae56936ce5dc700d29780e33c4acfa135d893b3e22602e793a5afc5ad7ac84a2200620", 0x9f}, {&(0x7f0000000e80)="4a7685477e9139292c7c7924d7d45febace2e35bb97de3146dd04b1f8c8ae63120315a187795aaf3f790a5c6d90074e37404a38cbe48126d8d", 0x39}], 0x2}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 634.601832ms ago: executing program 1 (id=884): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f0000000140), 0x253, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000000)) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 634.369642ms ago: executing program 4 (id=885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000040)={[{@nobh}, {@nojournal_checksum}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4022}]) 633.881642ms ago: executing program 2 (id=886): r0 = syz_io_uring_setup(0xd3f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x220}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4ac9, 0x0, 0x0, 0x0, 0x0) 615.062502ms ago: executing program 3 (id=887): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 531.219232ms ago: executing program 1 (id=888): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)='%pI4 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 516.379192ms ago: executing program 0 (id=889): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x86) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./bus\x00', 0x1000, 0x0) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 513.847432ms ago: executing program 1 (id=890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "723e08df8c8b8a86", "bdcc707b30e3c37cfe84d8d4bb4d47d0", 'e.\al', "955788b9c460caac"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) shutdown(r0, 0x0) recvfrom$inet6(r0, &(0x7f0000000140)=""/156, 0x9c, 0x100, 0x0, 0x0) 463.127312ms ago: executing program 0 (id=891): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100040e, &(0x7f00000000c0)={[{@norecovery}, {@mblk_io_submit}, {@lazytime}, {}, {@block_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x3ed}}]}, 0x3, 0x449, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000080)='./bus\x00', 0x10) ftruncate(r0, 0x12081ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = open(&(0x7f0000000200)='./bus\x00', 0x16507e, 0x0) sendfile(r2, r2, 0x0, 0x100000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 415.142042ms ago: executing program 1 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000, 0x10, 0x1}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 414.823402ms ago: executing program 2 (id=893): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x8f8c, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) write$binfmt_misc(r2, 0x0, 0x0) 364.376812ms ago: executing program 3 (id=894): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x3010006, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYBLOB="14a8d0ca3386858350717bda500a6e0d271cba7c24404f4fdd13b1b5922dc27fae2bb7656c2c9cf00076db74ad9da398465c271f3c99f9c8b75aa628562a36eae8e60442812741be1793c1486650f74ba8ad8536070000000000000065f3bc92da1e56d7ffa95c91b5c58ba55f9245a209ef24b8348e9ff4cb9b84333e1a13"], 0xdb, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000002c0)='./bus/file0\x00', 0x40) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) 356.665792ms ago: executing program 4 (id=895): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = eventfd2(0x9, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup3(r2, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r4, &(0x7f0000000400)={0x1d, r6, 0x0, {}, 0xff}, 0x18) 332.291081ms ago: executing program 2 (id=896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) close_range(r2, r3, 0x0) 241.952001ms ago: executing program 3 (id=897): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) 241.197191ms ago: executing program 4 (id=907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) close_range(r2, r3, 0x0) 240.687211ms ago: executing program 2 (id=898): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f0000000140), 0x253, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000000)) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000026060800010400004507000002000000240600000ee60000bf050000000000000f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff2d350100000000009500000000000000050000000000000095000000000000001f1bd182bd43cb58074e0a16289328452c0880fe4b3af9c97925711095cc7d3ebcd8418ffdc4a1da470a14e4391c3fb6915cbff2a4911fe82664d775cdb9dfc83fa32db39b636c1866b526185f4ab35172a74e9afe751664f575306ebb2c2890a4fa79303101a652776cc2fb4f01e79cd10215d917a116350d60f27fdc244bdab56ee3ad8f5fdf82027a1215bc54045d6b9f30bdebcf053aa120397695ffd0f6e5fe24ce4b9143a3d841"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 230.631721ms ago: executing program 0 (id=899): ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000001"]) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x20, 0x4) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x4622, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 179.624621ms ago: executing program 4 (id=900): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388", 0xca}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000cc0)="24e266f311bfc34d205676161ea41ddaadf890793efca7f44791a16cdbaac927fd152b30e1a0844903ed80c4455d5241cde9c46460964a6832700b1d9d8a5c8c0300865cc19dd948865c6280a0f3cb250dd3d97756dae4517286691e19487618d9223b395789ce9ca001e71c19b11800b5015550ee7b1528ae37fbe2ae56936ce5dc700d29780e33c4acfa135d893b3e22602e793a5afc5ad7ac84a2200620", 0x9f}, {&(0x7f0000000e80)="4a7685477e9139292c7c7924d7d45febace2e35bb97de3146dd04b1f8c8ae63120315a187795aaf3f790a5c6d90074e37404a38cbe48126d8d", 0x39}], 0x2}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 179.083881ms ago: executing program 1 (id=911): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001000000400000000000e0000002000000000000000000000000fe"], 0xb8}, 0x1, 0x0, 0x0, 0x8004}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 171.452251ms ago: executing program 2 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000410, &(0x7f0000000000)={[{@nouid32}, {@acl}, {@abort}]}, 0x4, 0x4fe, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r3, r3, 0x0, 0xfffe80) 155.942831ms ago: executing program 3 (id=902): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 144.534921ms ago: executing program 0 (id=914): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x48f0, 0x400, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 138.47393ms ago: executing program 4 (id=903): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 84.142601ms ago: executing program 4 (id=904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "723e08df8c8b8a86", "bdcc707b30e3c37cfe84d8d4bb4d47d0", 'e.\al', "955788b9c460caac"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) shutdown(r0, 0x0) recvfrom$inet6(r0, &(0x7f0000000140)=""/156, 0x9c, 0x100, 0x0, 0x0) 83.399451ms ago: executing program 1 (id=905): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 68.22946ms ago: executing program 0 (id=906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000040)={[{@nobh}, {@nojournal_checksum}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4022}]) 230.08µs ago: executing program 2 (id=908): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) 0s ago: executing program 3 (id=909): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000000002, 0x800000000003}, 0x100000, 0x5dd7, 0x3, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x29, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0xa, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x40, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 34.291042][ T29] audit: type=1400 audit(1736534536.027:81): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.292303][ T3289] cgroup: Unknown subsys name 'net' [ 34.313873][ T29] audit: type=1400 audit(1736534536.027:82): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.341258][ T29] audit: type=1400 audit(1736534536.057:83): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.361122][ T29] audit: type=1400 audit(1736534536.067:84): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 34.483522][ T3289] cgroup: Unknown subsys name 'cpuset' [ 34.489783][ T3289] cgroup: Unknown subsys name 'rlimit' [ 34.640739][ T29] audit: type=1400 audit(1736534536.377:85): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.666306][ T29] audit: type=1400 audit(1736534536.377:86): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.686889][ T29] audit: type=1400 audit(1736534536.377:87): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.695388][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.707343][ T29] audit: type=1400 audit(1736534536.377:88): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.736273][ T29] audit: type=1400 audit(1736534536.387:89): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.761212][ T29] audit: type=1400 audit(1736534536.387:90): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.788740][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.934052][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 35.963680][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 36.043487][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 36.065970][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 36.103167][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 36.114292][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.121392][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.128596][ T3308] bridge_slave_0: entered allmulticast mode [ 36.135008][ T3308] bridge_slave_0: entered promiscuous mode [ 36.141389][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.148520][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.156527][ T3299] bridge_slave_0: entered allmulticast mode [ 36.163110][ T3299] bridge_slave_0: entered promiscuous mode [ 36.172300][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.179481][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.186674][ T3299] bridge_slave_1: entered allmulticast mode [ 36.193110][ T3299] bridge_slave_1: entered promiscuous mode [ 36.204593][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.211811][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.218937][ T3308] bridge_slave_1: entered allmulticast mode [ 36.225326][ T3308] bridge_slave_1: entered promiscuous mode [ 36.276222][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.297444][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.304619][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.311908][ T3298] bridge_slave_0: entered allmulticast mode [ 36.318315][ T3298] bridge_slave_0: entered promiscuous mode [ 36.325578][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.335234][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.342354][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.349531][ T3298] bridge_slave_1: entered allmulticast mode [ 36.356229][ T3298] bridge_slave_1: entered promiscuous mode [ 36.369527][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.386781][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.405166][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.412263][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.419469][ T3302] bridge_slave_0: entered allmulticast mode [ 36.425873][ T3302] bridge_slave_0: entered promiscuous mode [ 36.448606][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.456065][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.463286][ T3302] bridge_slave_1: entered allmulticast mode [ 36.469643][ T3302] bridge_slave_1: entered promiscuous mode [ 36.486040][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.495735][ T3308] team0: Port device team_slave_0 added [ 36.502092][ T3299] team0: Port device team_slave_0 added [ 36.521872][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.528974][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.536406][ T3301] bridge_slave_0: entered allmulticast mode [ 36.542893][ T3301] bridge_slave_0: entered promiscuous mode [ 36.549863][ T3308] team0: Port device team_slave_1 added [ 36.556495][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.566018][ T3299] team0: Port device team_slave_1 added [ 36.577385][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.586737][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.593819][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.600943][ T3301] bridge_slave_1: entered allmulticast mode [ 36.607414][ T3301] bridge_slave_1: entered promiscuous mode [ 36.637360][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.660297][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.667335][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.693329][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.704579][ T3298] team0: Port device team_slave_0 added [ 36.715932][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.725323][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.732298][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.758253][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.769244][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.776261][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.802266][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.815870][ T3298] team0: Port device team_slave_1 added [ 36.822952][ T3302] team0: Port device team_slave_0 added [ 36.829709][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.839328][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.846426][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.872372][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.890643][ T3302] team0: Port device team_slave_1 added [ 36.931515][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.938512][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.964447][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.975838][ T3301] team0: Port device team_slave_0 added [ 36.982860][ T3301] team0: Port device team_slave_1 added [ 36.988674][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.995652][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.021617][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.037250][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.044238][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.070169][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.090396][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.097442][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.123348][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.136279][ T3299] hsr_slave_0: entered promiscuous mode [ 37.142565][ T3299] hsr_slave_1: entered promiscuous mode [ 37.158701][ T3308] hsr_slave_0: entered promiscuous mode [ 37.164879][ T3308] hsr_slave_1: entered promiscuous mode [ 37.170740][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.178344][ T3308] Cannot create hsr debugfs directory [ 37.191565][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.198595][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.224575][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.235870][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.242842][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.268758][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.328980][ T3298] hsr_slave_0: entered promiscuous mode [ 37.335204][ T3298] hsr_slave_1: entered promiscuous mode [ 37.341101][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.348806][ T3298] Cannot create hsr debugfs directory [ 37.360996][ T3302] hsr_slave_0: entered promiscuous mode [ 37.367238][ T3302] hsr_slave_1: entered promiscuous mode [ 37.373259][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.380810][ T3302] Cannot create hsr debugfs directory [ 37.402912][ T3301] hsr_slave_0: entered promiscuous mode [ 37.408971][ T3301] hsr_slave_1: entered promiscuous mode [ 37.414890][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.422432][ T3301] Cannot create hsr debugfs directory [ 37.584064][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.593032][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.614968][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.630245][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.649766][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.658195][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.667000][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.675757][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.703770][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.722346][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.731492][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.742356][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.780288][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.789400][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.798778][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.807183][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.816026][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.824984][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.834891][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.843457][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.901020][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.919387][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.937025][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.959689][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.966790][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.982996][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.991097][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.005189][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.014872][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.021945][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.030610][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.037771][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.048417][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.055505][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.068318][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.081137][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.088214][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.112383][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.122972][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.130053][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.149465][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.160380][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.167472][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.176222][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.183372][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.209702][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.220202][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.241592][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.266405][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.273589][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.294305][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.308419][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.315589][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.338998][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.362782][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.407720][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.466629][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.488081][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.529506][ T3308] veth0_vlan: entered promiscuous mode [ 38.546389][ T3308] veth1_vlan: entered promiscuous mode [ 38.599031][ T3308] veth0_macvtap: entered promiscuous mode [ 38.614194][ T3308] veth1_macvtap: entered promiscuous mode [ 38.633670][ T3299] veth0_vlan: entered promiscuous mode [ 38.652216][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.671239][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.680632][ T3298] veth0_vlan: entered promiscuous mode [ 38.697133][ T3298] veth1_vlan: entered promiscuous mode [ 38.704070][ T3308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.712838][ T3308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.721606][ T3308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.730378][ T3308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.740921][ T3299] veth1_vlan: entered promiscuous mode [ 38.768238][ T3302] veth0_vlan: entered promiscuous mode [ 38.776405][ T3302] veth1_vlan: entered promiscuous mode [ 38.787105][ T3298] veth0_macvtap: entered promiscuous mode [ 38.796485][ T3301] veth0_vlan: entered promiscuous mode [ 38.803325][ T3298] veth1_macvtap: entered promiscuous mode [ 38.819106][ T3301] veth1_vlan: entered promiscuous mode [ 38.830789][ T3299] veth0_macvtap: entered promiscuous mode [ 38.839502][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.850018][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.860701][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.877315][ T3299] veth1_macvtap: entered promiscuous mode [ 38.884188][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.894759][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.905724][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.915423][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.916715][ T3301] veth0_macvtap: entered promiscuous mode [ 38.937492][ T3301] veth1_macvtap: entered promiscuous mode [ 38.949816][ T3298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.958635][ T3298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.967529][ T3298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.976263][ T3298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.990522][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.001207][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.011102][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.021623][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.032323][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.041719][ T3302] veth0_macvtap: entered promiscuous mode [ 39.048831][ T3302] veth1_macvtap: entered promiscuous mode [ 39.057967][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.068490][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.078429][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.088879][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.098734][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.109208][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.119601][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.128423][ T3442] Cannot find add_set index 0 as target [ 39.145873][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.156384][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.166234][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.176728][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.189896][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.198449][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.208974][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.218821][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.229280][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.239149][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.241901][ T3376] IPVS: starting estimator thread 0... [ 39.249709][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.268538][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.283044][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.293671][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.293977][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 39.293992][ T29] audit: type=1400 audit(1736534541.037:130): avc: denied { write } for pid=3446 comm="+}[@" path="socket:[4136]" dev="sockfs" ino=4136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.303581][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.303602][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.342614][ T3445] IPVS: using max 1968 ests per chain, 98400 per kthread [ 39.359617][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.370181][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.380111][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.390554][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.401497][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.412946][ T3301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.421699][ T3301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.430539][ T3301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.439336][ T3301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.460506][ T3376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.471593][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.488117][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.498655][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.508533][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.518984][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.528830][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.539335][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.549166][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.559682][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.575702][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.595059][ T3453] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10'. [ 39.628953][ T3299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.637760][ T3299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.646643][ T3299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.655464][ T3299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.672175][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.680968][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.689935][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.698748][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.735730][ T29] audit: type=1400 audit(1736534541.477:131): avc: denied { create } for pid=3456 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.771538][ T29] audit: type=1400 audit(1736534541.477:132): avc: denied { listen } for pid=3456 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.832907][ T29] audit: type=1400 audit(1736534541.567:133): avc: denied { create } for pid=3468 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.852272][ T29] audit: type=1400 audit(1736534541.567:134): avc: denied { connect } for pid=3468 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.871604][ T29] audit: type=1400 audit(1736534541.567:135): avc: denied { ioctl } for pid=3468 comm="+}[@" path="socket:[5151]" dev="sockfs" ino=5151 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.895480][ T29] audit: type=1400 audit(1736534541.567:136): avc: denied { write } for pid=3468 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.916957][ T29] audit: type=1326 audit(1736534541.577:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3472 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f7f85d29 code=0x7ffc0000 [ 39.940229][ T29] audit: type=1326 audit(1736534541.577:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3472 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26f7f85d29 code=0x7ffc0000 [ 39.963407][ T29] audit: type=1326 audit(1736534541.577:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3472 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f7f85d29 code=0x7ffc0000 [ 40.009808][ T3482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 40.019242][ T3482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 40.069421][ T3486] loop0: detected capacity change from 0 to 512 [ 40.093095][ T3486] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.106265][ T3486] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 40.385899][ T3509] loop1: detected capacity change from 0 to 2048 [ 40.423581][ T3509] loop1: p1 < > p4 [ 40.428494][ T3509] loop1: p4 size 8388608 extends beyond EOD, truncated [ 40.509657][ T2999] loop1: p1 < > p4 [ 40.525086][ T2999] loop1: p4 size 8388608 extends beyond EOD, truncated [ 40.574085][ T3487] udevd[3487]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 40.591806][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 40.655138][ T24] IPVS: starting estimator thread 0... [ 40.660995][ T3516] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 40.742626][ T3520] IPVS: using max 2352 ests per chain, 117600 per kthread [ 41.132024][ T3544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.153908][ T3544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.377797][ T3551] syz.1.40 (3551) used greatest stack depth: 10640 bytes left [ 41.430849][ T3582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.45'. [ 41.782259][ T3612] capability: warning: `syz.2.52' uses deprecated v2 capabilities in a way that may be insecure [ 41.853851][ T3621] serio: Serial port ptm0 [ 42.066308][ T3639] netlink: 'syz.1.61': attribute type 4 has an invalid length. [ 42.159115][ T3650] loop1: detected capacity change from 0 to 1024 [ 42.199267][ T3650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.264579][ T3660] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 42.309848][ T3650] sd 0:0:1:0: device reset [ 42.348574][ T3666] loop4: detected capacity change from 0 to 512 [ 42.371889][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.387450][ T3666] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 42.407334][ T3666] System zones: 1-12 [ 42.417436][ T3666] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.66: Directory hole found for htree index block 0 [ 42.429729][ T3553] syz.3.42 (3553) used greatest stack depth: 10200 bytes left [ 42.449780][ T3666] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 42.459087][ T3666] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.66: Directory hole found for htree index block 0 [ 42.468729][ T3679] loop1: detected capacity change from 0 to 2048 [ 42.482164][ T3666] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 42.491477][ T3666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.518298][ T3679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.536655][ T3679] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 42.553300][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.561603][ T3679] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 42.574826][ T3679] EXT4-fs (loop1): This should not happen!! Data will be lost [ 42.574826][ T3679] [ 42.584613][ T3679] EXT4-fs (loop1): Total free blocks count 0 [ 42.590648][ T3679] EXT4-fs (loop1): Free/Dirty block details [ 42.596737][ T3679] EXT4-fs (loop1): free_blocks=2415919104 [ 42.602618][ T3679] EXT4-fs (loop1): dirty_blocks=48 [ 42.607945][ T3679] EXT4-fs (loop1): Block reservation details [ 42.613975][ T3679] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 42.667726][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.673763][ T3703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 42.711608][ T3703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 42.886465][ T3735] ALSA: seq fatal error: cannot create timer (-19) [ 42.898606][ T3738] loop0: detected capacity change from 0 to 764 [ 42.959950][ T3746] loop4: detected capacity change from 0 to 128 [ 43.024944][ T3746] syz.4.87: attempt to access beyond end of device [ 43.024944][ T3746] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 43.054481][ T3743] syz.4.87: attempt to access beyond end of device [ 43.054481][ T3743] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 43.172149][ T3772] netlink: 96 bytes leftover after parsing attributes in process `syz.0.98'. [ 43.177455][ T3771] dccp_close: ABORT with 36 bytes unread [ 43.255025][ T3779] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.323590][ T3785] syzkaller0: entered allmulticast mode [ 43.335303][ T3784] loop3: detected capacity change from 0 to 2048 [ 43.352627][ T3785] syzkaller0 (unregistering): left allmulticast mode [ 43.370800][ T3784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.399546][ T3789] syz.0.107[3789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.399686][ T3789] syz.0.107[3789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.412040][ T3789] syz.0.107[3789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.443240][ T3793] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 43.480859][ T3798] netlink: 'syz.0.110': attribute type 3 has an invalid length. [ 43.537279][ T3784] EXT4-fs error (device loop3): __ext4_remount:6749: comm syz.3.104: Abort forced by user [ 43.552071][ T3784] EXT4-fs (loop3): Remounting filesystem read-only [ 43.558648][ T3784] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 43.601686][ T3811] syz.4.116[3811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.601789][ T3811] syz.4.116[3811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.615043][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.620221][ T3811] syz.4.116[3811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.641640][ T3815] netlink: 72 bytes leftover after parsing attributes in process `syz.2.119'. [ 43.732276][ T3826] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.889715][ T3838] loop3: detected capacity change from 0 to 128 [ 43.906526][ T3838] EXT4-fs: Ignoring removed nobh option [ 43.951087][ T3838] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.982703][ T3838] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.154580][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.194987][ T3850] loop3: detected capacity change from 0 to 512 [ 44.218084][ T3850] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.242211][ T3850] EXT4-fs (loop3): 1 truncate cleaned up [ 44.256631][ T3850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.286105][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.346377][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 44.346394][ T29] audit: type=1400 audit(1736534546.087:343): avc: denied { name_bind } for pid=3854 comm="syz.3.135" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 44.409986][ T3859] loop3: detected capacity change from 0 to 1024 [ 44.432808][ T3859] ======================================================= [ 44.432808][ T3859] WARNING: The mand mount option has been deprecated and [ 44.432808][ T3859] and is ignored by this kernel. Remove the mand [ 44.432808][ T3859] option from the mount to silence this warning. [ 44.432808][ T3859] ======================================================= [ 44.472297][ T3859] EXT4-fs: Ignoring removed bh option [ 44.497027][ T3859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.707815][ T3872] process 'syz.0.141' launched './file1' with NULL argv: empty string added [ 44.707835][ T29] audit: type=1400 audit(1736534546.447:344): avc: denied { execute } for pid=3871 comm="syz.0.141" name="file1" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.762667][ T29] audit: type=1400 audit(1736534546.477:345): avc: denied { execute_no_trans } for pid=3871 comm="syz.0.141" path="/29/file1" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.804534][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.849577][ T29] audit: type=1400 audit(1736534546.587:346): avc: denied { bind } for pid=3878 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.872555][ T29] audit: type=1400 audit(1736534546.607:347): avc: denied { getopt } for pid=3878 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.934492][ T3882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 44.986873][ T29] audit: type=1400 audit(1736534546.727:348): avc: denied { watch watch_reads } for pid=3887 comm="syz.2.147" path="/proc/67" dev="proc" ino=4625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 45.109787][ T3898] Illegal XDP return value 4294967274 on prog (id 122) dev N/A, expect packet loss! [ 45.186316][ T29] audit: type=1400 audit(1736534546.927:349): avc: denied { read write } for pid=3901 comm="syz.2.152" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.223703][ T29] audit: type=1400 audit(1736534546.927:350): avc: denied { open } for pid=3901 comm="syz.2.152" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.246774][ T29] audit: type=1400 audit(1736534546.927:351): avc: denied { ioctl } for pid=3901 comm="syz.2.152" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.313510][ T3911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 45.332446][ T3911] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.341377][ T3911] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.350145][ T3911] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.358904][ T3911] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.373275][ T3911] vxlan0: entered promiscuous mode [ 45.374119][ T29] audit: type=1326 audit(1736534547.117:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3912 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949b275d29 code=0x7ffc0000 [ 45.378426][ T3911] vxlan0: entered allmulticast mode [ 45.500229][ T3919] netlink: 'syz.3.161': attribute type 3 has an invalid length. [ 45.507986][ T3919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.161'. [ 45.836973][ T3971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 45.859295][ T3971] vlan2: entered promiscuous mode [ 45.864484][ T3971] veth1_to_bond: entered promiscuous mode [ 45.876105][ T3971] veth1_to_bond: left promiscuous mode [ 46.030869][ T3988] netlink: 'syz.1.171': attribute type 39 has an invalid length. [ 46.090070][ T3998] random: crng reseeded on system resumption [ 46.287806][ T4026] loop4: detected capacity change from 0 to 128 [ 46.296812][ T4026] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 46.317497][ T4026] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.329982][ T4026] ext2 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.534096][ T4074] loop0: detected capacity change from 0 to 2048 [ 46.555394][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.569637][ T4074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.644426][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 46.659537][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.669757][ T4097] netlink: 60 bytes leftover after parsing attributes in process `syz.4.184'. [ 46.682197][ T4099] mmap: syz.2.185 (4099) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.695774][ T4097] netlink: 60 bytes leftover after parsing attributes in process `syz.4.184'. [ 46.716769][ T4097] netlink: 60 bytes leftover after parsing attributes in process `syz.4.184'. [ 46.727638][ T4097] netlink: 60 bytes leftover after parsing attributes in process `syz.4.184'. [ 46.777226][ T4107] loop2: detected capacity change from 0 to 512 [ 46.793294][ T4097] netlink: 60 bytes leftover after parsing attributes in process `syz.4.184'. [ 46.831819][ T4107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.845725][ T4107] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.874394][ T4116] syz.1.188[4116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.874482][ T4116] syz.1.188[4116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.899324][ T4116] syz.1.188[4116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.922377][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.996480][ T4126] netlink: 'syz.2.192': attribute type 5 has an invalid length. [ 47.229679][ T4158] Zero length message leads to an empty skb [ 47.381879][ T4195] loop4: detected capacity change from 0 to 2048 [ 47.439866][ T4195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.493949][ T4195] EXT4-fs (loop4): shut down requested (1) [ 47.510071][ T4195] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 47.523071][ T4195] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 47.531892][ T4195] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 47.540921][ T4195] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 47.551651][ T4195] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 47.560592][ T4195] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 47.569668][ T4195] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 47.578666][ T4195] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 47.587929][ T4195] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 47.630220][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.771949][ T4232] syz.0.228[4232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.907660][ T4242] smc: net device bond0 applied user defined pnetid SYZ0 [ 47.927112][ T4242] smc: net device bond0 erased user defined pnetid SYZ0 [ 47.934846][ T4250] 0ªX¹¦À: renamed from caif0 [ 47.941648][ T4250] 0ªX¹¦À: entered allmulticast mode [ 47.947026][ T4250] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 48.005915][ T4260] loop4: detected capacity change from 0 to 512 [ 48.043426][ T4260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.046374][ T4270] loop3: detected capacity change from 0 to 128 [ 48.062797][ T4260] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.077487][ T4270] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 48.141893][ T4260] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #18: comm syz.4.242: corrupted inode contents [ 48.141922][ T4276] syzkaller1: entered promiscuous mode [ 48.159232][ T4276] syzkaller1: entered allmulticast mode [ 48.162153][ T4260] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #18: comm syz.4.242: mark_inode_dirty error [ 48.176691][ T4260] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #18: comm syz.4.242: corrupted inode contents [ 48.189767][ T4260] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #18: comm syz.4.242: mark_inode_dirty error [ 48.203426][ T4260] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #18: comm syz.4.242: mark inode dirty (error -117) [ 48.218032][ T3594] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 48.218195][ T4260] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 48.267560][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.337541][ T4299] loop2: detected capacity change from 0 to 2048 [ 48.355359][ T4299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.426681][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.380398][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 49.380412][ T29] audit: type=1326 audit(1736534551.117:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fd265d29 code=0x7ffc0000 [ 49.446481][ T29] audit: type=1326 audit(1736534551.147:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fd265d29 code=0x7ffc0000 [ 49.469906][ T29] audit: type=1326 audit(1736534551.147:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f37fd265d29 code=0x7ffc0000 [ 49.493218][ T29] audit: type=1326 audit(1736534551.147:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fd265d29 code=0x7ffc0000 [ 49.516492][ T29] audit: type=1326 audit(1736534551.147:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fd265d29 code=0x7ffc0000 [ 49.539777][ T29] audit: type=1326 audit(1736534551.157:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f25885d29 code=0x7ffc0000 [ 49.563146][ T29] audit: type=1326 audit(1736534551.157:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f25885d29 code=0x7ffc0000 [ 49.586414][ T29] audit: type=1326 audit(1736534551.157:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f37fd265d29 code=0x7ffc0000 [ 49.609779][ T29] audit: type=1400 audit(1736534551.157:551): avc: denied { mount } for pid=4362 comm="syz.4.280" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.631544][ T29] audit: type=1326 audit(1736534551.157:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fd265d29 code=0x7ffc0000 [ 49.665087][ T4369] batadv_slave_1: entered promiscuous mode [ 49.671452][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.685261][ T4369] batadv_slave_1 (unregistering): left promiscuous mode [ 49.692335][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.095359][ T4379] Set syz1 is full, maxelem 65536 reached [ 50.130275][ T4411] bond_slave_1: entered promiscuous mode [ 50.140826][ T4411] bond_slave_1: left promiscuous mode [ 50.155444][ T4413] syz.0.303 uses obsolete (PF_INET,SOCK_PACKET) [ 50.210428][ C0] hrtimer: interrupt took 48290 ns [ 50.339332][ T4438] IPv6: Can't replace route, no match found [ 50.401520][ T4446] __nla_validate_parse: 9 callbacks suppressed [ 50.401535][ T4446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.317'. [ 50.501825][ T4448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 50.557547][ T4467] loop1: detected capacity change from 0 to 1024 [ 50.584879][ T4467] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.325: Failed to acquire dquot type 0 [ 50.610663][ T4467] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 50.647974][ T4467] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.325: corrupted inode contents [ 50.677368][ T4467] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #13: comm syz.1.325: mark_inode_dirty error [ 50.701943][ T4467] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.325: corrupted inode contents [ 50.721409][ T4467] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.325: mark_inode_dirty error [ 50.735344][ T4467] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.325: corrupted inode contents [ 50.754997][ T4479] xt_hashlimit: max too large, truncated to 1048576 [ 50.762440][ T4467] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 50.792043][ T4467] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.325: corrupted inode contents [ 50.812753][ T4467] EXT4-fs error (device loop1): ext4_truncate:4240: inode #13: comm syz.1.325: mark_inode_dirty error [ 50.831523][ T4467] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 50.841632][ T4487] xt_hashlimit: max too large, truncated to 1048576 [ 50.859333][ T4467] EXT4-fs (loop1): 1 truncate cleaned up [ 50.865393][ T4492] bpf_get_probe_write_proto: 8 callbacks suppressed [ 50.865437][ T4492] syz.0.335[4492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.877323][ T4467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.879408][ T4494] loop2: detected capacity change from 0 to 512 [ 50.901996][ T4492] syz.0.335[4492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.907442][ T4492] syz.0.335[4492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.923490][ T4494] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.948466][ T4494] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.963325][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.006615][ T4508] netlink: 256 bytes leftover after parsing attributes in process `syz.0.343'. [ 51.023345][ T4494] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.337: corrupted in-inode xattr: e_value out of bounds [ 51.037753][ T4494] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.337: couldn't read orphan inode 15 (err -117) [ 51.063834][ T4494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.099797][ T4519] $Hÿ: renamed from bond0 (while UP) [ 51.115086][ T4519] $Hÿ: entered promiscuous mode [ 51.120198][ T4519] bond_slave_0: entered promiscuous mode [ 51.126173][ T4519] bond_slave_1: entered promiscuous mode [ 51.132495][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.258667][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 51.506102][ T4569] loop1: detected capacity change from 0 to 512 [ 51.529821][ T4569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.543771][ T4569] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.565449][ T4569] syz.1.365 (4569) used greatest stack depth: 9328 bytes left [ 51.586861][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.621999][ T4584] syz.1.370[4584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.622070][ T4584] syz.1.370[4584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.649231][ T4584] syz.1.370[4584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.762466][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.779626][ T4600] loop4: detected capacity change from 0 to 512 [ 51.783797][ T4597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.796356][ T3377] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.813199][ T4600] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 51.816004][ T4597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.845422][ T4600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 51.855347][ T4601] syzkaller0: entered promiscuous mode [ 51.857181][ T4603] loop0: detected capacity change from 0 to 512 [ 51.860843][ T4601] syzkaller0: entered allmulticast mode [ 51.877261][ T4600] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.379: corrupted in-inode xattr: e_value size too large [ 51.892506][ T4603] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.380: invalid indirect mapped block 256 (level 2) [ 51.905902][ T4600] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.379: couldn't read orphan inode 15 (err -117) [ 51.909100][ T4603] EXT4-fs (loop0): 2 truncates cleaned up [ 51.925707][ T4600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.938295][ T4603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.006067][ T4603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.380'. [ 52.040463][ T4612] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 52.049998][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.098438][ T4616] sd 0:0:1:0: device reset [ 52.108393][ T4618] bridge0: port 3(bond0) entered blocking state [ 52.114777][ T4618] bridge0: port 3(bond0) entered disabled state [ 52.121422][ T4618] bond0: entered allmulticast mode [ 52.126600][ T4618] bond_slave_0: entered allmulticast mode [ 52.132429][ T4618] bond_slave_1: entered allmulticast mode [ 52.140209][ T4618] bond0: entered promiscuous mode [ 52.145398][ T4618] bond_slave_0: entered promiscuous mode [ 52.151108][ T4618] bond_slave_1: entered promiscuous mode [ 52.158177][ T4618] bridge0: port 3(bond0) entered blocking state [ 52.164487][ T4618] bridge0: port 3(bond0) entered forwarding state [ 52.249834][ T4628] loop0: detected capacity change from 0 to 8192 [ 52.260003][ T4628] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 52.260003][ T4628] n'º|$@OOݱµ’-®+·el' [ 52.309249][ T4636] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 52.324156][ T4638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 52.550916][ T4664] syz.2.408[4664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.551027][ T4664] syz.2.408[4664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.562374][ T4664] syz.2.408[4664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.621564][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.748565][ T4674] netlink: 56 bytes leftover after parsing attributes in process `syz.2.411'. [ 52.771558][ T4674] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 39613 - 0 [ 52.780463][ T4674] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 39613 - 0 [ 52.789377][ T4674] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 39613 - 0 [ 52.798218][ T4674] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 39613 - 0 [ 52.814636][ T4676] netlink: 'syz.1.412': attribute type 2 has an invalid length. [ 52.985182][ T4687] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.183917][ T4690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.418'. [ 53.220745][ T4690] pim6reg: entered allmulticast mode [ 53.401349][ T4706] Cannot find add_set index 0 as target [ 54.204139][ T4733] batadv_slave_1: entered promiscuous mode [ 54.210592][ T4733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 54.219536][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.238001][ T4733] batadv_slave_1 (unregistering): left promiscuous mode [ 54.245078][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.405599][ T4749] batadv_slave_1: entered promiscuous mode [ 54.412876][ T4749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 54.423978][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.436322][ T4749] batadv_slave_1 (unregistering): left promiscuous mode [ 54.444887][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.449730][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 54.449747][ T29] audit: type=1326 audit(1736534556.187:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949b275d29 code=0x7ffc0000 [ 54.485938][ T29] audit: type=1326 audit(1736534556.187:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949b275d29 code=0x7ffc0000 [ 54.509398][ T29] audit: type=1326 audit(1736534556.187:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f949b275d29 code=0x7ffc0000 [ 54.533271][ T29] audit: type=1326 audit(1736534556.187:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949b275d29 code=0x7ffc0000 [ 54.556515][ T29] audit: type=1326 audit(1736534556.187:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f949b275d29 code=0x7ffc0000 [ 54.579751][ T29] audit: type=1326 audit(1736534556.187:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949b275d29 code=0x7ffc0000 [ 54.603067][ T29] audit: type=1326 audit(1736534556.187:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f949b275d29 code=0x7ffc0000 [ 54.626302][ T29] audit: type=1326 audit(1736534556.187:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949b275d29 code=0x7ffc0000 [ 54.649686][ T29] audit: type=1326 audit(1736534556.187:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f949b275d29 code=0x7ffc0000 [ 54.672970][ T29] audit: type=1326 audit(1736534556.187:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949b275d29 code=0x7ffc0000 [ 54.718252][ T4756] loop1: detected capacity change from 0 to 128 [ 54.789193][ T4756] syz.1.453: attempt to access beyond end of device [ 54.789193][ T4756] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 54.814621][ T4755] syz.1.453: attempt to access beyond end of device [ 54.814621][ T4755] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 55.153366][ T4767] Set syz1 is full, maxelem 65536 reached [ 56.082299][ T4809] loop3: detected capacity change from 0 to 128 [ 56.091108][ T4812] batadv_slave_1: entered promiscuous mode [ 56.101790][ T4810] loop2: detected capacity change from 0 to 2048 [ 56.109738][ T4812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 56.119280][ T4812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.132484][ T4812] batadv_slave_1 (unregistering): left promiscuous mode [ 56.133687][ T4809] syz.3.460: attempt to access beyond end of device [ 56.133687][ T4809] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 56.140148][ T4812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.166644][ T4810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.172390][ T4805] syz.3.460: attempt to access beyond end of device [ 56.172390][ T4805] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 56.204804][ T4810] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.222600][ T4810] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 56.234938][ T4810] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.234938][ T4810] [ 56.244661][ T4810] EXT4-fs (loop2): Total free blocks count 0 [ 56.250749][ T4810] EXT4-fs (loop2): Free/Dirty block details [ 56.256757][ T4810] EXT4-fs (loop2): free_blocks=2415919104 [ 56.262574][ T4810] EXT4-fs (loop2): dirty_blocks=48 [ 56.267744][ T4810] EXT4-fs (loop2): Block reservation details [ 56.273797][ T4810] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 56.305105][ T4823] loop3: detected capacity change from 0 to 512 [ 56.312009][ T4823] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 56.316960][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.331211][ T4823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 56.339688][ T4823] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.475: corrupted in-inode xattr: e_value size too large [ 56.354030][ T4823] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.475: couldn't read orphan inode 15 (err -117) [ 56.366467][ T4823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.718750][ T4826] Set syz1 is full, maxelem 65536 reached [ 56.915184][ T4859] syz.0.472[4859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.915353][ T4859] syz.0.472[4859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.947061][ T4859] syz.0.472[4859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.161160][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.549180][ T4873] loop0: detected capacity change from 0 to 512 [ 57.564825][ T4876] batadv_slave_1: entered promiscuous mode [ 57.570965][ T4873] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 57.571769][ T4876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 57.596525][ T4873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 57.609050][ T4876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.630607][ T4873] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.492: corrupted in-inode xattr: e_value size too large [ 57.647896][ T4873] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.492: couldn't read orphan inode 15 (err -117) [ 57.660329][ T4873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.662648][ T4876] batadv_slave_1 (unregistering): left promiscuous mode [ 57.686261][ T4876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.816531][ T4891] loop3: detected capacity change from 0 to 512 [ 57.821950][ T4893] loop2: detected capacity change from 0 to 128 [ 57.831390][ T4893] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 57.846422][ T4891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.872839][ T4891] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.953065][ T4891] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #18: comm syz.3.491: corrupted inode contents [ 57.965875][ T4891] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #18: comm syz.3.491: mark_inode_dirty error [ 57.977434][ T4891] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #18: comm syz.3.491: corrupted inode contents [ 57.989391][ T4891] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #18: comm syz.3.491: mark_inode_dirty error [ 58.001490][ T4891] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #18: comm syz.3.491: mark inode dirty (error -117) [ 58.014289][ T4891] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 58.032507][ T3623] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 58.052043][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.240928][ T4930] loop1: detected capacity change from 0 to 2048 [ 58.246019][ T4934] loop4: detected capacity change from 0 to 128 [ 58.261994][ T4934] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 58.323935][ T4930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.346178][ T4930] EXT4-fs (loop1): shut down requested (1) [ 58.352637][ T4930] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 58.362344][ T4930] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 58.371381][ T4930] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 58.382702][ T4930] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 58.391608][ T4930] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 58.400670][ T4930] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 58.410332][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.419457][ T4930] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 58.429548][ T4930] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 58.446101][ T4930] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 58.446395][ T3578] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 58.517194][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.537598][ T4953] loop2: detected capacity change from 0 to 2048 [ 58.656898][ T4949] netlink: 68 bytes leftover after parsing attributes in process `syz.0.526'. [ 58.695356][ T4953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.743139][ T4953] EXT4-fs (loop2): shut down requested (1) [ 58.760097][ T4953] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 58.777088][ T4953] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 58.786022][ T4953] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 58.795014][ T4953] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 58.803902][ T4953] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 58.812797][ T4953] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 58.821864][ T4953] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 58.830906][ T4953] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 58.841697][ T4953] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 58.871048][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.959660][ T5002] netlink: 'syz.3.531': attribute type 5 has an invalid length. [ 59.160753][ T5032] loop0: detected capacity change from 0 to 2048 [ 59.202768][ T5032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.219140][ T5032] EXT4-fs (loop0): shut down requested (1) [ 59.225628][ T5032] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 59.237387][ T5032] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 59.263833][ T5032] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 59.286858][ T5032] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 59.317701][ T5032] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 59.327342][ T5032] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 59.337487][ T5032] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 59.347276][ T5032] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 59.359788][ T5032] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 59.400957][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.402053][ T5072] syz.3.545[5072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.410292][ T5072] syz.3.545[5072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.421877][ T5072] syz.3.545[5072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.452931][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 59.453040][ T29] audit: type=1326 audit(1736534561.197:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f25885d29 code=0x7ffc0000 [ 59.512627][ T29] audit: type=1326 audit(1736534561.247:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f25885d29 code=0x7ffc0000 [ 59.552663][ T29] audit: type=1326 audit(1736534561.287:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5079 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a389c5d29 code=0x7ffc0000 [ 59.571424][ T5083] loop3: detected capacity change from 0 to 512 [ 59.575962][ T29] audit: type=1326 audit(1736534561.287:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5079 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f4a389c5d29 code=0x7ffc0000 [ 59.605807][ T29] audit: type=1326 audit(1736534561.287:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5079 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a389c5d29 code=0x7ffc0000 [ 59.749512][ T5083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.766908][ T5083] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.876015][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.894158][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 59.908161][ T5094] netlink: 60 bytes leftover after parsing attributes in process `syz.1.553'. [ 59.944247][ T5094] netlink: 60 bytes leftover after parsing attributes in process `syz.1.553'. [ 59.983989][ T5094] netlink: 60 bytes leftover after parsing attributes in process `syz.1.553'. [ 59.994191][ T5094] netlink: 60 bytes leftover after parsing attributes in process `syz.1.553'. [ 60.056423][ T5094] netlink: 60 bytes leftover after parsing attributes in process `syz.1.553'. [ 60.072394][ T5094] netlink: 60 bytes leftover after parsing attributes in process `syz.1.553'. [ 60.497463][ T5108] loop3: detected capacity change from 0 to 2048 [ 60.525783][ T5108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.588898][ T5108] EXT4-fs (loop3): shut down requested (1) [ 60.609623][ T5108] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 60.620257][ T5108] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 60.629252][ T5108] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 60.638201][ T5108] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 60.647107][ T5108] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 60.655977][ T5108] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 60.664815][ T5108] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 60.674164][ T5108] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 60.683013][ T5108] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 60.725364][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.828085][ T5152] loop2: detected capacity change from 0 to 2048 [ 60.847098][ T5157] loop4: detected capacity change from 0 to 512 [ 60.890705][ T5152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.891908][ T5157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.906076][ T5152] EXT4-fs (loop2): shut down requested (1) [ 60.926504][ T5157] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.932843][ T5152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 60.966158][ T5152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 61.012451][ T5152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 61.021586][ T5152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 61.042399][ T5152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 61.074794][ T5152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 61.090582][ T5152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 61.101497][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.103545][ T5152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 61.122258][ T5152] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 61.156410][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.237991][ T5183] loop2: detected capacity change from 0 to 2048 [ 61.263981][ T5176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.290677][ T5183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.340732][ T5183] EXT4-fs (loop2): shut down requested (1) [ 61.356493][ T5196] __nla_validate_parse: 2 callbacks suppressed [ 61.356510][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 61.373547][ T5183] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 61.383174][ T5183] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 61.392064][ T5183] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 61.401290][ T5183] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 61.410285][ T5183] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 61.419190][ T5183] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 61.428221][ T5183] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 61.437138][ T5183] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 61.448531][ T5183] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 61.470172][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.499406][ T5204] loop1: detected capacity change from 0 to 2048 [ 61.514911][ T5204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.530471][ T5204] EXT4-fs (loop1): shut down requested (1) [ 61.536916][ T5204] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 61.546335][ T5204] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 61.555213][ T5204] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 61.564220][ T5204] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 61.574163][ T5204] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 61.583331][ T5204] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 61.592331][ T5204] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 61.601964][ T5211] loop2: detected capacity change from 0 to 2048 [ 61.602499][ T5204] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 61.617418][ T5204] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 61.635235][ T5211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.647839][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.656071][ T29] audit: type=1400 audit(1736534563.397:807): avc: denied { write } for pid=5210 comm="syz.2.582" path="/120/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.694813][ T29] audit: type=1400 audit(1736534563.437:808): avc: denied { execute } for pid=5210 comm="syz.2.582" path="/120/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.732235][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.750561][ T5220] loop0: detected capacity change from 0 to 2048 [ 61.791287][ T5220] EXT4-fs (loop0): shut down requested (1) [ 61.797681][ T5220] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 61.808502][ T5220] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 61.817603][ T5220] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 61.827849][ T5220] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 61.837982][ T5220] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 61.848411][ T5220] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 61.857291][ T5220] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 61.869826][ T5220] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 61.886978][ T5220] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 61.939697][ T5259] loop1: detected capacity change from 0 to 512 [ 61.948612][ T5262] loop0: detected capacity change from 0 to 128 [ 61.956933][ T5262] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 61.974009][ T5262] ext2 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.009382][ T5259] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.104872][ T5269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 62.139092][ T5287] loop3: detected capacity change from 0 to 128 [ 62.151068][ T5287] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 62.164888][ T5287] ext2 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.197376][ T5286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 62.335123][ T5302] loop1: detected capacity change from 0 to 128 [ 62.351267][ T5302] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 62.376480][ T5307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 62.376557][ T5302] ext2 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.478526][ T5312] random: crng reseeded on system resumption [ 62.486049][ T29] audit: type=1326 audit(1736534564.227:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.0.606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26f7f85d29 code=0x0 [ 62.552898][ T5328] netlink: 'syz.4.612': attribute type 39 has an invalid length. [ 62.598809][ T5336] loop2: detected capacity change from 0 to 512 [ 62.609825][ T5336] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.614: invalid indirect mapped block 256 (level 2) [ 62.616947][ T5341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 62.636496][ T5336] EXT4-fs (loop2): 2 truncates cleaned up [ 62.661536][ T5336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.614'. [ 62.804597][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 62.815679][ T5351] vlan2: entered promiscuous mode [ 62.820747][ T5351] veth1_to_bond: entered promiscuous mode [ 62.827603][ T5351] veth1_to_bond: left promiscuous mode [ 63.351930][ T5371] netlink: 'syz.2.629': attribute type 39 has an invalid length. [ 63.365772][ T5366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.543923][ T5377] loop4: detected capacity change from 0 to 512 [ 63.556043][ T5377] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.631: invalid indirect mapped block 256 (level 2) [ 63.569640][ T5377] EXT4-fs (loop4): 2 truncates cleaned up [ 63.578299][ T5377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.631'. [ 63.607663][ T5378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.667576][ T5393] xt_hashlimit: max too large, truncated to 1048576 [ 63.750365][ T5401] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 63.791909][ T5403] netlink: 'syz.0.642': attribute type 39 has an invalid length. [ 63.980440][ T5413] loop1: detected capacity change from 0 to 512 [ 63.988834][ T5413] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.644: invalid indirect mapped block 256 (level 2) [ 64.004086][ T5413] EXT4-fs (loop1): 2 truncates cleaned up [ 64.012340][ T5413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.644'. [ 64.064879][ T5424] xt_hashlimit: max too large, truncated to 1048576 [ 64.346233][ T5439] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 64.532802][ T5447] netlink: 'syz.3.658': attribute type 39 has an invalid length. [ 64.646042][ T5450] loop3: detected capacity change from 0 to 512 [ 64.665517][ T5450] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.659: invalid indirect mapped block 256 (level 2) [ 64.679231][ T5450] EXT4-fs (loop3): 2 truncates cleaned up [ 64.690053][ T5450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 65.059011][ T29] audit: type=1326 audit(1736534566.797:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a389c5d29 code=0x7ffc0000 [ 65.082434][ T29] audit: type=1326 audit(1736534566.797:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a389c5d29 code=0x7ffc0000 [ 65.106798][ T29] audit: type=1326 audit(1736534566.797:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a389c5d29 code=0x7ffc0000 [ 65.129999][ T29] audit: type=1326 audit(1736534566.797:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a389c5d29 code=0x7ffc0000 [ 65.153247][ T29] audit: type=1326 audit(1736534566.797:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a389c5d29 code=0x7ffc0000 [ 65.176586][ T29] audit: type=1326 audit(1736534566.847:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a389c5d29 code=0x7ffc0000 [ 65.199763][ T29] audit: type=1326 audit(1736534566.847:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a389c5d29 code=0x7ffc0000 [ 65.223202][ T29] audit: type=1326 audit(1736534566.847:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a389c5d29 code=0x7ffc0000 [ 65.246625][ T29] audit: type=1326 audit(1736534566.847:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f4a389c5d29 code=0x7ffc0000 [ 65.269791][ T29] audit: type=1326 audit(1736534566.847:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.3.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a389c5d29 code=0x7ffc0000 [ 65.341241][ T5489] netlink: 'syz.4.673': attribute type 39 has an invalid length. [ 65.394281][ T5499] loop4: detected capacity change from 0 to 512 [ 65.414856][ T5499] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.675: invalid indirect mapped block 256 (level 2) [ 65.459580][ T5499] EXT4-fs (loop4): 2 truncates cleaned up [ 65.469291][ T5499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.675'. [ 65.492171][ T5513] netlink: 'syz.1.679': attribute type 3 has an invalid length. [ 65.535725][ T5519] loop0: detected capacity change from 0 to 512 [ 65.556537][ T5519] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.696: invalid indirect mapped block 256 (level 2) [ 65.570232][ T5519] EXT4-fs (loop0): 2 truncates cleaned up [ 65.598434][ T5526] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.607286][ T5526] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.616022][ T5526] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.624829][ T5526] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.636113][ T5526] vxlan0: entered promiscuous mode [ 65.641316][ T5526] vxlan0: entered allmulticast mode [ 65.701427][ T5543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.721302][ T5543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.591001][ T5670] __nla_validate_parse: 3 callbacks suppressed [ 66.591020][ T5670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.698'. [ 66.802028][ T5680] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 66.815525][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 66.831720][ T5682] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.840529][ T5682] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.849302][ T5682] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.858047][ T5682] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.868191][ T5682] vxlan0: entered promiscuous mode [ 66.873370][ T5682] vxlan0: entered allmulticast mode [ 67.058366][ T5704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.075038][ T5704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.095704][ T5708] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 67.264284][ T5737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.713'. [ 67.335155][ T5749] netlink: 'syz.3.715': attribute type 2 has an invalid length. [ 67.544230][ T5786] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.652375][ T5804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.724'. [ 67.675971][ T5804] pim6reg: entered allmulticast mode [ 67.969460][ T5862] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 67.977725][ T5865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.730'. [ 68.008252][ T5872] loop2: detected capacity change from 0 to 1024 [ 68.049836][ T5878] netlink: 'syz.0.732': attribute type 2 has an invalid length. [ 68.087105][ T5872] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.731: Failed to acquire dquot type 0 [ 68.110111][ T5872] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 68.124808][ T5872] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.731: corrupted inode contents [ 68.143686][ T5872] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #13: comm syz.2.731: mark_inode_dirty error [ 68.192242][ T5872] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.731: corrupted inode contents [ 68.228782][ T5872] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.731: mark_inode_dirty error [ 68.245145][ T5893] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.245926][ T5872] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.731: corrupted inode contents [ 68.266620][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.268566][ T5872] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 68.276071][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.299630][ T5872] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.731: corrupted inode contents [ 68.312143][ T5872] EXT4-fs error (device loop2): ext4_truncate:4240: inode #13: comm syz.2.731: mark_inode_dirty error [ 68.323830][ T5872] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 68.333249][ T5872] EXT4-fs (loop2): 1 truncate cleaned up [ 68.441244][ T5917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.741'. [ 68.471841][ T5917] pim6reg: entered allmulticast mode [ 69.268358][ T6051] syz.0.756[6051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.268499][ T6051] syz.0.756[6051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.287180][ T6051] syz.0.756[6051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.304120][ T6056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.744'. [ 69.336360][ T6051] ref_ctr increment failed for inode: 0x30e offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811be0f480 [ 69.348543][ T6058] netlink: 'syz.4.746': attribute type 2 has an invalid length. [ 69.356478][ T6049] uprobe: syz.0.756:6049 failed to unregister, leaking uprobe [ 69.385376][ T6063] netlink: 56 bytes leftover after parsing attributes in process `syz.1.747'. [ 69.397026][ T6063] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 50353 - 0 [ 69.406052][ T6063] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 50353 - 0 [ 69.414889][ T6063] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 50353 - 0 [ 69.423764][ T6063] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 50353 - 0 [ 69.459910][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.764'. [ 69.563865][ T6077] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.581340][ T6079] loop0: detected capacity change from 0 to 1024 [ 69.590446][ T6079] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.754: Failed to acquire dquot type 0 [ 69.602481][ T6079] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 69.617968][ T6079] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.754: corrupted inode contents [ 69.631758][ T6079] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #13: comm syz.0.754: mark_inode_dirty error [ 69.655409][ T6079] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.754: corrupted inode contents [ 69.668415][ T6079] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.754: mark_inode_dirty error [ 69.680381][ T6079] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.754: corrupted inode contents [ 69.699142][ T6079] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 69.708053][ T6079] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.754: corrupted inode contents [ 69.721732][ T6079] EXT4-fs error (device loop0): ext4_truncate:4240: inode #13: comm syz.0.754: mark_inode_dirty error [ 69.733894][ T6079] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 69.743789][ T6079] EXT4-fs (loop0): 1 truncate cleaned up [ 69.785608][ T6098] netlink: 'syz.2.765': attribute type 2 has an invalid length. [ 69.814022][ T6101] syz.4.767[6101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.814150][ T6101] syz.4.767[6101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.825680][ T6101] syz.4.767[6101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.840379][ T6101] ref_ctr increment failed for inode: 0x2b3 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888118fe5f80 [ 69.864355][ T6100] uprobe: syz.4.767:6100 failed to unregister, leaking uprobe [ 69.951127][ T6114] loop4: detected capacity change from 0 to 512 [ 69.960277][ T6114] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.969410][ T6114] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.985495][ T6118] xt_hashlimit: max too large, truncated to 1048576 [ 69.994745][ T6114] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.774: corrupted in-inode xattr: e_value out of bounds [ 70.010168][ T6114] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.774: couldn't read orphan inode 15 (err -117) [ 70.113819][ T6127] loop4: detected capacity change from 0 to 1024 [ 70.114536][ T6130] syz.1.777[6130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.121512][ T6130] syz.1.777[6130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.143283][ T6130] syz.1.777[6130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.158811][ T6134] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.192953][ T6127] __quota_error: 69 callbacks suppressed [ 70.192968][ T6127] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 70.207768][ T6127] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 70.217347][ T6127] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.776: Failed to acquire dquot type 0 [ 70.238185][ T6127] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 70.253602][ T6127] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.776: corrupted inode contents [ 70.285739][ T6127] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #13: comm syz.4.776: mark_inode_dirty error [ 70.328959][ T6127] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.776: corrupted inode contents [ 70.346587][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 70.365862][ T6127] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.776: mark_inode_dirty error [ 70.412391][ T6127] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.776: corrupted inode contents [ 70.458334][ T6127] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 70.472383][ T6127] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.776: corrupted inode contents [ 70.492205][ T29] audit: type=1326 audit(1736534572.227:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f25885d29 code=0x7ffc0000 [ 70.517382][ T6127] EXT4-fs error (device loop4): ext4_truncate:4240: inode #13: comm syz.4.776: mark_inode_dirty error [ 70.536290][ T6147] $Hÿ: renamed from bond0 (while UP) [ 70.538805][ T6127] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 70.561582][ T29] audit: type=1326 audit(1736534572.227:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f25885d29 code=0x7ffc0000 [ 70.566969][ T6147] $Hÿ: entered promiscuous mode [ 70.584889][ T29] audit: type=1326 audit(1736534572.257:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6f25885d29 code=0x7ffc0000 [ 70.584922][ T29] audit: type=1326 audit(1736534572.257:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f25885d29 code=0x7ffc0000 [ 70.589926][ T6147] bond_slave_0: entered promiscuous mode [ 70.613122][ T29] audit: type=1326 audit(1736534572.257:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6f25885d29 code=0x7ffc0000 [ 70.636405][ T6147] bond_slave_1: entered promiscuous mode [ 70.641955][ T29] audit: type=1326 audit(1736534572.257:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f25885d29 code=0x7ffc0000 [ 70.694170][ T29] audit: type=1326 audit(1736534572.257:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f6f25885d29 code=0x7ffc0000 [ 70.717422][ T29] audit: type=1326 audit(1736534572.277:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f25885d29 code=0x7ffc0000 [ 70.745765][ T6151] syz.3.787[6151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.748927][ T6127] EXT4-fs (loop4): 1 truncate cleaned up [ 70.767746][ T6151] ref_ctr increment failed for inode: 0x353 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811be0e4c0 [ 70.792909][ T6149] uprobe: syz.3.787:6149 failed to unregister, leaking uprobe [ 70.792954][ T6154] xt_hashlimit: max too large, truncated to 1048576 [ 70.843700][ T6159] loop0: detected capacity change from 0 to 512 [ 70.853248][ T6159] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.854794][ T6160] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.862146][ T6159] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.881754][ T6159] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.791: corrupted in-inode xattr: e_value out of bounds [ 70.895917][ T6159] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.791: couldn't read orphan inode 15 (err -117) [ 71.195201][ T6193] xt_hashlimit: max too large, truncated to 1048576 [ 71.250558][ T6197] loop3: detected capacity change from 0 to 1024 [ 71.265511][ T6197] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.805: Failed to acquire dquot type 0 [ 71.286978][ T6201] $Hÿ: renamed from bond0 (while UP) [ 71.299799][ T6201] $Hÿ: entered promiscuous mode [ 71.304914][ T6201] bond_slave_0: entered promiscuous mode [ 71.310716][ T6201] bond_slave_1: entered promiscuous mode [ 71.329606][ T6197] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 71.349058][ T6197] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.805: corrupted inode contents [ 71.361427][ T6197] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #13: comm syz.3.805: mark_inode_dirty error [ 71.374623][ T6197] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.805: corrupted inode contents [ 71.387551][ T6197] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.805: mark_inode_dirty error [ 71.428497][ T6197] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.805: corrupted inode contents [ 71.441620][ T6197] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 71.451559][ T6197] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.805: corrupted inode contents [ 71.463814][ T6197] EXT4-fs error (device loop3): ext4_truncate:4240: inode #13: comm syz.3.805: mark_inode_dirty error [ 71.475282][ T6197] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 71.485271][ T6197] EXT4-fs (loop3): 1 truncate cleaned up [ 71.698293][ T6213] loop3: detected capacity change from 0 to 512 [ 71.714233][ T6212] loop0: detected capacity change from 0 to 1024 [ 71.722971][ T6213] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.729782][ T6213] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.737122][ T6214] __nla_validate_parse: 1 callbacks suppressed [ 71.737151][ T6214] netlink: 256 bytes leftover after parsing attributes in process `syz.2.809'. [ 71.747474][ T6212] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.820: Failed to acquire dquot type 0 [ 71.757031][ T6213] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.808: corrupted in-inode xattr: e_value out of bounds [ 71.767996][ T6216] ref_ctr increment failed for inode: 0x3c5 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888118fe4540 [ 71.780932][ T6212] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 71.803659][ T6213] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.808: couldn't read orphan inode 15 (err -117) [ 71.806146][ T6212] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.820: corrupted inode contents [ 71.831086][ T6212] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #13: comm syz.0.820: mark_inode_dirty error [ 71.849100][ T6208] uprobe: syz.1.807:6208 failed to unregister, leaking uprobe [ 71.865295][ T6212] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.820: corrupted inode contents [ 71.912695][ T6212] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.820: mark_inode_dirty error [ 71.954537][ T6212] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.820: corrupted inode contents [ 71.966601][ T6212] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 71.975779][ T6212] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.820: corrupted inode contents [ 71.989444][ T6212] EXT4-fs error (device loop0): ext4_truncate:4240: inode #13: comm syz.0.820: mark_inode_dirty error [ 72.000879][ T6212] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 72.020080][ T6212] EXT4-fs (loop0): 1 truncate cleaned up [ 72.103689][ T6239] ref_ctr increment failed for inode: 0x3cb offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811be0f480 [ 72.117857][ T6237] $Hÿ: renamed from bond0 (while UP) [ 72.130624][ T6237] $Hÿ: entered promiscuous mode [ 72.135824][ T6237] bond_slave_0: entered promiscuous mode [ 72.141616][ T6238] uprobe: syz.1.831:6238 failed to unregister, leaking uprobe [ 72.141681][ T6237] bond_slave_1: entered promiscuous mode [ 72.171876][ T6243] loop2: detected capacity change from 0 to 1024 [ 72.180173][ T6243] EXT4-fs: Ignoring removed bh option [ 72.217741][ T6243] EXT4-fs mount: 38 callbacks suppressed [ 72.217757][ T6243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.365459][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.444516][ T6258] netlink: 256 bytes leftover after parsing attributes in process `syz.1.828'. [ 72.528208][ T6271] loop1: detected capacity change from 0 to 512 [ 72.551585][ T6271] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.562991][ T6271] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.601530][ T6271] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.832: corrupted in-inode xattr: e_value out of bounds [ 72.640222][ T6278] loop4: detected capacity change from 0 to 512 [ 72.646820][ T6271] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.832: couldn't read orphan inode 15 (err -117) [ 72.652380][ T6277] loop0: detected capacity change from 0 to 1024 [ 72.667622][ T6278] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.678998][ T6271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.684334][ T6280] ref_ctr increment failed for inode: 0x385 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811be0c540 [ 72.694729][ T6277] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.835: Failed to acquire dquot type 0 [ 72.714797][ T6278] EXT4-fs (loop4): 1 truncate cleaned up [ 72.721026][ T6278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.727718][ T6279] uprobe: syz.3.836:6279 failed to unregister, leaking uprobe [ 72.736042][ T6277] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 72.760490][ T6277] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.835: corrupted inode contents [ 72.775439][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.776018][ T6277] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #13: comm syz.0.835: mark_inode_dirty error [ 72.797379][ T6277] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.835: corrupted inode contents [ 72.810018][ T6277] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.835: mark_inode_dirty error [ 72.830887][ T6277] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.835: corrupted inode contents [ 72.879033][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.892131][ T6277] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 72.908474][ T6290] $Hÿ: renamed from bond0 (while UP) [ 72.926142][ T6290] bridge0: port 3($Hÿ) entered disabled state [ 72.926244][ T6277] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.835: corrupted inode contents [ 72.948602][ T6277] EXT4-fs error (device loop0): ext4_truncate:4240: inode #13: comm syz.0.835: mark_inode_dirty error [ 72.960931][ T6277] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 72.970947][ T6277] EXT4-fs (loop0): 1 truncate cleaned up [ 72.977258][ T6277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.016705][ T6300] netlink: 256 bytes leftover after parsing attributes in process `syz.3.844'. [ 73.050036][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.091965][ T6312] loop1: detected capacity change from 0 to 128 [ 73.098838][ T6312] EXT4-fs: Ignoring removed nobh option [ 73.109477][ T6312] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.124827][ T6312] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.128133][ T6311] loop3: detected capacity change from 0 to 1024 [ 73.140154][ T6317] loop2: detected capacity change from 0 to 512 [ 73.154669][ T6317] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.165679][ T6311] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.860: Failed to acquire dquot type 0 [ 73.179045][ T6311] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 73.193953][ T6311] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.860: corrupted inode contents [ 73.208857][ T6317] EXT4-fs (loop2): 1 truncate cleaned up [ 73.215638][ T6317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.228569][ T6311] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #13: comm syz.3.860: mark_inode_dirty error [ 73.247738][ T6311] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.860: corrupted inode contents [ 73.267866][ T6324] loop0: detected capacity change from 0 to 512 [ 73.274773][ T6324] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.283509][ T6324] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.283589][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.294302][ T6311] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.860: mark_inode_dirty error [ 73.303686][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.315348][ T6311] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.860: corrupted inode contents [ 73.335403][ T6324] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.853: corrupted in-inode xattr: e_value out of bounds [ 73.349334][ T6311] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 73.358973][ T6324] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.853: couldn't read orphan inode 15 (err -117) [ 73.371409][ T6324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.387370][ T6311] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.860: corrupted inode contents [ 73.435732][ T6311] EXT4-fs error (device loop3): ext4_truncate:4240: inode #13: comm syz.3.860: mark_inode_dirty error [ 73.542785][ T6311] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 73.560388][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.581504][ T6311] EXT4-fs (loop3): 1 truncate cleaned up [ 73.593344][ T6311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.654116][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.671174][ T6337] loop0: detected capacity change from 0 to 512 [ 73.678101][ T6337] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.687725][ T6337] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.724461][ T6337] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.867: corrupted in-inode xattr: e_value out of bounds [ 73.744981][ T6337] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.867: couldn't read orphan inode 15 (err -117) [ 73.767180][ T6337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.827326][ T6354] loop1: detected capacity change from 0 to 512 [ 73.838427][ T6356] loop2: detected capacity change from 0 to 128 [ 73.845575][ T6356] EXT4-fs: Ignoring removed nobh option [ 73.853021][ T6356] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.865779][ T6354] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.876665][ T6356] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.891578][ T6354] EXT4-fs (loop1): 1 truncate cleaned up [ 73.910673][ T6354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.970786][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.980822][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.870'. [ 73.981625][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.024870][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.028406][ T6370] loop1: detected capacity change from 0 to 512 [ 74.040594][ T6370] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.052678][ T6367] loop0: detected capacity change from 0 to 1024 [ 74.060092][ T6370] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.072602][ T6370] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.882: corrupted in-inode xattr: e_value out of bounds [ 74.087127][ T6370] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.882: couldn't read orphan inode 15 (err -117) [ 74.111942][ T6367] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.871: Failed to acquire dquot type 0 [ 74.135725][ T6370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.152006][ T6367] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 74.180585][ T6367] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.871: corrupted inode contents [ 74.200799][ T6367] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #13: comm syz.0.871: mark_inode_dirty error [ 74.226439][ T6367] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.871: corrupted inode contents [ 74.227854][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.263980][ T6367] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.871: mark_inode_dirty error [ 74.292627][ T6367] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.871: corrupted inode contents [ 74.307014][ T6367] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 74.316928][ T6367] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #13: comm syz.0.871: corrupted inode contents [ 74.329402][ T6367] EXT4-fs error (device loop0): ext4_truncate:4240: inode #13: comm syz.0.871: mark_inode_dirty error [ 74.346007][ T6367] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 74.357237][ T6367] EXT4-fs (loop0): 1 truncate cleaned up [ 74.364696][ T6367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.381183][ T6394] loop4: detected capacity change from 0 to 128 [ 74.394075][ T6394] EXT4-fs: Ignoring removed nobh option [ 74.400793][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.884'. [ 74.413852][ T6394] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.436462][ T6394] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.468609][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.527214][ T6411] loop0: detected capacity change from 0 to 512 [ 74.533931][ T6411] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.542637][ T6411] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.575560][ T6411] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.891: corrupted in-inode xattr: e_value out of bounds [ 74.589878][ T6411] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.891: couldn't read orphan inode 15 (err -117) [ 74.625740][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.630077][ T6411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.678977][ T6419] loop3: detected capacity change from 0 to 8192 [ 74.696734][ T6419] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 74.696734][ T6419] n'º|$@OOݱµ’-®+·el' [ 74.765223][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.778949][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'. [ 74.826789][ T6437] loop2: detected capacity change from 0 to 512 [ 74.848599][ T6439] bpf_get_probe_write_proto: 11 callbacks suppressed [ 74.848618][ T6439] syz.0.914[6439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.858705][ T6439] syz.0.914[6439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.870128][ T6439] syz.0.914[6439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.896121][ T6437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.922344][ T6449] loop0: detected capacity change from 0 to 128 [ 74.929453][ T6449] EXT4-fs: Ignoring removed nobh option [ 74.933603][ T6437] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.953133][ T6449] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.967764][ T6449] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.979032][ T3308] ================================================================== [ 74.987141][ T3308] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 74.994447][ T3308] [ 74.996783][ T3308] read-write to 0xffff88810662a228 of 8 bytes by task 3647 on cpu 0: [ 75.004850][ T3308] xas_clear_mark+0x90/0x180 [ 75.009446][ T3308] __folio_start_writeback+0x2d9/0x430 [ 75.014924][ T3308] __block_write_full_folio+0x506/0x8c0 [ 75.020494][ T3308] block_write_full_folio+0x293/0x2b0 [ 75.025887][ T3308] write_cache_pages+0x62/0x100 [ 75.030752][ T3308] blkdev_writepages+0x59/0x90 [ 75.035555][ T3308] do_writepages+0x1d8/0x480 [ 75.040156][ T3308] __writeback_single_inode+0x89/0x850 [ 75.045625][ T3308] writeback_sb_inodes+0x461/0xa30 [ 75.050745][ T3308] __writeback_inodes_wb+0x9a/0x1a0 [ 75.055948][ T3308] wb_writeback+0x274/0x640 [ 75.060459][ T3308] wb_workfn+0x67f/0x940 [ 75.064717][ T3308] process_scheduled_works+0x483/0x9a0 [ 75.070187][ T3308] worker_thread+0x51d/0x6f0 [ 75.074794][ T3308] kthread+0x1d1/0x210 [ 75.078866][ T3308] ret_from_fork+0x4b/0x60 [ 75.083290][ T3308] ret_from_fork_asm+0x1a/0x30 [ 75.088058][ T3308] [ 75.090384][ T3308] read to 0xffff88810662a228 of 8 bytes by task 3308 on cpu 1: [ 75.097944][ T3308] xas_find_marked+0x216/0x660 [ 75.102724][ T3308] find_get_entry+0x54/0x390 [ 75.107332][ T3308] filemap_get_folios_tag+0x136/0x210 [ 75.112721][ T3308] writeback_iter+0x4b0/0x830 [ 75.117417][ T3308] write_cache_pages+0x4b/0x100 [ 75.122282][ T3308] blkdev_writepages+0x59/0x90 [ 75.127094][ T3308] do_writepages+0x1d8/0x480 [ 75.131702][ T3308] filemap_flush+0xe7/0x120 [ 75.136207][ T3308] sync_blockdev_nowait+0x29/0x40 [ 75.141248][ T3308] sync_filesystem+0xe3/0x190 [ 75.145935][ T3308] generic_shutdown_super+0x46/0x220 [ 75.151229][ T3308] kill_block_super+0x2a/0x70 [ 75.155921][ T3308] ext4_kill_sb+0x44/0x80 [ 75.160264][ T3308] deactivate_locked_super+0x7d/0x1c0 [ 75.165647][ T3308] deactivate_super+0x9f/0xb0 [ 75.170333][ T3308] cleanup_mnt+0x268/0x2e0 [ 75.174766][ T3308] __cleanup_mnt+0x19/0x20 [ 75.179190][ T3308] task_work_run+0x13a/0x1a0 [ 75.183812][ T3308] syscall_exit_to_user_mode+0xa8/0x120 [ 75.189396][ T3308] do_syscall_64+0xd6/0x1c0 [ 75.193906][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.199822][ T3308] [ 75.202144][ T3308] value changed: 0x0000000000420403 -> 0x0000000000000000 [ 75.209246][ T3308] [ 75.211568][ T3308] Reported by Kernel Concurrency Sanitizer on: [ 75.217726][ T3308] CPU: 1 UID: 0 PID: 3308 Comm: syz-executor Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 75.228583][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.238639][ T3308] ================================================================== [ 75.247351][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.268368][ T6458] bridge0: port 3($Hÿ) entered blocking state [ 75.274920][ T6458] bridge0: port 3($Hÿ) entered disabled state [ 75.282879][ T6458] $Hÿ: entered allmulticast mode [ 75.288039][ T6458] bond_slave_0: entered allmulticast mode [ 75.291445][ T3374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.293930][ T6458] bond_slave_1: entered allmulticast mode [ 75.301871][ T3374] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.317301][ T6455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.325912][ T6455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.351889][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.