last executing test programs: 1m27.628869365s ago: executing program 4 (id=89): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 1m27.492505677s ago: executing program 4 (id=93): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x5, 0xfff, 0xffffffff}}]}]}}}]}, 0x64}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 1m27.425536658s ago: executing program 4 (id=95): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 1m27.332314389s ago: executing program 4 (id=98): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m27.181030482s ago: executing program 4 (id=104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000ac0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb0108520800072a", 0x2a}], 0x1) read(r2, 0x0, 0x0) 1m26.860630176s ago: executing program 4 (id=118): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = epoll_create(0x689) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000480)={0x10000018}) r2 = socket$netlink(0x10, 0x3, 0x4) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x9450) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1m26.821293637s ago: executing program 32 (id=118): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = epoll_create(0x689) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000480)={0x10000018}) r2 = socket$netlink(0x10, 0x3, 0x4) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x9450) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1m22.021866518s ago: executing program 2 (id=214): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="900000001c001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f3fac8da1a297e0099c5ac0000c5b068d0bf46d3234565a0016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x20000000, 0x0, 0x0) 1m21.88291543s ago: executing program 2 (id=219): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r2, 0x1) 1m21.693825253s ago: executing program 2 (id=223): bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf371, 0x10100, 0xfffffffe, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 1m21.612730784s ago: executing program 2 (id=225): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0xc010, 0x0) 1m21.556270415s ago: executing program 2 (id=227): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRESOCT, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1m21.25410742s ago: executing program 2 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000200)=r1}, 0x20) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) 1m21.22804779s ago: executing program 33 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000200)=r1}, 0x20) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) 1.848636723s ago: executing program 6 (id=2306): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.433746729s ago: executing program 1 (id=2315): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioprio_set$uid(0x3, 0x0, 0x4007) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 1.422343089s ago: executing program 1 (id=2316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.279763162s ago: executing program 0 (id=2319): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = gettid() timer_create(0x1, &(0x7f0000000040)={0x0, 0x17, 0x4, @tid=r2}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) 1.247687352s ago: executing program 1 (id=2321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r2, 0xffffffffffffffff, 0x0) 1.225161552s ago: executing program 1 (id=2323): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r1, 0x0, 0x0, 0x400000000000000) 1.141968963s ago: executing program 1 (id=2326): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) 1.065467504s ago: executing program 5 (id=2328): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$eJzs3U9IHFccB/DfzO7Wqkux7aVQ+gdKKa0g9lboxV5aEIpIKYW2YCmllxYtWKU37SmXHJJjSIKnXCTkFpNj8CK5JARyMokHcwkkkkMkhySwYXcU/LOJxl13gvP5wDoz+ub93jDzfSPiMAEUVl9EDEVEKSL6I6ISEcnWBh9nn76NzbnupbGIWu2Hh0mjXbad2dyvNyJmI+KriFhMk/irHDG98Mvq4+XvPjs+Vfn03MLP3R09yA1rqyvfr58dOXZx+Mvp6zfvjyQxFNVtx9V+SZPvlZOIdw6j2GsiKec9AvZj9L8Lt+q5fzciPmnkvxJpZCfvxOQbi5X44syL9j354Mb7nRwr0H61WqV+D5ytAYWTRkQ1knQgIrL1NB0YyH6Hv13qSf+emPy3/8+JqfE/8p6pgHapRqx8e7nrUu+O/N8rZfkHjqjsj1IrP47O36mvrJfyHhDQER9ki/r9v/+3mc9D/qFw5B+KS/6huOQfikv+4ehp9v+mzcg/FJf8Q3HJPxSX/ENxHTj/p54d3qCAjtiafwCgWGpdB3pquP0PIgMdl/f8AwAAAAAAAAAAAAAAAAAA7DbXvTS2+WlPj+U9W1w9HbH2TdZ0d/1S433EEW82vvY8Srb1mOyrwsv9+lGLHbTofM5PX791N9/61z7Mt/7MeMTs/xExWC43rr1tF1Sycf0d3Nt7/Lzye4sFXtHOdwN8/VNn6+/0dD7f+sPLEVfq889gs/knjfcay+bzT7V+/lqs/8+TFjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgY54HAAD//7UiauA=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 995.708566ms ago: executing program 6 (id=2329): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xd5a527333bff4787, 0x0) 959.061916ms ago: executing program 6 (id=2330): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2, 0x0, 0x11}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 921.553367ms ago: executing program 3 (id=2331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @empty}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 839.612318ms ago: executing program 3 (id=2332): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x2) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x4, 0xfffffffd, 0x1, 0x2, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 838.980058ms ago: executing program 5 (id=2342): bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) 775.151829ms ago: executing program 0 (id=2333): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4e4, &(0x7f0000002d40)="$eJzs3c9PXFsdAPDvHZgCLc/hqYvnS3w2+gxttDNQbEtcVEyMrppY68YVIgyEMDCEGdpCGkPjH2Bi/BVduXJj4tqYmP4JxqSJ7o0xmkbbunChjrnDHYu8AYaUYSjz+SSn95z763tO4R7m3HMzN4C+dTkiZiJiICKuRkQhW5/LUuzspnS/F88fzacpicbQvb8lkWTrWudKsuWl7LDhiPjaVyK+lXwwbm1re2WuUilvZOVSfXW9VNvavra8OrdUXiqvzUxN3py+NX1jeuLE2nr7S3/+4Xd//uXbv/nsgz/O/vXKt9NqjWbb9rajEzsd7rfb9Hzz/6JlMCI2jhPsDBvI2pPvdUUAAOhI+hn/wxHxyYh4+ZNe1wYAAADohsYXRuNfSUQDAAAAOLdyzWdgk1wxexZgNHK5YnH3Gd6PxsVcpVqrf2axurm2sPus7Fjkc4vLlfJE9qzwWOSTtDzZzL8qX99XnoqItyPi+4WRZrk4X60s9PrmBwAAAPSJS/vG//8o7I7/AQAAgHNmrNcVAAAAALrO+B8AAADOvwPH/8ng6VYEAAAA6Iav3rmTpkbr/dcL97c2V6r3ry2UayvF1c354nx1Y724VK0uNb+zb/Wo81Wq1fXPxdrmw1K9XKuXalvbs6vVzbX6bPO93rPlRuFUmgUAAADs8fYnnvwhiYidz480U+pCti1/9OEz3a0d0E254+2edKsewOkb6HUFgJ7xgC/0rw7G+MA5d8TA/gf7yse8bQAAAJwF4x97rfl/84HwBjOQh/5l/h/6l/l/6F/m/6HPDR29y/BBG357wnUBAAC6ZrSZklwxmwscjVyuWIx4q/lagHyyuFwpT0TEhyLi94X8UFqe7HWlAQAAAAAAAAAAAAAAAAAAAAAAAOAN02gk0QAAAADOtYjcX5LsRf7jhfdH998fuJD8s9BcRsSDn9770cO5en1jMl3/9/+tr/84W3+9tSb1jVO+kwEAAAC0tMbprXE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJykF88fzbfSacZ99sWIGGsXfzCGm8vhXxUi4uLLJAb3HJdExMAJxN95HBHvtIufpNWKsawW++PnImKkx/EvnUB86GdP0v5nJr3+8vuuv1xcbi7bX3+DWXpdzy4f1P/lWv1fs59r1/+9dfiph1uZd5/+snRg/McR7w62739a8ZN28S903sZvfn17+6BtjZ9FjB/x9yeNX6qvrpdqW9vXllfnlspL5bWpqcmb07emb0xPlBaXK+Xs37YxvvfxX//nsPZfbBt/t/89sP0R8X6H7f/304fPP3JI/Cufav/zf+eQ+OnvxKezvwPp9vFWfmc3v9d7v/jde4e1f+GA9h/684+IKx22/+rd7/ypw10BgFNQ29pematUyhtdyYx07cwyaaa6diaqIXN2M3ezC/3Yh/e4YwIAAE7cqw/9+7ccY4IHAAAAAAAAAAAAAAAAAAAAeC1d/xKyof//ZoHh3jUVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBQ/w0AAP//5w/Stg==") setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bdad, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 770.686099ms ago: executing program 6 (id=2334): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000300), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 761.689949ms ago: executing program 5 (id=2335): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f9ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 698.66451ms ago: executing program 3 (id=2336): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 698.23897ms ago: executing program 6 (id=2337): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fc7771005406ff20010000220000000000000000000001fe8000000000000000000000000000aa00034e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002"], 0x0) 590.118142ms ago: executing program 6 (id=2338): socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 556.996732ms ago: executing program 3 (id=2339): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 539.389752ms ago: executing program 5 (id=2340): prctl$PR_SET_NAME(0xf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 417.397434ms ago: executing program 3 (id=2341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpriority(0x1, 0xffffffffffffffff) 347.221625ms ago: executing program 0 (id=2343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)='E', 0x1}], 0x1}, 0x3) 326.501466ms ago: executing program 3 (id=2344): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) mount$tmpfs(0x0, 0x0, 0x0, 0x21, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 241.773237ms ago: executing program 0 (id=2345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 103.089429ms ago: executing program 5 (id=2346): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x10) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x441, 0x14a) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x20, 0x2000, 0x8000) 101.251119ms ago: executing program 0 (id=2356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10}) close_range(r2, 0xffffffffffffffff, 0x0) 49.85141ms ago: executing program 5 (id=2347): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x63, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 33.85759ms ago: executing program 1 (id=2348): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b0e}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 0s ago: executing program 0 (id=2349): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10) close(r0) kernel console output (not intermixed with test programs): using interface batadv_slave_0 (retrying later): interface not active [ 50.032830][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.039811][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.065968][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.107654][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.118372][ T4304] bridge_slave_1 (unregistering): left allmulticast mode [ 50.125636][ T4304] bridge_slave_1 (unregistering): left promiscuous mode [ 50.133058][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.195056][ T4188] hsr_slave_0: entered promiscuous mode [ 50.205599][ T4188] hsr_slave_1: entered promiscuous mode [ 50.246412][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.266132][ T4188] Cannot create hsr debugfs directory [ 50.304955][ T4320] ip6gre1: entered allmulticast mode [ 50.362808][ T4323] loop0: detected capacity change from 0 to 1024 [ 50.427789][ T4323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.566551][ T4323] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 50.645345][ T4188] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 50.657827][ T4323] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 50.670184][ T4323] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.670184][ T4323] [ 50.679965][ T4323] EXT4-fs (loop0): Total free blocks count 0 [ 50.686026][ T4323] EXT4-fs (loop0): Free/Dirty block details [ 50.692062][ T4323] EXT4-fs (loop0): free_blocks=16 [ 50.697213][ T4323] EXT4-fs (loop0): dirty_blocks=0 [ 50.702359][ T4323] EXT4-fs (loop0): Block reservation details [ 50.708491][ T4323] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 50.718312][ T4346] netlink: 'syz.1.260': attribute type 13 has an invalid length. [ 50.719563][ T4188] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 50.768549][ T4188] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 50.789018][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.856106][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.919494][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.929850][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.967844][ T4346] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.976900][ T4346] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.986085][ T4346] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.995307][ T4346] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.013879][ T4188] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 51.168088][ T4372] loop1: detected capacity change from 0 to 512 [ 51.170049][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.194998][ T4372] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.206284][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.245166][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.252362][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.266907][ T4372] EXT4-fs (loop1): 1 truncate cleaned up [ 51.278081][ T4372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.282885][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.297641][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.336873][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.375915][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.386376][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.606594][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.962705][ T4188] veth0_vlan: entered promiscuous mode [ 51.987901][ T4188] veth1_vlan: entered promiscuous mode [ 51.996787][ T4451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.280'. [ 52.020393][ T4188] veth0_macvtap: entered promiscuous mode [ 52.038311][ T4188] veth1_macvtap: entered promiscuous mode [ 52.082124][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.110871][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.142294][ T4188] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.151102][ T4188] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.159955][ T4188] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.168793][ T4188] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.519392][ T4494] SELinux: failed to load policy [ 52.666045][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119d1b200: rx timeout, send abort [ 52.674432][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119d1b200: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 52.948283][ T4536] pim6reg1: entered promiscuous mode [ 52.953699][ T4536] pim6reg1: entered allmulticast mode [ 53.029317][ T4543] bridge0: entered allmulticast mode [ 53.035447][ T4543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.306'. [ 53.044403][ T4543] bridge_slave_1: left allmulticast mode [ 53.050251][ T4543] bridge_slave_1: left promiscuous mode [ 53.056266][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.064788][ T4543] bridge_slave_0: left allmulticast mode [ 53.070538][ T4543] bridge_slave_0: left promiscuous mode [ 53.076352][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.087234][ T4543] bridge0 (unregistering): left allmulticast mode [ 53.207721][ T4552] loop1: detected capacity change from 0 to 256 [ 53.366149][ T4569] loop3: detected capacity change from 0 to 512 [ 53.378592][ T4569] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 53.387377][ T4569] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.314: invalid indirect mapped block 2683928664 (level 1) [ 53.414483][ T4569] EXT4-fs (loop3): Remounting filesystem read-only [ 53.428926][ T4569] EXT4-fs (loop3): 1 truncate cleaned up [ 53.447357][ T4569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.516789][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.634124][ T4591] loop0: detected capacity change from 0 to 128 [ 53.657528][ T4591] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.682889][ T4591] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.730068][ T4591] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.829756][ T4598] loop3: detected capacity change from 0 to 8192 [ 53.870544][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 53.870562][ T29] audit: type=1400 audit(1752435376.856:476): avc: denied { mounton } for pid=4597 comm="syz.3.325" path="/63/file2/bus" dev="loop3" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 53.910142][ T3313] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 53.918097][ T3313] FAT-fs (loop3): Filesystem has been set read-only [ 53.991663][ T4612] loop0: detected capacity change from 0 to 512 [ 54.015054][ T4612] EXT4-fs: Ignoring removed i_version option [ 54.032038][ T4612] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.047751][ T4612] EXT4-fs (loop0): 1 truncate cleaned up [ 54.056254][ T4612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.105040][ T4623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.334'. [ 54.115109][ T4623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.334'. [ 54.132463][ T4623] netlink: 156 bytes leftover after parsing attributes in process `syz.5.334'. [ 54.161651][ T4627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.335'. [ 54.172508][ T4627] hsr_slave_0: left promiscuous mode [ 54.178291][ T4627] hsr_slave_1: left promiscuous mode [ 54.272098][ T29] audit: type=1326 audit(1752435377.266:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 54.295468][ T29] audit: type=1326 audit(1752435377.266:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 54.319019][ T29] audit: type=1326 audit(1752435377.266:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 54.342354][ T29] audit: type=1326 audit(1752435377.266:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 54.365728][ T29] audit: type=1326 audit(1752435377.266:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 54.389174][ T29] audit: type=1326 audit(1752435377.266:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 54.413314][ T29] audit: type=1326 audit(1752435377.266:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 54.436686][ T29] audit: type=1326 audit(1752435377.286:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 54.460121][ T29] audit: type=1326 audit(1752435377.286:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 54.523897][ T4636] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 54.846256][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.890495][ T4674] program syz.6.348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.919321][ T4620] 9pnet_fd: p9_fd_create_tcp (4620): problem connecting socket to 127.0.0.1 [ 55.169217][ T4704] loop0: detected capacity change from 0 to 128 [ 55.177873][ T4704] EXT4-fs: Ignoring removed oldalloc option [ 55.198011][ T4704] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.220474][ T4704] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.289872][ T4716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.366'. [ 55.341848][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.373194][ T4724] loop0: detected capacity change from 0 to 164 [ 55.392942][ T4724] syz.0.370: attempt to access beyond end of device [ 55.392942][ T4724] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 55.408648][ T4724] syz.0.370: attempt to access beyond end of device [ 55.408648][ T4724] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.613598][ T4752] netlink: 'syz.3.381': attribute type 4 has an invalid length. [ 55.624473][ T4750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.380'. [ 55.634693][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.643105][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.959642][ T4779] loop6: detected capacity change from 0 to 512 [ 55.992483][ T4779] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.007827][ T4779] EXT4-fs (loop6): mount failed [ 56.070611][ T4794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.386'. [ 56.196068][ T4806] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.277046][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 56.288313][ T4806] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.360907][ T4806] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.376580][ T4831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 56.438918][ T4806] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.518738][ T4806] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.541700][ T4806] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.577182][ T4806] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.603076][ T4806] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.012957][ T4903] syzkaller0: entered promiscuous mode [ 57.018491][ T4903] syzkaller0: entered allmulticast mode [ 57.094602][ T4912] syz.1.432 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.161604][ T4891] loop6: detected capacity change from 0 to 4096 [ 57.176594][ T4891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.342372][ T4932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.439'. [ 57.351299][ T4932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.439'. [ 57.375888][ T4932] bond1: entered promiscuous mode [ 57.381017][ T4932] bond1: entered allmulticast mode [ 57.386528][ T4932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.483676][ T4943] loop0: detected capacity change from 0 to 128 [ 57.500452][ T4188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.540914][ T4943] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.614768][ T4943] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.676306][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.788827][ T4963] SELinux: syz.0.447 (4963) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 57.890056][ T4941] netlink: 32 bytes leftover after parsing attributes in process `syz.5.443'. [ 57.906999][ T4975] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.911500][ T4941] netlink: 32 bytes leftover after parsing attributes in process `syz.5.443'. [ 57.938562][ T4977] netlink: 'syz.0.449': attribute type 13 has an invalid length. [ 58.012283][ T4977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.053915][ T4984] netlink: 'syz.0.449': attribute type 13 has an invalid length. [ 58.103082][ T4984] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.110343][ T4984] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.177079][ T4999] loop6: detected capacity change from 0 to 1024 [ 58.181413][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.195198][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.212824][ T4999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.226381][ T4999] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.238382][ T4999] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 1: comm syz.6.451: lblock 1 mapped to illegal pblock 1 (length 4) [ 58.253819][ T4999] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 4 with error 117 [ 58.266211][ T4999] EXT4-fs (loop6): This should not happen!! Data will be lost [ 58.266211][ T4999] [ 58.324460][ T4984] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.332950][ T4984] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.341398][ T4984] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.349785][ T4984] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.403029][ T4188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.690187][ T5050] netlink: 'syz.0.461': attribute type 21 has an invalid length. [ 58.810264][ T5050] netlink: 'syz.0.461': attribute type 1 has an invalid length. [ 58.818005][ T5050] netlink: 144 bytes leftover after parsing attributes in process `syz.0.461'. [ 59.063423][ T5061] team0 (unregistering): Port device team_slave_0 removed [ 59.111272][ T5061] team0 (unregistering): Port device team_slave_1 removed [ 59.165465][ T5075] loop5: detected capacity change from 0 to 256 [ 59.177311][ T5075] msdos: Bad value for 'fmask' [ 59.270311][ T5086] netlink: 96 bytes leftover after parsing attributes in process `syz.5.469'. [ 59.304478][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 59.304493][ T29] audit: type=1326 audit(1752435382.296:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5089 comm="syz.6.470" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24c739e929 code=0x0 [ 59.477012][ T29] audit: type=1400 audit(1752435382.466:563): avc: denied { read } for pid=5118 comm="syz.5.476" path="socket:[9687]" dev="sockfs" ino=9687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 59.532036][ T5130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.579779][ T5137] netlink: 240 bytes leftover after parsing attributes in process `syz.5.476'. [ 59.608421][ T29] audit: type=1400 audit(1752435382.596:564): avc: denied { mount } for pid=5138 comm="syz.5.480" name="/" dev="configfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 59.631241][ T29] audit: type=1400 audit(1752435382.606:565): avc: denied { search } for pid=5138 comm="syz.5.480" name="/" dev="configfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.653357][ T29] audit: type=1400 audit(1752435382.606:566): avc: denied { search } for pid=5138 comm="syz.5.480" name="/" dev="configfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.675372][ T29] audit: type=1400 audit(1752435382.606:567): avc: denied { read open } for pid=5138 comm="syz.5.480" path="/" dev="configfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.721917][ T5144] netlink: 96 bytes leftover after parsing attributes in process `syz.5.482'. [ 59.859887][ T5152] veth1_to_bond: entered allmulticast mode [ 59.866209][ T5152] veth1_to_bond: entered promiscuous mode [ 59.873211][ T5152] veth1_to_bond: left promiscuous mode [ 59.878826][ T5152] veth1_to_bond: left allmulticast mode [ 60.222565][ T29] audit: type=1400 audit(1752435383.216:568): avc: denied { setopt } for pid=5159 comm="syz.6.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.297079][ T5164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.492'. [ 60.332368][ T29] audit: type=1400 audit(1752435383.326:569): avc: denied { ioctl } for pid=5166 comm="syz.6.493" path="socket:[9149]" dev="sockfs" ino=9149 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.404558][ T5136] 9pnet_fd: p9_fd_create_tcp (5136): problem connecting socket to 127.0.0.1 [ 60.420478][ T29] audit: type=1400 audit(1752435383.406:570): avc: denied { wake_alarm } for pid=5168 comm="syz.6.494" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.489098][ T29] audit: type=1326 audit(1752435383.476:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.6.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 60.636057][ T5195] ref_ctr increment failed for inode: 0x29c offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881099dd800 [ 60.652058][ T5194] uprobe: syz.1.501:5194 failed to unregister, leaking uprobe [ 61.105811][ T5268] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.513'. [ 61.500267][ T5333] syzkaller0: entered allmulticast mode [ 61.506376][ T5333] syzkaller0: entered promiscuous mode [ 61.514811][ T5333] syzkaller0 (unregistering): left allmulticast mode [ 61.521615][ T5333] syzkaller0 (unregistering): left promiscuous mode [ 61.587678][ T5348] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 61.637026][ T5358] loop3: detected capacity change from 0 to 128 [ 61.649390][ T5358] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.666995][ T5358] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.733958][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.022352][ T5419] netlink: 'syz.6.540': attribute type 12 has an invalid length. [ 62.544840][ T5466] netlink: 'syz.1.558': attribute type 1 has an invalid length. [ 62.586895][ T5466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.660576][ T5466] bond1: (slave gretap1): making interface the new active one [ 62.678806][ T5466] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 62.695461][ T5466] bond1 (unregistering): (slave gretap1): Releasing active interface [ 62.711410][ T5466] bond1 (unregistering): Released all slaves [ 63.163303][ T5522] __nla_validate_parse: 6 callbacks suppressed [ 63.163322][ T5522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'. [ 63.329678][ T5541] syzkaller0: entered allmulticast mode [ 63.344562][ T5542] tipc: Failed to remove unknown binding: 66,1,1/0:3642174469/3642174471 [ 63.353371][ T5541] syzkaller0: entered promiscuous mode [ 63.361338][ T5542] tipc: Failed to remove unknown binding: 66,1,1/0:3642174469/3642174471 [ 63.369883][ T5542] tipc: Failed to remove unknown binding: 66,1,1/0:3642174469/3642174471 [ 63.379853][ T5541] syzkaller0 (unregistering): left allmulticast mode [ 63.386722][ T5541] syzkaller0 (unregistering): left promiscuous mode [ 63.964508][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.971792][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.045399][ T5585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.055452][ T5585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.088948][ T5585] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.097660][ T5585] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.106216][ T5585] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.114659][ T5585] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.126245][ T5588] syzkaller0: entered allmulticast mode [ 64.136861][ T5593] syzkaller0: entered promiscuous mode [ 64.142734][ T5594] pim6reg1: entered promiscuous mode [ 64.148114][ T5594] pim6reg1: entered allmulticast mode [ 64.167336][ T5597] syzkaller0 (unregistering): left allmulticast mode [ 64.174200][ T5597] syzkaller0 (unregistering): left promiscuous mode [ 64.367951][ T5611] ref_ctr increment failed for inode: 0x12e offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810e54a680 [ 64.424238][ T5610] uprobe: syz.6.625:5610 failed to unregister, leaking uprobe [ 64.504090][ T5623] ip6gre1: entered allmulticast mode [ 64.552744][ T5627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.622'. [ 64.660816][ T5639] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.626'. [ 64.669907][ T5639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.626'. [ 65.007339][ T5645] loop0: detected capacity change from 0 to 512 [ 65.034050][ T5645] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.040675][ T5645] EXT4-fs: Ignoring removed bh option [ 65.046632][ T5645] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.061136][ T5645] EXT4-fs (loop0): 1 truncate cleaned up [ 65.075402][ T5645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.224577][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 65.224595][ T29] audit: type=1326 audit(1752435388.216:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 65.258381][ T5651] loop6: detected capacity change from 0 to 164 [ 65.286217][ T29] audit: type=1326 audit(1752435388.246:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 65.288949][ T5651] syz.6.629: attempt to access beyond end of device [ 65.288949][ T5651] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 65.309540][ T29] audit: type=1326 audit(1752435388.246:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 65.346928][ T29] audit: type=1326 audit(1752435388.246:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f24c739e963 code=0x7ffc0000 [ 65.363261][ T5651] syz.6.629: attempt to access beyond end of device [ 65.363261][ T5651] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 65.370019][ T29] audit: type=1326 audit(1752435388.246:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f24c739d3df code=0x7ffc0000 [ 65.406604][ T29] audit: type=1326 audit(1752435388.246:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f24c739e9b7 code=0x7ffc0000 [ 65.429785][ T29] audit: type=1326 audit(1752435388.246:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24c739d290 code=0x7ffc0000 [ 65.453109][ T29] audit: type=1326 audit(1752435388.246:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24c739e52b code=0x7ffc0000 [ 65.476311][ T29] audit: type=1326 audit(1752435388.266:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 65.499609][ T29] audit: type=1326 audit(1752435388.266:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 65.532598][ T5658] loop3: detected capacity change from 0 to 128 [ 65.586045][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.649323][ T5666] ref_ctr increment failed for inode: 0x260 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810e549b80 [ 65.662230][ T5665] uprobe: syz.0.633:5665 failed to unregister, leaking uprobe [ 65.723206][ T51] kworker/u8:3: attempt to access beyond end of device [ 65.723206][ T51] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 65.736783][ T51] kworker/u8:3: attempt to access beyond end of device [ 65.736783][ T51] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 65.750654][ T51] kworker/u8:3: attempt to access beyond end of device [ 65.750654][ T51] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 65.764171][ T51] kworker/u8:3: attempt to access beyond end of device [ 65.764171][ T51] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 65.777603][ T51] kworker/u8:3: attempt to access beyond end of device [ 65.777603][ T51] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 65.790996][ T51] kworker/u8:3: attempt to access beyond end of device [ 65.790996][ T51] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 65.804349][ T51] kworker/u8:3: attempt to access beyond end of device [ 65.804349][ T51] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 65.817726][ T51] kworker/u8:3: attempt to access beyond end of device [ 65.817726][ T51] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 65.865578][ T5674] loop3: detected capacity change from 0 to 256 [ 65.875841][ T5674] FAT-fs (loop3): bogus number of FAT sectors [ 65.882142][ T5674] FAT-fs (loop3): Can't find a valid FAT filesystem [ 66.041358][ T5691] loop3: detected capacity change from 0 to 1024 [ 66.049664][ T5691] EXT4-fs: Ignoring removed orlov option [ 66.063117][ T5691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.305083][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.917121][ T5748] loop3: detected capacity change from 0 to 128 [ 66.983519][ T5697] 9pnet_fd: p9_fd_create_tcp (5697): problem connecting socket to 127.0.0.1 [ 67.013328][ T5748] Buffer I/O error on dev loop3, logical block 156, lost async page write [ 67.051092][ T5759] loop0: detected capacity change from 0 to 1024 [ 67.060783][ T5748] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 67.071947][ T5748] Buffer I/O error on dev loop3, logical block 158, lost async page write [ 67.081126][ T5759] EXT4-fs: Ignoring removed orlov option [ 67.087586][ T5748] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 67.098883][ T5748] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 67.108610][ T5759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.133459][ T5748] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 67.143288][ T5748] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 67.155251][ T5748] Buffer I/O error on dev loop3, logical block 133, lost async page write [ 67.156963][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.163952][ T5748] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 67.181716][ T5748] Buffer I/O error on dev loop3, logical block 151, lost async page write [ 67.597975][ T5788] netlink: 'syz.6.685': attribute type 1 has an invalid length. [ 67.603627][ T5789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.687'. [ 67.625508][ T5791] loop0: detected capacity change from 0 to 512 [ 67.644805][ T5791] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.664622][ T5788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.685756][ T5791] EXT4-fs (loop0): failed to initialize system zone (-117) [ 67.700722][ T5796] bond1: (slave gretap1): making interface the new active one [ 67.710504][ T5791] EXT4-fs (loop0): mount failed [ 67.717881][ T5796] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 67.770795][ T1038] IPVS: starting estimator thread 0... [ 67.794324][ T5788] bond1 (unregistering): (slave gretap1): Releasing active interface [ 67.812069][ T5807] Zero length message leads to an empty skb [ 67.819417][ T5788] bond1 (unregistering): Released all slaves [ 67.868917][ T5815] loop3: detected capacity change from 0 to 128 [ 67.870503][ T5803] IPVS: using max 1968 ests per chain, 98400 per kthread [ 67.902965][ T5815] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.921652][ T5815] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.032785][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.269679][ T5840] loop6: detected capacity change from 0 to 512 [ 68.311791][ T5840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.357721][ T5840] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.392422][ T5855] netlink: 'syz.3.712': attribute type 1 has an invalid length. [ 68.428666][ T5855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.471852][ T4188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.476973][ T5855] bond1: (slave gretap1): making interface the new active one [ 68.489355][ T5855] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 68.520647][ T5855] bond1 (unregistering): (slave gretap1): Releasing active interface [ 68.570459][ T5855] bond1 (unregistering): Released all slaves [ 68.656978][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 68.665878][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.725'. [ 68.773347][ T5868] bond1: entered promiscuous mode [ 68.778538][ T5868] bond1: entered allmulticast mode [ 68.784233][ T5868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.861225][ T5879] serio: Serial port ptm0 [ 69.019457][ T5888] netlink: 'syz.5.722': attribute type 4 has an invalid length. [ 69.037228][ T5888] netlink: 'syz.5.722': attribute type 4 has an invalid length. [ 69.426553][ T5913] loop3: detected capacity change from 0 to 2048 [ 69.457113][ T5913] EXT4-fs: Ignoring removed bh option [ 69.525612][ T5913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.586471][ T158] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.644496][ T158] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 69.656788][ T158] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.656788][ T158] [ 69.666463][ T158] EXT4-fs (loop3): Total free blocks count 0 [ 69.672570][ T158] EXT4-fs (loop3): Free/Dirty block details [ 69.678524][ T158] EXT4-fs (loop3): free_blocks=2415919104 [ 69.684279][ T158] EXT4-fs (loop3): dirty_blocks=496 [ 69.689652][ T158] EXT4-fs (loop3): Block reservation details [ 69.695682][ T158] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 69.708461][ T5913] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28 [ 70.133902][ T5947] 9p: Unknown uid 00000000004294967295 [ 70.168222][ T5948] netlink: 'syz.5.743': attribute type 21 has an invalid length. [ 70.176466][ T5948] netlink: 'syz.5.743': attribute type 1 has an invalid length. [ 70.184174][ T5948] netlink: 144 bytes leftover after parsing attributes in process `syz.5.743'. [ 70.219494][ T5950] loop3: detected capacity change from 0 to 1024 [ 70.247727][ T5950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.268695][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 70.268766][ T29] audit: type=1400 audit(1752435393.256:762): avc: denied { mounton } for pid=5949 comm="syz.3.746" path="/145/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.274515][ T564] Trying to write to read-only block-device loop3 [ 70.275637][ T5950] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.746: Allocating blocks 385-513 which overlap fs metadata [ 70.329348][ T5950] EXT4-fs (loop3): pa ffff888105147230: logic 16, phys. 129, len 24 [ 70.337451][ T5950] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 70.446022][ T29] audit: type=1326 audit(1752435393.436:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.5.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 70.481738][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.492125][ T29] audit: type=1326 audit(1752435393.436:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.5.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 70.515566][ T29] audit: type=1326 audit(1752435393.436:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.5.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 70.538944][ T29] audit: type=1326 audit(1752435393.436:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.5.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 70.562302][ T29] audit: type=1326 audit(1752435393.436:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.5.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 70.585685][ T29] audit: type=1326 audit(1752435393.436:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.5.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 70.609121][ T29] audit: type=1326 audit(1752435393.436:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.5.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 70.632426][ T29] audit: type=1326 audit(1752435393.466:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.5.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 70.655726][ T29] audit: type=1326 audit(1752435393.466:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.5.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 70.716522][ T5960] serio: Serial port ptm0 [ 71.116658][ T5969] xt_TCPMSS: Only works on TCP SYN packets [ 71.611461][ T5983] netlink: 'syz.5.759': attribute type 1 has an invalid length. [ 71.611988][ T5986] netlink: 96 bytes leftover after parsing attributes in process `syz.1.770'. [ 71.639276][ T5983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.670157][ T5989] bond2: (slave gretap1): making interface the new active one [ 71.693014][ T5989] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 71.712005][ T5991] netlink: 'syz.3.761': attribute type 13 has an invalid length. [ 71.813577][ T5983] bond2 (unregistering): (slave gretap1): Releasing active interface [ 71.846391][ T5983] bond2 (unregistering): Released all slaves [ 72.259392][ T5867] syz.6.716 (5867) used greatest stack depth: 7160 bytes left [ 72.316754][ T6005] loop3: detected capacity change from 0 to 128 [ 72.462948][ T6009] loop6: detected capacity change from 0 to 2048 [ 72.510867][ T6009] EXT4-fs: Ignoring removed bh option [ 72.639753][ T6009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.772817][ T6018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.769'. [ 72.784125][ T6018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.769'. [ 72.800457][ T6009] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.851628][ T6009] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28 [ 72.864323][ T6009] EXT4-fs (loop6): This should not happen!! Data will be lost [ 72.864323][ T6009] [ 72.874066][ T6009] EXT4-fs (loop6): Total free blocks count 0 [ 72.880093][ T6009] EXT4-fs (loop6): Free/Dirty block details [ 72.886034][ T6009] EXT4-fs (loop6): free_blocks=2415919104 [ 72.891817][ T6009] EXT4-fs (loop6): dirty_blocks=656 [ 72.897084][ T6009] EXT4-fs (loop6): Block reservation details [ 72.903195][ T6009] EXT4-fs (loop6): i_reserved_data_blocks=41 [ 72.963966][ T564] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 73.016894][ T6023] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.097852][ T6023] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.178009][ T6023] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.215930][ T6023] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.264691][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 73.291157][ T6023] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.312871][ T6023] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.344098][ T6023] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.363570][ T6023] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.460605][ T6039] netlink: 'syz.5.783': attribute type 13 has an invalid length. [ 73.513485][ T6043] netlink: 'syz.5.783': attribute type 13 has an invalid length. [ 73.542183][ T6039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.620852][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.628215][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.710440][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.725590][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.763368][ T6043] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.772536][ T6043] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.781659][ T6043] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.790840][ T6043] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.984514][ T6061] loop0: detected capacity change from 0 to 2048 [ 74.005662][ T6065] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 74.005875][ T6061] ext4: Unknown parameter 'obj_type' [ 74.315820][ T6083] netlink: 96 bytes leftover after parsing attributes in process `syz.0.800'. [ 74.456649][ T6089] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 74.487557][ T6089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.538707][ T6091] bond2: (slave gretap1): making interface the new active one [ 74.586018][ T6091] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 74.598960][ T6089] bond2 (unregistering): (slave gretap1): Releasing active interface [ 74.617280][ T6089] bond2 (unregistering): Released all slaves [ 74.625801][ T6032] syz.1.779 (6032) used greatest stack depth: 6952 bytes left [ 75.028982][ T6108] loop0: detected capacity change from 0 to 512 [ 75.071510][ T6108] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.118395][ T6108] EXT4-fs (loop0): mount failed [ 75.197283][ T6124] vlan2: entered allmulticast mode [ 75.203948][ T6124] dummy0: entered allmulticast mode [ 75.289195][ T6129] netlink: 96 bytes leftover after parsing attributes in process `syz.0.818'. [ 75.355555][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.815'. [ 75.372766][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 75.372791][ T29] audit: type=1326 audit(1752435398.366:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6140 comm="syz.1.823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x0 [ 75.415394][ T6143] pim6reg1: entered promiscuous mode [ 75.420812][ T6143] pim6reg1: entered allmulticast mode [ 75.444366][ T6146] loop6: detected capacity change from 0 to 2048 [ 75.462696][ T6146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.488666][ T4188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.540682][ T6152] netlink: 16 bytes leftover after parsing attributes in process `syz.6.827'. [ 75.549753][ T6152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.557398][ T6152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.565589][ T6152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.573193][ T6152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.659740][ T29] audit: type=1326 audit(1752435398.646:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 75.683202][ T29] audit: type=1326 audit(1752435398.646:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 75.706683][ T29] audit: type=1326 audit(1752435398.646:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 75.730223][ T29] audit: type=1326 audit(1752435398.646:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 75.753584][ T29] audit: type=1326 audit(1752435398.646:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 75.776931][ T29] audit: type=1326 audit(1752435398.646:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 75.800303][ T29] audit: type=1326 audit(1752435398.646:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 75.823596][ T29] audit: type=1326 audit(1752435398.646:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 75.846839][ T29] audit: type=1326 audit(1752435398.646:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6159 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 75.873743][ T6164] loop0: detected capacity change from 0 to 512 [ 75.893721][ T6164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.906595][ T6164] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.921642][ T6164] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 75.936259][ T6164] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 75.948681][ T6164] EXT4-fs (loop0): This should not happen!! Data will be lost [ 75.948681][ T6164] [ 75.958400][ T6164] EXT4-fs (loop0): Total free blocks count 0 [ 75.964478][ T6164] EXT4-fs (loop0): Free/Dirty block details [ 75.970439][ T6164] EXT4-fs (loop0): free_blocks=65280 [ 75.975743][ T6164] EXT4-fs (loop0): dirty_blocks=33 [ 75.980997][ T6164] EXT4-fs (loop0): Block reservation details [ 75.987000][ T6164] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 76.012074][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.218571][ T6182] tipc: Failed to remove unknown binding: 66,1,1/0:3160010577/3160010579 [ 76.219758][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.5.834'. [ 76.228140][ T6182] tipc: Failed to remove unknown binding: 66,1,1/0:3160010577/3160010579 [ 76.244598][ T6182] tipc: Failed to remove unknown binding: 66,1,1/0:3160010577/3160010579 [ 76.329394][ T6192] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 76.337865][ T6192] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 76.483667][ T6213] loop0: detected capacity change from 0 to 128 [ 76.499071][ T6213] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.513785][ T6213] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.599776][ T6229] netlink: 'syz.1.857': attribute type 7 has an invalid length. [ 76.607529][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 76.625840][ T6232] loop3: detected capacity change from 0 to 1024 [ 76.642195][ T6234] netlink: 'syz.5.859': attribute type 4 has an invalid length. [ 76.665198][ T6234] netlink: 'syz.5.859': attribute type 4 has an invalid length. [ 77.272026][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.887'. [ 77.325473][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.360091][ T6298] vlan2: entered allmulticast mode [ 77.365460][ T6298] macvtap0: entered allmulticast mode [ 77.469006][ T6317] netlink: 'syz.1.899': attribute type 4 has an invalid length. [ 77.479395][ T6317] netlink: 'syz.1.899': attribute type 4 has an invalid length. [ 77.730177][ T6332] netlink: 32 bytes leftover after parsing attributes in process `syz.5.905'. [ 77.884979][ T6343] lo speed is unknown, defaulting to 1000 [ 77.891603][ T6343] lo speed is unknown, defaulting to 1000 [ 77.898196][ T6343] lo speed is unknown, defaulting to 1000 [ 77.904805][ T6343] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.912527][ T6343] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 77.928200][ T6343] lo speed is unknown, defaulting to 1000 [ 77.934756][ T6343] lo speed is unknown, defaulting to 1000 [ 77.942579][ T6343] lo speed is unknown, defaulting to 1000 [ 77.948933][ T6343] lo speed is unknown, defaulting to 1000 [ 77.955075][ T6343] lo speed is unknown, defaulting to 1000 [ 78.061757][ T6353] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.133774][ T6353] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.192423][ T6353] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.253494][ T6353] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.318958][ T6353] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.340066][ T6353] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.379156][ T6353] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.402251][ T6353] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.535583][ T6381] vlan2: entered allmulticast mode [ 78.540947][ T6381] macvtap0: entered allmulticast mode [ 78.546378][ T6381] veth0_macvtap: entered allmulticast mode [ 78.585442][ T6386] lo speed is unknown, defaulting to 1000 [ 78.660325][ T6386] netlink: 'syz.5.930': attribute type 16 has an invalid length. [ 78.668223][ T6386] netlink: 'syz.5.930': attribute type 17 has an invalid length. [ 78.686372][ T6386] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 78.869731][ T6413] netlink: 'syz.5.941': attribute type 1 has an invalid length. [ 78.885055][ T6413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.907382][ T6413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.914796][ T6413] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 78.926052][ T6413] bond2: (slave vti0): Error -95 calling set_mac_address [ 78.939646][ T6397] hub 6-0:1.0: USB hub found [ 78.945505][ T6397] hub 6-0:1.0: 8 ports detected [ 79.096378][ T6436] tipc: Started in network mode [ 79.101366][ T6436] tipc: Node identity ac1414aa, cluster identity 4711 [ 79.108334][ T6436] tipc: Enabled bearer , priority 10 [ 79.208550][ T6451] netlink: 'syz.1.957': attribute type 1 has an invalid length. [ 79.225169][ T6451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.250330][ T6451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.257619][ T6451] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 79.268619][ T6451] bond1: (slave vti0): Error -95 calling set_mac_address [ 79.358100][ T6457] loop6: detected capacity change from 0 to 8192 [ 79.506756][ T6456] hub 6-0:1.0: USB hub found [ 79.520317][ T6456] hub 6-0:1.0: 8 ports detected [ 79.642849][ T6473] netlink: 'syz.3.965': attribute type 1 has an invalid length. [ 79.674083][ T6473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.691316][ T6473] macvlan2: entered promiscuous mode [ 79.696691][ T6473] macvlan2: entered allmulticast mode [ 79.703412][ T6473] bond1: entered promiscuous mode [ 79.708796][ T6473] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 79.721165][ T6473] bond1: left promiscuous mode [ 79.762507][ T6476] lo speed is unknown, defaulting to 1000 [ 79.906441][ T6486] __nla_validate_parse: 3 callbacks suppressed [ 79.906460][ T6486] netlink: 96 bytes leftover after parsing attributes in process `syz.3.970'. [ 79.972715][ T6491] loop0: detected capacity change from 0 to 1024 [ 79.998319][ T6491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.064586][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.110430][ T3390] tipc: Node number set to 2886997162 [ 80.126403][ T6501] netlink: 96 bytes leftover after parsing attributes in process `syz.0.976'. [ 80.238205][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 80.248495][ T6507] netlink: 'syz.1.980': attribute type 7 has an invalid length. [ 80.256381][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 80.273022][ T6505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.281085][ T6505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.425148][ T6503] hub 6-0:1.0: USB hub found [ 80.435543][ T6503] hub 6-0:1.0: 8 ports detected [ 80.443303][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 80.443322][ T29] audit: type=1326 audit(1752435403.436:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 80.502215][ T6524] capability: warning: `syz.6.988' uses deprecated v2 capabilities in a way that may be insecure [ 80.513601][ T29] audit: type=1326 audit(1752435403.436:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 80.536890][ T29] audit: type=1326 audit(1752435403.436:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 80.560211][ T29] audit: type=1326 audit(1752435403.436:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 80.772281][ T29] audit: type=1326 audit(1752435403.766:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6534 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 80.867741][ T29] audit: type=1326 audit(1752435403.766:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6534 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 80.891944][ T29] audit: type=1326 audit(1752435403.766:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6534 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 80.915338][ T29] audit: type=1326 audit(1752435403.786:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6534 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 81.014017][ T29] audit: type=1326 audit(1752435404.006:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.1.998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x0 [ 81.670910][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1013'. [ 82.089566][ T6614] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1026'. [ 82.102423][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 82.111353][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 82.124643][ T6612] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1024'. [ 82.169222][ T29] audit: type=1326 audit(1752435405.156:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.3.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 82.967439][ T6648] bond0: entered promiscuous mode [ 82.973343][ T6648] bond_slave_0: entered promiscuous mode [ 82.979108][ T6648] bond_slave_1: entered promiscuous mode [ 82.986721][ T6648] bond0: left promiscuous mode [ 82.991587][ T6648] bond_slave_0: left promiscuous mode [ 82.997103][ T6648] bond_slave_1: left promiscuous mode [ 83.386315][ T6671] netlink: 'syz.3.1049': attribute type 1 has an invalid length. [ 83.426278][ T6671] bond2: (slave bridge4): Enslaving as a backup interface with an up link [ 83.442618][ T6674] netlink: 'syz.0.1051': attribute type 4 has an invalid length. [ 83.453089][ T6674] netlink: 'syz.0.1051': attribute type 4 has an invalid length. [ 83.523941][ T6687] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1053'. [ 83.850331][ T6700] loop6: detected capacity change from 0 to 1024 [ 83.878296][ T6700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.901177][ T6700] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.934287][ T4188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.565926][ T6750] uprobe: syz.0.1083:6750 failed to unregister, leaking uprobe [ 84.691781][ T6749] uprobe: syz.0.1083:6749 failed to unregister, leaking uprobe [ 84.726193][ T6760] netlink: 'syz.6.1087': attribute type 13 has an invalid length. [ 84.840920][ T6760] veth0_macvtap: left allmulticast mode [ 84.861818][ T6760] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.870306][ T6760] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.878876][ T6760] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.887275][ T6760] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.912821][ T3388] lo speed is unknown, defaulting to 1000 [ 84.918726][ T3388] syz0: Port: 1 Link DOWN [ 85.147774][ T6793] __nla_validate_parse: 2 callbacks suppressed [ 85.147792][ T6793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1103'. [ 85.367160][ T6808] lo speed is unknown, defaulting to 1000 [ 85.415615][ T6815] loop6: detected capacity change from 0 to 2048 [ 85.454865][ T6819] netlink: 'syz.3.1114': attribute type 2 has an invalid length. [ 85.462806][ T6819] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 85.470640][ T6819] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1114'. [ 85.486769][ T6815] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.578134][ T4188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.638668][ T6836] loop6: detected capacity change from 0 to 512 [ 85.674369][ T6836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.709032][ T6836] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.815763][ T6852] ÿÿÿÿÿÿ: renamed from vlan1 [ 85.943184][ T4188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.108555][ T6861] loop6: detected capacity change from 0 to 1024 [ 86.173363][ T6861] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz.6.1130: casefold flag without casefold feature [ 86.207338][ T6861] EXT4-fs (loop6): get root inode failed [ 86.213764][ T6861] EXT4-fs (loop6): mount failed [ 86.237997][ T6873] tipc: Started in network mode [ 86.243655][ T6873] tipc: Node identity ac14140f, cluster identity 4711 [ 86.265056][ T6873] tipc: New replicast peer: 255.255.255.255 [ 86.271353][ T6873] tipc: Enabled bearer , priority 10 [ 86.329996][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1135'. [ 86.340877][ T6878] bond0: (slave bond_slave_1): Releasing backup interface [ 86.436741][ T6889] loop0: detected capacity change from 0 to 128 [ 86.454100][ T6889] EXT4-fs: Ignoring removed nobh option [ 86.481958][ T6886] loop3: detected capacity change from 0 to 8192 [ 86.489027][ T6889] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.539343][ T6889] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.581434][ T6901] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1144'. [ 86.596610][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 86.596627][ T29] audit: type=1400 audit(1752435409.586:986): avc: denied { create } for pid=6888 comm="syz.0.1141" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.655548][ T29] audit: type=1400 audit(1752435409.646:987): avc: denied { setattr } for pid=6888 comm="syz.0.1141" path="/200/mnt/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.682449][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.746432][ T6908] lo speed is unknown, defaulting to 1000 [ 86.903724][ T6918] loop0: detected capacity change from 0 to 128 [ 86.959054][ T6918] bio_check_eod: 123 callbacks suppressed [ 86.959069][ T6918] syz.0.1161: attempt to access beyond end of device [ 86.959069][ T6918] loop0: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 86.986017][ T6918] syz.0.1161: attempt to access beyond end of device [ 86.986017][ T6918] loop0: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 87.000445][ T6918] syz.0.1161: attempt to access beyond end of device [ 87.000445][ T6918] loop0: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 87.014535][ T6918] buffer_io_error: 8 callbacks suppressed [ 87.014549][ T6918] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 87.031630][ T6918] syz.0.1161: attempt to access beyond end of device [ 87.031630][ T6918] loop0: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 87.045845][ T6918] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 87.055796][ T6918] syz.0.1161: attempt to access beyond end of device [ 87.055796][ T6918] loop0: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 87.069267][ T6918] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 87.084770][ T6918] syz.0.1161: attempt to access beyond end of device [ 87.084770][ T6918] loop0: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 87.098310][ T6918] Buffer I/O error on dev loop0, logical block 145, lost async page write [ 87.157184][ T29] audit: type=1326 audit(1752435410.136:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 87.181468][ T29] audit: type=1326 audit(1752435410.136:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 87.190682][ T6918] syz.0.1161: attempt to access beyond end of device [ 87.190682][ T6918] loop0: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 87.204941][ T29] audit: type=1326 audit(1752435410.136:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6f05e8d197 code=0x7ffc0000 [ 87.218284][ T6918] Buffer I/O error on dev loop0, logical block 146, lost async page write [ 87.251748][ T29] audit: type=1326 audit(1752435410.136:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 87.262267][ T6918] syz.0.1161: attempt to access beyond end of device [ 87.262267][ T6918] loop0: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 87.275867][ T29] audit: type=1326 audit(1752435410.136:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 87.288552][ T6918] Buffer I/O error on dev loop0, logical block 147, lost async page write [ 87.312808][ T29] audit: type=1326 audit(1752435410.136:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 87.321070][ T3389] tipc: Node number set to 2886997007 [ 87.344601][ T29] audit: type=1326 audit(1752435410.136:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 87.355852][ T6918] syz.0.1161: attempt to access beyond end of device [ 87.355852][ T6918] loop0: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 87.373659][ T29] audit: type=1326 audit(1752435410.136:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 87.386270][ T6918] Buffer I/O error on dev loop0, logical block 156, lost async page write [ 87.438663][ T6918] syz.0.1161: attempt to access beyond end of device [ 87.438663][ T6918] loop0: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 87.452232][ T6918] Buffer I/O error on dev loop0, logical block 157, lost async page write [ 87.475102][ T6918] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 87.484626][ T6918] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 87.631816][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.639299][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.647469][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.654976][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.662414][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.669841][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.678114][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.685575][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.693042][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.700639][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.709435][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.716935][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.730046][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.738303][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.745775][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.753321][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.761602][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.769102][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.776565][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.784059][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.792245][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.799727][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.803536][ T6955] netlink: 'syz.1.1168': attribute type 4 has an invalid length. [ 87.807192][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.823144][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.830585][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.837997][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 87.849996][ T3405] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz1] on syz0 [ 87.853992][ T6956] netlink: 'syz.3.1169': attribute type 10 has an invalid length. [ 87.978468][ T6962] fido_id[6962]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.126870][ T6985] loop3: detected capacity change from 0 to 512 [ 88.545693][ T7009] pim6reg: entered allmulticast mode [ 88.553579][ T7009] pim6reg: left allmulticast mode [ 88.652595][ T7012] lo speed is unknown, defaulting to 1000 [ 89.014319][ T3389] IPVS: starting estimator thread 0... [ 89.033387][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 89.110437][ T7032] IPVS: using max 2400 ests per chain, 120000 per kthread [ 89.266708][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1205'. [ 89.290084][ T7046] netlink: 'syz.5.1205': attribute type 10 has an invalid length. [ 89.303024][ T7046] team0 (unregistering): Port device team_slave_0 removed [ 89.312510][ T7046] team0 (unregistering): Port device team_slave_1 removed [ 89.409702][ T3405] IPVS: starting estimator thread 0... [ 89.432668][ T7062] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.1210'. [ 89.500477][ T7059] IPVS: using max 2304 ests per chain, 115200 per kthread [ 89.657169][ T7079] lo speed is unknown, defaulting to 1000 [ 89.772468][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 89.781892][ T7087] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 89.924484][ T7098] bridge: RTM_NEWNEIGH with invalid ether address [ 90.226836][ T7106] Set syz1 is full, maxelem 65536 reached [ 90.446843][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1239'. [ 90.456373][ T7127] netlink: 'syz.5.1239': attribute type 30 has an invalid length. [ 90.466878][ T7127] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.475211][ T7127] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.484443][ T7127] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.492801][ T7127] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.502401][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1239'. [ 90.511419][ T7127] netlink: 'syz.5.1239': attribute type 30 has an invalid length. [ 91.483778][ T7235] lo speed is unknown, defaulting to 1000 [ 91.515928][ T7235] netlink: 'syz.1.1287': attribute type 16 has an invalid length. [ 91.523864][ T7235] netlink: 'syz.1.1287': attribute type 17 has an invalid length. [ 91.537867][ T7235] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 91.562251][ T7240] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1289'. [ 92.013729][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1299'. [ 92.042466][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1301'. [ 92.075344][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 92.075428][ T29] audit: type=1400 audit(1752435415.066:1150): avc: denied { firmware_load } for pid=7263 comm="syz.5.1301" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 92.157310][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 92.181802][ T7273] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.198159][ T7273] macvlan2: entered promiscuous mode [ 92.203611][ T7273] macvlan2: entered allmulticast mode [ 92.210296][ T7273] bond2: entered promiscuous mode [ 92.216697][ T7273] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.229336][ T7273] bond2: left promiscuous mode [ 92.241872][ T29] audit: type=1326 audit(1752435415.226:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 92.265389][ T29] audit: type=1326 audit(1752435415.226:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 92.289070][ T29] audit: type=1326 audit(1752435415.226:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 92.312579][ T29] audit: type=1326 audit(1752435415.226:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 92.336206][ T29] audit: type=1326 audit(1752435415.226:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 92.359750][ T29] audit: type=1326 audit(1752435415.226:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 92.383386][ T29] audit: type=1326 audit(1752435415.236:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 92.406857][ T29] audit: type=1326 audit(1752435415.236:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 92.439924][ T29] audit: type=1326 audit(1752435415.236:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 92.740830][ T7303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7303 comm=syz.1.1317 [ 92.873848][ T7321] loop3: detected capacity change from 0 to 512 [ 92.920632][ T7324] netlink: 'syz.3.1327': attribute type 7 has an invalid length. [ 92.928437][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 92.997855][ T7329] tipc: Started in network mode [ 93.002847][ T7329] tipc: Node identity ac14140f, cluster identity 4711 [ 93.009889][ T7329] tipc: New replicast peer: 0.0.255.255 [ 93.015666][ T7329] tipc: Enabled bearer , priority 10 [ 93.664536][ T7368] netlink: 'syz.0.1346': attribute type 1 has an invalid length. [ 93.694599][ T7366] loop6: detected capacity change from 0 to 8192 [ 93.780188][ T7371] loop6: detected capacity change from 0 to 1024 [ 93.784059][ T7371] EXT4-fs: Ignoring removed nobh option [ 93.784084][ T7371] EXT4-fs: Ignoring removed bh option [ 93.784165][ T7371] ext4: Unknown parameter 'fsuuid' [ 94.007330][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1350'. [ 94.007680][ T7382] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1350'. [ 94.038319][ T7376] loop0: detected capacity change from 0 to 8192 [ 94.130856][ T9] tipc: Node number set to 2886997007 [ 94.213236][ T7393] xt_CT: No such helper "pptp" [ 94.281707][ T7404] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1361'. [ 94.281732][ T7404] netem: unknown loss type 0 [ 94.281743][ T7404] netem: change failed [ 94.357864][ T7411] 8021q: adding VLAN 0 to HW filter on device bond3 [ 94.373459][ T7411] macvlan2: entered promiscuous mode [ 94.373480][ T7411] macvlan2: entered allmulticast mode [ 94.374534][ T7411] bond3: entered promiscuous mode [ 94.374714][ T7411] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.379775][ T7411] bond3: left promiscuous mode [ 94.396344][ T7414] loop0: detected capacity change from 0 to 2048 [ 94.421386][ T7414] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.456827][ T7414] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 94.937799][ T7453] xt_CT: No such helper "pptp" [ 94.971912][ T7457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.988798][ T7457] macvlan2: entered promiscuous mode [ 94.994310][ T7457] macvlan2: entered allmulticast mode [ 95.001385][ T7457] bond1: entered promiscuous mode [ 95.006820][ T7457] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 95.015064][ T7457] bond1: left promiscuous mode [ 95.029749][ T7460] netlink: 'syz.1.1382': attribute type 4 has an invalid length. [ 96.458091][ T7524] netlink: 'syz.6.1412': attribute type 10 has an invalid length. [ 97.472433][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 97.472449][ T29] audit: type=1326 audit(1752435420.466:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 97.517612][ T29] audit: type=1326 audit(1752435420.496:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 97.541260][ T29] audit: type=1326 audit(1752435420.496:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 97.564792][ T29] audit: type=1326 audit(1752435420.496:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 97.638828][ T7551] loop0: detected capacity change from 0 to 1024 [ 97.708594][ T7551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.736036][ T7556] netlink: 'syz.1.1426': attribute type 10 has an invalid length. [ 97.748962][ T7551] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #14: comm syz.0.1424: attempt to clear invalid blocks 1886221359 len 1 [ 97.764276][ T29] audit: type=1400 audit(1752435420.736:1280): avc: denied { setattr } for pid=7550 comm="syz.0.1424" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 97.800279][ T7551] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #14: comm syz.0.1424: invalid indirect mapped block 262147 (level 1) [ 97.821294][ T7551] EXT4-fs error (device loop0): ext4_mb_clear_bb:6420: comm syz.0.1424: Freeing blocks in system zone - Block = 0, count = 16 [ 97.854184][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.898028][ T29] audit: type=1400 audit(1752435420.886:1281): avc: denied { getopt } for pid=7564 comm="syz.3.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.969979][ T7576] netlink: 'syz.3.1433': attribute type 10 has an invalid length. [ 97.978320][ T7576] geneve1: entered promiscuous mode [ 97.984756][ T7576] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.993057][ T7576] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.001313][ T7576] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.009596][ T7576] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.020628][ T29] audit: type=1326 audit(1752435421.006:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 98.021762][ T7576] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 98.046833][ T7579] __nla_validate_parse: 5 callbacks suppressed [ 98.046853][ T7579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1434'. [ 98.068465][ T29] audit: type=1326 audit(1752435421.046:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 98.092946][ T29] audit: type=1326 audit(1752435421.046:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 98.116500][ T29] audit: type=1326 audit(1752435421.046:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 98.664931][ T7625] loop3: detected capacity change from 0 to 128 [ 98.743778][ T7629] loop3: detected capacity change from 0 to 512 [ 98.755032][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 98.764057][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 98.773626][ T7629] EXT4-fs: Ignoring removed bh option [ 98.889599][ T7643] loop0: detected capacity change from 0 to 1024 [ 98.898525][ T7643] ext4: Unknown parameter 'subj_role' [ 99.041546][ T7655] loop3: detected capacity change from 0 to 1024 [ 99.304203][ T7691] loop3: detected capacity change from 0 to 1024 [ 99.314317][ T7691] EXT4-fs: Ignoring removed nobh option [ 99.319980][ T7691] EXT4-fs: Ignoring removed bh option [ 99.395759][ T7694] loop0: detected capacity change from 0 to 128 [ 99.748018][ T7714] ip6gre1: entered allmulticast mode [ 99.974599][ T7734] loop6: detected capacity change from 0 to 512 [ 100.003017][ T7734] EXT4-fs: Ignoring removed bh option [ 100.032966][ T7734] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.042260][ T7734] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 100.061953][ T7734] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 100.083567][ T7734] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 100.212423][ T7734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.288219][ T4188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.301839][ T7742] lo speed is unknown, defaulting to 1000 [ 100.746412][ T7767] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1521'. [ 100.845422][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 100.962219][ T7790] atomic_op ffff88811914cd28 conn xmit_atomic 0000000000000000 [ 101.132171][ T7807] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1539'. [ 101.141819][ T7807] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1539'. [ 101.150919][ T7807] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1539'. [ 101.217382][ T7811] loop0: detected capacity change from 0 to 1024 [ 101.242416][ T7811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.274184][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.380026][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.400953][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.679998][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1552'. [ 101.693158][ T7842] vlan2: entered promiscuous mode [ 101.698330][ T7842] syz_tun: entered promiscuous mode [ 101.951655][ T7859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.974784][ T7859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.984266][ T7862] netlink: 'syz.5.1562': attribute type 7 has an invalid length. [ 101.992130][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1562'. [ 102.363432][ T7900] loop0: detected capacity change from 0 to 8192 [ 102.406572][ T3311] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 102.414541][ T3311] FAT-fs (loop0): Filesystem has been set read-only [ 102.458912][ T7908] loop0: detected capacity change from 0 to 1024 [ 102.469224][ T7908] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.487118][ T7908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.591170][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.790168][ T7934] loop3: detected capacity change from 0 to 164 [ 102.864570][ T7937] 9pnet_fd: p9_fd_create_tcp (7937): problem connecting socket to 127.0.0.1 [ 103.253514][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 103.253532][ T29] audit: type=1400 audit(1752435426.246:1472): avc: denied { execute } for pid=7965 comm="syz.0.1605" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=19699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 103.512488][ T7994] __nla_validate_parse: 4 callbacks suppressed [ 103.512503][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1617'. [ 103.531470][ T7994] vlan2: entered promiscuous mode [ 103.536577][ T7994] syz_tun: entered promiscuous mode [ 103.660597][ T29] audit: type=1326 audit(1752435426.646:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.6.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 103.684875][ T29] audit: type=1326 audit(1752435426.646:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.6.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 103.708244][ T29] audit: type=1326 audit(1752435426.646:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.6.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 104.176098][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1633'. [ 104.319547][ T8043] netlink: 'syz.3.1637': attribute type 10 has an invalid length. [ 104.327761][ T8043] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1637'. [ 104.343574][ T8043] dummy0: entered promiscuous mode [ 104.350589][ T8043] bridge0: port 3(dummy0) entered blocking state [ 104.357081][ T8043] bridge0: port 3(dummy0) entered disabled state [ 104.363959][ T8043] dummy0: entered allmulticast mode [ 104.400483][ T29] audit: type=1400 audit(1752435427.386:1476): avc: denied { watch watch_reads } for pid=8048 comm="syz.3.1640" path="/326/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 104.572601][ T8065] syz_tun: entered allmulticast mode [ 104.582728][ T8064] syz_tun: left allmulticast mode [ 105.254198][ T29] audit: type=1326 audit(1752435428.246:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8086 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 105.278400][ T29] audit: type=1326 audit(1752435428.246:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8086 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 105.310551][ T29] audit: type=1326 audit(1752435428.296:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8086 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 105.334952][ T29] audit: type=1326 audit(1752435428.296:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8086 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 105.358751][ T29] audit: type=1326 audit(1752435428.296:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8086 comm="syz.1.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145e9ae929 code=0x7ffc0000 [ 105.392483][ T8091] loop3: detected capacity change from 0 to 128 [ 105.578250][ T8105] netlink: 'syz.1.1664': attribute type 39 has an invalid length. [ 105.706325][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1669'. [ 105.755207][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'. [ 105.811678][ T8132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8132 comm=syz.3.1676 [ 105.876097][ T8136] lo speed is unknown, defaulting to 1000 [ 105.935457][ T8148] netlink: 'syz.3.1692': attribute type 7 has an invalid length. [ 105.943288][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1692'. [ 106.180973][ T8176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1688'. [ 106.216508][ T8180] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.292997][ T8180] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.391808][ T8180] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.441745][ T8180] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.507082][ T8180] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.518752][ T8180] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.530509][ T8180] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.542322][ T8180] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.699083][ T8202] loop3: detected capacity change from 0 to 736 [ 106.756471][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1710'. [ 106.768552][ T8208] syz_tun: entered allmulticast mode [ 106.775251][ T8207] syz_tun: left allmulticast mode [ 106.962320][ T8217] lo speed is unknown, defaulting to 1000 [ 107.238904][ T8242] lo speed is unknown, defaulting to 1000 [ 107.351572][ T8252] netlink: 'syz.5.1727': attribute type 10 has an invalid length. [ 107.369105][ T8252] netlink: 'syz.5.1727': attribute type 10 has an invalid length. [ 107.378289][ T8252] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 107.399967][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.421508][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.476377][ T8258] lo speed is unknown, defaulting to 1000 [ 107.578880][ T8275] syz_tun: entered allmulticast mode [ 107.588226][ T8273] syz_tun: left allmulticast mode [ 107.725554][ T8288] netlink: 'syz.3.1741': attribute type 10 has an invalid length. [ 107.744164][ T8288] dummy0: left allmulticast mode [ 107.755693][ T8288] dummy0: left promiscuous mode [ 107.760869][ T8288] bridge0: port 3(dummy0) entered disabled state [ 107.773681][ T8288] team0: Port device dummy0 added [ 107.788819][ T8291] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 107.791005][ T8288] netlink: 'syz.3.1741': attribute type 10 has an invalid length. [ 107.805397][ T8292] loop0: detected capacity change from 0 to 764 [ 107.824697][ T8288] team0: Port device dummy0 removed [ 107.832582][ T8288] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 107.842051][ T8294] tipc: Started in network mode [ 107.846957][ T8294] tipc: Node identity ac14140f, cluster identity 4711 [ 107.882059][ T8294] tipc: New replicast peer: 10.1.1.2 [ 107.887468][ T8294] tipc: Enabled bearer , priority 10 [ 107.988653][ T8308] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1750'. [ 107.997968][ T8302] lo speed is unknown, defaulting to 1000 [ 108.045146][ T8312] loop6: detected capacity change from 0 to 736 [ 108.314663][ T8333] lo speed is unknown, defaulting to 1000 [ 108.347283][ T8335] netlink: 'syz.6.1763': attribute type 4 has an invalid length. [ 108.370001][ T8339] loop0: detected capacity change from 0 to 256 [ 108.405474][ T8343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1766'. [ 108.472649][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 108.472667][ T29] audit: type=1326 audit(1752435431.466:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8349 comm="syz.6.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 108.503930][ T29] audit: type=1326 audit(1752435431.466:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8349 comm="syz.6.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 108.527530][ T29] audit: type=1326 audit(1752435431.466:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8349 comm="syz.6.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 108.551781][ T29] audit: type=1326 audit(1752435431.466:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8349 comm="syz.6.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 108.575320][ T29] audit: type=1326 audit(1752435431.466:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8349 comm="syz.6.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 108.599528][ T29] audit: type=1326 audit(1752435431.466:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8349 comm="syz.6.1769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x0 [ 108.645782][ T8357] loop0: detected capacity change from 0 to 128 [ 108.667967][ T8357] netlink: 'syz.0.1770': attribute type 39 has an invalid length. [ 108.705088][ T8363] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 108.809414][ T29] audit: type=1400 audit(1752435431.796:1619): avc: denied { ioctl } for pid=8370 comm="syz.0.1779" path="socket:[20798]" dev="sockfs" ino=20798 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.011050][ T3410] tipc: Node number set to 2886997007 [ 109.040258][ T8381] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1782'. [ 109.231076][ T8404] netlink: 'syz.5.1790': attribute type 39 has an invalid length. [ 109.454875][ T8415] tipc: New replicast peer: 10.1.1.2 [ 109.460291][ T8415] tipc: Enabled bearer , priority 10 [ 109.590943][ T29] audit: type=1400 audit(1752435432.566:1620): avc: denied { connect } for pid=8425 comm="syz.5.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.750325][ T8449] loop6: detected capacity change from 0 to 1024 [ 109.770916][ T8449] EXT4-fs: Ignoring removed nobh option [ 109.776633][ T8449] EXT4-fs: Ignoring removed bh option [ 109.823426][ T8449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.867411][ T29] audit: type=1400 audit(1752435432.856:1621): avc: denied { map } for pid=8448 comm="syz.6.1813" path="/234/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.891355][ T29] audit: type=1400 audit(1752435432.856:1622): avc: denied { execute } for pid=8448 comm="syz.6.1813" path="/234/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.916412][ T8449] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1813: Allocating blocks 385-513 which overlap fs metadata [ 109.986990][ T8460] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 110.000908][ T8449] EXT4-fs (loop6): pa ffff888105147150: logic 16, phys. 129, len 24 [ 110.008958][ T8449] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 110.037041][ T8462] lo speed is unknown, defaulting to 1000 [ 110.062419][ T4188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.100038][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1820'. [ 110.156221][ T8472] wg2: entered promiscuous mode [ 110.161185][ T8472] wg2: entered allmulticast mode [ 110.216094][ T8477] loop0: detected capacity change from 0 to 256 [ 110.242620][ T8477] FAT-fs (loop0): bogus number of FAT sectors [ 110.248853][ T8477] FAT-fs (loop0): Can't find a valid FAT filesystem [ 110.679834][ T8516] lo speed is unknown, defaulting to 1000 [ 110.848551][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'. [ 110.861964][ T8524] vlan2: entered promiscuous mode [ 110.867058][ T8524] syz_tun: entered promiscuous mode [ 111.567736][ T8555] Set syz1 is full, maxelem 65536 reached [ 111.604268][ T8562] loop6: detected capacity change from 0 to 256 [ 111.687039][ T8560] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1858'. [ 111.768876][ T8571] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 111.805730][ T8578] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 111.826988][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 111.888270][ T8587] loop3: detected capacity change from 0 to 128 [ 111.899879][ T8587] EXT4-fs: Ignoring removed nobh option [ 111.981952][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 111.987666][ T8595] lo speed is unknown, defaulting to 1000 [ 112.158396][ T8602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.175704][ T8602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.336575][ T8612] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 112.366490][ T8615] loop3: detected capacity change from 0 to 512 [ 112.470650][ T8621] loop3: detected capacity change from 0 to 128 [ 112.518476][ T8625] openvswitch: netlink: Message has 6 unknown bytes. [ 112.558014][ T8629] loop3: detected capacity change from 0 to 512 [ 112.625409][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1894'. [ 112.773684][ T8648] lo speed is unknown, defaulting to 1000 [ 113.032906][ T8669] loop0: detected capacity change from 0 to 2048 [ 113.060893][ T3776] loop0: p1 < > p2 < > p3 p4 < > [ 113.065964][ T3776] loop0: partition table partially beyond EOD, truncated [ 113.073234][ T3776] loop0: p1 start 2305 is beyond EOD, truncated [ 113.079505][ T3776] loop0: p2 start 4294902784 is beyond EOD, truncated [ 113.086339][ T3776] loop0: p3 start 3724543488 is beyond EOD, truncated [ 113.094754][ T8669] loop0: p1 < > p2 < > p3 p4 < > [ 113.099800][ T8669] loop0: partition table partially beyond EOD, truncated [ 113.106973][ T8669] loop0: p1 start 2305 is beyond EOD, truncated [ 113.113292][ T8669] loop0: p2 start 4294902784 is beyond EOD, truncated [ 113.120069][ T8669] loop0: p3 start 3724543488 is beyond EOD, truncated [ 113.151314][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 113.346328][ T8694] netlink: 'syz.5.1918': attribute type 4 has an invalid length. [ 113.535013][ T8718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1928'. [ 113.547768][ T8720] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1929'. [ 113.556843][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1929'. [ 113.603390][ T8722] lo speed is unknown, defaulting to 1000 [ 113.680161][ T8729] netlink: 'syz.1.1933': attribute type 10 has an invalid length. [ 113.691137][ T8729] team0 (unregistering): Port device team_slave_0 removed [ 113.698928][ T8729] team0 (unregistering): Port device team_slave_1 removed [ 113.737603][ T8732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.747300][ T8732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.921800][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 113.921818][ T29] audit: type=1400 audit(1752435436.916:1702): avc: denied { write } for pid=8735 comm="syz.1.1936" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 113.947627][ T29] audit: type=1400 audit(1752435436.916:1703): avc: denied { read } for pid=8735 comm="syz.1.1936" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 114.319562][ T8760] __nla_validate_parse: 2 callbacks suppressed [ 114.319591][ T8760] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1947'. [ 114.624255][ T8786] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8786 comm=syz.6.1957 [ 114.636851][ T8786] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8786 comm=syz.6.1957 [ 114.665903][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1958'. [ 114.733566][ T8796] loop6: detected capacity change from 0 to 128 [ 114.754434][ T8796] bio_check_eod: 4 callbacks suppressed [ 114.754448][ T8796] syz.6.1962: attempt to access beyond end of device [ 114.754448][ T8796] loop6: rw=0, sector=121, nr_sectors = 120 limit=128 [ 114.784737][ T564] kworker/u8:6: attempt to access beyond end of device [ 114.784737][ T564] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 115.317600][ T8817] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8817 comm=syz.3.1971 [ 115.330203][ T8817] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8817 comm=syz.3.1971 [ 115.487520][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.499505][ T29] audit: type=1326 audit(1752435438.486:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 115.512717][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.523064][ T29] audit: type=1326 audit(1752435438.486:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 115.559921][ T8828] netlink: 'syz.5.1976': attribute type 2 has an invalid length. [ 115.567817][ T8828] netlink: 'syz.5.1976': attribute type 1 has an invalid length. [ 115.568166][ T29] audit: type=1326 audit(1752435438.546:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 115.577201][ T8828] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.1976'. [ 115.599025][ T29] audit: type=1326 audit(1752435438.556:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 115.631834][ T29] audit: type=1326 audit(1752435438.556:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f05e8e929 code=0x7ffc0000 [ 115.696919][ T29] audit: type=1326 audit(1752435438.596:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6f05ec11e5 code=0x7ffc0000 [ 115.742378][ T29] audit: type=1400 audit(1752435438.736:1710): avc: denied { audit_write } for pid=8846 comm="syz.0.1984" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 115.747156][ T8845] lo speed is unknown, defaulting to 1000 [ 115.765230][ T29] audit: type=1107 audit(1752435438.736:1711): pid=8846 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 115.978271][ T8854] netlink: 'syz.3.1986': attribute type 10 has an invalid length. [ 115.991480][ T8854] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 116.004952][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'. [ 116.014729][ T8854] bridge_slave_1: left allmulticast mode [ 116.020420][ T8854] bridge_slave_1: left promiscuous mode [ 116.026231][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.033959][ T8854] bridge_slave_0: left allmulticast mode [ 116.039736][ T8854] bridge_slave_0: left promiscuous mode [ 116.045511][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.064488][ T8854] bond0: (slave bridge0): Releasing backup interface [ 116.203316][ T8880] lo speed is unknown, defaulting to 1000 [ 116.282643][ T8884] loop6: detected capacity change from 0 to 512 [ 116.298977][ T8884] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 116.311850][ T8884] EXT4-fs (loop6): 1 truncate cleaned up [ 116.317841][ T8884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.351446][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2003'. [ 116.418818][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2005'. [ 116.453403][ T4188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.495169][ T8901] netlink: 'syz.1.2007': attribute type 1 has an invalid length. [ 116.508887][ T8901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.520308][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2007'. [ 116.534060][ T8901] bond2 (unregistering): Released all slaves [ 116.577601][ T8906] pim6reg1: entered promiscuous mode [ 116.583366][ T8906] pim6reg1: entered allmulticast mode [ 116.707672][ T8920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2015'. [ 116.824136][ T8937] loop3: detected capacity change from 0 to 1024 [ 116.834011][ T8937] EXT4-fs: Ignoring removed orlov option [ 116.998177][ T8953] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.026825][ T8956] loop3: detected capacity change from 0 to 512 [ 117.041620][ T8953] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.091920][ T8953] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.151663][ T8953] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.198417][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2034'. [ 117.241233][ T8953] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.255472][ T8953] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.267652][ T8953] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.280392][ T8953] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.395270][ T8992] 9pnet_fd: Insufficient options for proto=fd [ 117.410421][ T3389] page_pool_release_retry() stalled pool shutdown: id 45, 1 inflight 60 sec [ 117.489450][ T9003] wg2: entered promiscuous mode [ 117.494572][ T9003] wg2: entered allmulticast mode [ 117.505675][ T9005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2050'. [ 117.597204][ T9050] bridge: RTM_NEWNEIGH with invalid ether address [ 118.286013][ T9127] 9pnet_fd: Insufficient options for proto=fd [ 118.983250][ T9170] loop6: detected capacity change from 0 to 512 [ 119.005967][ T9170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.057363][ T9170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.127147][ T9170] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.140021][ T9170] netlink: 'syz.6.2096': attribute type 27 has an invalid length. [ 119.189131][ T9170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.212685][ T9170] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.252524][ T9170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.314541][ T4188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.361468][ T3389] lo speed is unknown, defaulting to 1000 [ 119.367258][ T3389] syz0: Port: 1 Link ACTIVE [ 119.494116][ T9194] vlan2: entered allmulticast mode [ 119.499382][ T9194] dummy0: entered allmulticast mode [ 119.745848][ T9204] __nla_validate_parse: 5 callbacks suppressed [ 119.745864][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'. [ 119.860924][ T9198] loop3: detected capacity change from 0 to 8192 [ 119.977513][ T9226] loop0: detected capacity change from 0 to 1024 [ 120.034498][ T9230] lo speed is unknown, defaulting to 1000 [ 120.166908][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2126'. [ 120.186283][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 120.186301][ T29] audit: type=1326 audit(1752435443.176:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9242 comm="syz.1.2125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f145e9ae929 code=0x0 [ 121.175629][ T9276] xt_hashlimit: max too large, truncated to 1048576 [ 121.225217][ T9281] wg2: entered promiscuous mode [ 121.230147][ T9281] wg2: entered allmulticast mode [ 121.467043][ T29] audit: type=1326 audit(1752435444.456:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9289 comm="syz.6.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 121.500402][ T29] audit: type=1326 audit(1752435444.456:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9289 comm="syz.6.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 121.525254][ T29] audit: type=1326 audit(1752435444.456:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9289 comm="syz.6.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 121.548753][ T29] audit: type=1326 audit(1752435444.456:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9289 comm="syz.6.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 121.573700][ T29] audit: type=1326 audit(1752435444.486:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9289 comm="syz.6.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c739e929 code=0x7ffc0000 [ 121.579488][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2144'. [ 121.622707][ T9296] lo speed is unknown, defaulting to 1000 [ 121.748700][ T9302] syz_tun: entered allmulticast mode [ 121.756402][ T9301] syz_tun: left allmulticast mode [ 121.906610][ T29] audit: type=1326 audit(1752435444.896:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.5.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 121.941780][ T29] audit: type=1326 audit(1752435444.896:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.5.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 121.966702][ T29] audit: type=1326 audit(1752435444.896:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.5.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 121.990153][ T29] audit: type=1326 audit(1752435444.896:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9320 comm="syz.5.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 122.225147][ T9345] loop3: detected capacity change from 0 to 512 [ 122.251145][ T9345] EXT4-fs: Ignoring removed i_version option [ 122.385036][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2170'. [ 122.394167][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2170'. [ 122.413250][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2172'. [ 122.437667][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2170'. [ 122.446947][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2170'. [ 122.508621][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2170'. [ 122.517665][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2170'. [ 122.540934][ T9369] loop0: detected capacity change from 0 to 2048 [ 122.591278][ T3776] loop0: p1 < > p4 [ 122.595958][ T3776] loop0: p4 size 8388608 extends beyond EOD, truncated [ 122.606510][ T9369] loop0: p1 < > p4 [ 122.612087][ T9369] loop0: p4 size 8388608 extends beyond EOD, truncated [ 122.624465][ T2997] loop0: p1 < > p4 [ 122.637488][ T2997] loop0: p4 size 8388608 extends beyond EOD, truncated [ 122.782915][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 122.784382][ T4165] udevd[4165]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 123.016192][ T9400] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 123.208148][ T9411] lo speed is unknown, defaulting to 1000 [ 123.457240][ T9425] loop0: detected capacity change from 0 to 1024 [ 123.513947][ T9425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.576743][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.980237][ T9444] xt_hashlimit: max too large, truncated to 1048576 [ 124.327706][ T9464] loop3: detected capacity change from 0 to 1024 [ 124.614907][ T9475] loop3: detected capacity change from 0 to 512 [ 124.959970][ T9498] lo speed is unknown, defaulting to 1000 [ 124.977507][ T9501] 9pnet: p9_errstr2errno: server reported unknown error [ 125.065371][ T9509] dummy0: entered allmulticast mode [ 125.072289][ T9509] dummy0: left allmulticast mode [ 125.148557][ T9517] lo speed is unknown, defaulting to 1000 [ 125.239665][ T9528] __nla_validate_parse: 1 callbacks suppressed [ 125.239734][ T9528] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2232'. [ 125.332183][ T9537] loop6: detected capacity change from 0 to 512 [ 125.372863][ T9537] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.388230][ T9537] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.434530][ T4188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.530576][ T9564] lo speed is unknown, defaulting to 1000 [ 126.088092][ T9604] 9pnet: p9_errstr2errno: server reported unknown error [ 126.185225][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 126.185244][ T29] audit: type=1400 audit(1752435449.176:1806): avc: denied { override_creds } for pid=9607 comm="syz.0.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 126.444252][ T29] audit: type=1400 audit(1752435449.436:1807): avc: denied { write } for pid=9634 comm="syz.6.2281" name="kcm" dev="proc" ino=4026533247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 126.600949][ T9644] loop6: detected capacity change from 0 to 4096 [ 126.620605][ T9644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.718647][ T9663] vlan0: entered allmulticast mode [ 126.723988][ T9663] bridge_slave_0: entered allmulticast mode [ 126.764762][ T9665] netlink: 'syz.1.2291': attribute type 27 has an invalid length. [ 126.787877][ T9665] ip6gre1: left allmulticast mode [ 126.984961][ T9672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.008625][ T4188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.035584][ T9672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.122396][ T9681] lo speed is unknown, defaulting to 1000 [ 127.229592][ T9696] lo speed is unknown, defaulting to 1000 [ 127.341491][ T9695] lo speed is unknown, defaulting to 1000 [ 127.441246][ T29] audit: type=1326 audit(1752435450.436:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 127.466287][ T29] audit: type=1326 audit(1752435450.436:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 127.526318][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2309'. [ 127.549739][ T29] audit: type=1326 audit(1752435450.436:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 127.574683][ T29] audit: type=1326 audit(1752435450.436:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 127.598247][ T29] audit: type=1326 audit(1752435450.436:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 127.622051][ T29] audit: type=1326 audit(1752435450.436:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 127.647017][ T29] audit: type=1326 audit(1752435450.436:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 127.671888][ T29] audit: type=1326 audit(1752435450.436:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526dae929 code=0x7ffc0000 [ 127.722807][ T9725] netlink: 'syz.5.2313': attribute type 27 has an invalid length. [ 127.740185][ T9727] loop0: detected capacity change from 0 to 512 [ 127.745399][ T9725] macsec0: left promiscuous mode [ 127.751936][ T9725] bond1: left promiscuous mode [ 127.756768][ T9725] bond1: left allmulticast mode [ 127.765718][ T9725] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.774178][ T9725] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.782715][ T9725] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.791117][ T9725] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.801279][ T9727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.814913][ T9727] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.858297][ T9735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.869453][ T9735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.930017][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.460050][ T9780] loop0: detected capacity change from 0 to 512 [ 128.488170][ T9780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.551163][ T9780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.620171][ T9780] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.655775][ T9780] netlink: 'syz.0.2333': attribute type 27 has an invalid length. [ 128.675341][ T9780] wg2: left promiscuous mode [ 128.680004][ T9780] wg2: left allmulticast mode [ 128.687539][ T9780] ip6gre1: left allmulticast mode [ 128.694886][ T9780] bond1: left promiscuous mode [ 128.699731][ T9780] bond1: left allmulticast mode [ 128.756157][ T9796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.812703][ T9796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.863614][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.987990][ T9795] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2340'. [ 129.223841][ C0] ================================================================== [ 129.231974][ C0] BUG: KCSAN: data-race in do_select / pollwake [ 129.238226][ C0] [ 129.240550][ C0] read to 0xffffc900126f79e0 of 4 bytes by task 9791 on cpu 1: [ 129.248135][ C0] do_select+0xe48/0xf50 [ 129.252402][ C0] core_sys_select+0x3d7/0x6e0 [ 129.257197][ C0] __se_sys_pselect6+0x216/0x280 [ 129.262149][ C0] __x64_sys_pselect6+0x78/0x90 [ 129.267026][ C0] x64_sys_call+0x1caa/0x2fb0 [ 129.271740][ C0] do_syscall_64+0xd2/0x200 [ 129.276268][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.282172][ C0] [ 129.284494][ C0] write to 0xffffc900126f79e0 of 4 bytes by interrupt on cpu 0: [ 129.292121][ C0] pollwake+0xb6/0x100 [ 129.296191][ C0] __wake_up+0x66/0xb0 [ 129.300285][ C0] bpf_ringbuf_notify+0x22/0x30 [ 129.305148][ C0] irq_work_run+0xe2/0x2d0 [ 129.309576][ C0] __sysvec_irq_work+0x22/0x170 [ 129.314426][ C0] sysvec_irq_work+0x66/0x80 [ 129.319020][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 129.323961][ C0] native_apic_msr_write+0x3d/0x60 [ 129.329103][ C0] x2apic_send_IPI_self+0x10/0x20 [ 129.334139][ C0] arch_irq_work_raise+0x46/0x50 [ 129.339090][ C0] __irq_work_queue_local+0x10f/0x2c0 [ 129.344472][ C0] irq_work_queue+0x70/0x100 [ 129.349072][ C0] bpf_ringbuf_submit+0xce/0xf0 [ 129.353934][ C0] bpf_prog_a526332ed0a73e3c+0x4b/0x4f [ 129.359403][ C0] bpf_trace_run2+0x104/0x1c0 [ 129.364083][ C0] __bpf_trace_sys_enter+0x10/0x30 [ 129.369197][ C0] trace_sys_enter+0x86/0x110 [ 129.373880][ C0] syscall_trace_enter+0x13e/0x1e0 [ 129.379003][ C0] do_syscall_64+0xac/0x200 [ 129.383504][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.389398][ C0] [ 129.391721][ C0] value changed: 0x00000001 -> 0x00000000 [ 129.397433][ C0] [ 129.399756][ C0] Reported by Kernel Concurrency Sanitizer on: [ 129.405909][ C0] CPU: 0 UID: 0 PID: 3776 Comm: udevd Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 129.417885][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.427940][ C0] ==================================================================