last executing test programs: 1m23.459431953s ago: executing program 4 (id=3054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x100, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x0) 1m23.395967953s ago: executing program 4 (id=3058): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000e8f4fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000e80)='kmem_cache_free\x00', r1}, 0x18) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1m23.319000344s ago: executing program 4 (id=3061): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, 0x0}]) 1m23.188296986s ago: executing program 4 (id=3063): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m23.187708486s ago: executing program 4 (id=3064): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 1m22.972313078s ago: executing program 4 (id=3072): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x11) 1m22.937671309s ago: executing program 32 (id=3072): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x11) 1m5.557812071s ago: executing program 2 (id=3648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000040c0000002000018008000300020000001400020076657468315f746f5f7465616d00000014000380"], 0x48}}, 0x0) 1m5.520722331s ago: executing program 2 (id=3650): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m5.355062713s ago: executing program 2 (id=3657): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 1m5.332994594s ago: executing program 2 (id=3659): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 1m5.272200524s ago: executing program 2 (id=3661): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0xff, 0x11dc, &(0x7f0000001280)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x400c000) rmdir(&(0x7f0000000080)='./file0\x00') 1m5.012170867s ago: executing program 2 (id=3662): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m4.992130938s ago: executing program 33 (id=3662): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m4.772751041s ago: executing program 0 (id=3674): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x4a) fcntl$setlease(r0, 0x400, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x1300, 0x8d) fcntl$setlease(r0, 0x400, 0x0) 1m4.682643712s ago: executing program 0 (id=3680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) 1m4.643121662s ago: executing program 0 (id=3682): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYBLOB, @ANYRES32=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m4.557104693s ago: executing program 0 (id=3685): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 1m4.527360324s ago: executing program 0 (id=3686): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m4.485470094s ago: executing program 0 (id=3687): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m4.447303114s ago: executing program 34 (id=3687): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 49.19232266s ago: executing program 3 (id=4230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x200000, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 49.161839061s ago: executing program 3 (id=4232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 48.966283643s ago: executing program 3 (id=4234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x8008, 0x10100}, &(0x7f0000000240), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1f33, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) 48.879238924s ago: executing program 3 (id=4238): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0/../file0\x00', 0x580, 0x40) move_mount(r0, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) 48.842250565s ago: executing program 3 (id=4239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff011) 48.016322715s ago: executing program 3 (id=4246): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000f00)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/254, 0xfe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000004100)=""/4096, 0x1000}], 0x1}}], 0x4, 0x58ca02a0, 0x0) 48.016085575s ago: executing program 35 (id=4246): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000f00)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/254, 0xfe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000004100)=""/4096, 0x1000}], 0x1}}], 0x4, 0x58ca02a0, 0x0) 2.276649203s ago: executing program 5 (id=5936): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)='#', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd573", 0xc5}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.231888793s ago: executing program 6 (id=5940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 2.206798834s ago: executing program 6 (id=5942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x2, @loopback, 0x840000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00a312a303000000000080fffffff39a00", "00ff7c00", "bc3a20b10f4ad11e"}, 0x38) close(r0) 2.169071044s ago: executing program 6 (id=5944): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@i_version}, {@data_err_abort}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 2.044184266s ago: executing program 8 (id=5949): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x366b, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sync() 1.796282228s ago: executing program 8 (id=5955): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setlease(r0, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0xa4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84402, 0x20) 1.449835213s ago: executing program 6 (id=5959): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='[', 0x1}], 0x1}, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) listen(r0, 0x101) 1.411417493s ago: executing program 5 (id=5961): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f086dd0f13268b326d400ec6c9fc95f1a6d3820234d49b61fcefa32002fcf76b60bc5ebeed2e4604000000", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x4000004}, 0x8000) 1.103795887s ago: executing program 1 (id=5965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r3 = syz_io_uring_setup(0x3bbd, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x6, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r3, 0x567, 0x72, 0x0, 0x0, 0x0) 1.078055257s ago: executing program 1 (id=5966): syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1432ca, 0x0, 0x0, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r2}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 926.837319ms ago: executing program 1 (id=5967): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 881.13003ms ago: executing program 8 (id=5968): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x100000}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe00000000000000", 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) 787.270761ms ago: executing program 1 (id=5969): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 786.530741ms ago: executing program 7 (id=5970): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1220002, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x18d813, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 746.473031ms ago: executing program 1 (id=5971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 637.546493ms ago: executing program 7 (id=5972): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe0000000) 417.447146ms ago: executing program 1 (id=5973): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 416.895366ms ago: executing program 5 (id=5974): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) 324.258267ms ago: executing program 7 (id=5975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) 256.209837ms ago: executing program 8 (id=5976): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r1, 0x4, 0x7c00) r3 = dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000001060500", @ANYRESOCT=r3], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 144.200929ms ago: executing program 7 (id=5977): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x2, @loopback, 0x840000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00a312a303000000000080fffffff39a00", "00ff7c00", "bc3a20b10f4ad11e"}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) close(r0) 121.567929ms ago: executing program 7 (id=5979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) unshare(0x2040600) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 94.666309ms ago: executing program 5 (id=5980): socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xae, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)) 94.112999ms ago: executing program 7 (id=5981): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) ppoll(&(0x7f0000000080)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 93.759749ms ago: executing program 6 (id=5982): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0xfffffffe) r2 = eventfd2(0x4, 0x80801) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) shutdown(r1, 0x0) 59.08613ms ago: executing program 5 (id=5983): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x8, 0x122c42) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x800}) setns(r1, 0x24020000) setresuid(0x0, 0x0, 0xee00) r3 = syz_clone(0x12000000, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0) kcmp(r3, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 42.08302ms ago: executing program 8 (id=5984): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) pidfd_getfd(r3, r4, 0x0) 9.139991ms ago: executing program 8 (id=5985): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ppoll(&(0x7f00000001c0)=[{r2, 0x601}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0) 2.145451ms ago: executing program 5 (id=5986): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x1000, 0x0, 0xfd, "ffff00"}) syz_open_pts(r0, 0x0) rseq(&(0x7f0000000280), 0x20, 0x0, 0x0) r1 = syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8000000, 0x8000000}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=5987): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) kernel console output (not intermixed with test programs): 4967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.3.3710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e848ae969 code=0x0 [ 128.369947][T12299] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 128.384066][T12299] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 128.398369][T12299] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 128.408050][T12299] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 128.461011][T12238] veth0_vlan: entered promiscuous mode [ 128.477774][T12238] veth1_vlan: entered promiscuous mode [ 128.489675][T12299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.513139][T12299] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.521200][T12238] veth0_macvtap: entered promiscuous mode [ 128.528763][T12238] veth1_macvtap: entered promiscuous mode [ 128.540509][T10477] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.547644][T10477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.564207][T10523] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.571475][T10523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.585038][T12238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.595632][T12238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.605716][T12238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.616200][T12238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.627453][T12238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.643293][T12238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.653876][T12238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.663853][T12238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.674411][T12238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.685618][T12238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.701705][T12238] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.710605][T12238] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.719426][T12238] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.728212][T12238] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.758870][ T29] audit: type=1400 audit(1745559874.569:3145): avc: denied { mounton } for pid=12238 comm="syz-executor" path="/root/syzkaller.PxWnWW/syz-tmp" dev="sda1" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 128.794541][T12299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.827815][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3665'. [ 128.836816][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3665'. [ 128.845934][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3665'. [ 128.880831][T12396] ref_ctr_offset mismatch. inode: 0x17 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 128.967805][T12299] veth0_vlan: entered promiscuous mode [ 128.980363][T12299] veth1_vlan: entered promiscuous mode [ 129.003616][T12299] veth0_macvtap: entered promiscuous mode [ 129.012534][T12299] veth1_macvtap: entered promiscuous mode [ 129.025068][T12299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.035709][T12299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.045791][T12299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.056473][T12299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.066383][T12299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.077015][T12299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.088934][T12299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.091689][T12418] loop6: detected capacity change from 0 to 128 [ 129.097489][T12299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.113131][T12299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.122983][T12299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.133538][T12299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.143544][T12299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.154049][T12299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.166547][T12299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.208309][T12299] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.217154][T12299] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.225979][T12299] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.234755][T12299] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.244755][T12423] syz.6.3721: attempt to access beyond end of device [ 129.244755][T12423] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 129.293704][T12423] syz.6.3721: attempt to access beyond end of device [ 129.293704][T12423] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 129.325329][T12423] syz.6.3721: attempt to access beyond end of device [ 129.325329][T12423] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 129.376065][T12423] syz.6.3721: attempt to access beyond end of device [ 129.376065][T12423] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 129.399391][T12429] loop7: detected capacity change from 0 to 4096 [ 129.409673][T12423] syz.6.3721: attempt to access beyond end of device [ 129.409673][T12423] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 129.424265][T12423] syz.6.3721: attempt to access beyond end of device [ 129.424265][T12423] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 129.438575][T12423] syz.6.3721: attempt to access beyond end of device [ 129.438575][T12423] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 129.452412][T12423] syz.6.3721: attempt to access beyond end of device [ 129.452412][T12423] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 129.466685][T12423] syz.6.3721: attempt to access beyond end of device [ 129.466685][T12423] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 129.480489][T12423] syz.6.3721: attempt to access beyond end of device [ 129.480489][T12423] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 129.494763][T12429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.529517][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.560210][T12434] loop5: detected capacity change from 0 to 512 [ 129.587196][T12434] EXT4-fs: Ignoring removed orlov option [ 129.595750][T12434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.628572][T12434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.654283][T12443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3729'. [ 129.679253][T12434] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.728624][T10818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.836672][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.837201][T12466] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 129.844808][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.865556][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.873747][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.881880][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.890114][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.898284][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.906689][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.914877][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.923232][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.931620][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.939852][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.948147][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.956355][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.964562][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.972720][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.980963][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.989119][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 129.997357][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 130.005636][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 130.013854][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 130.022022][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 130.030532][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 130.038708][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 130.047088][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 130.055275][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 130.063374][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 130.071574][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: unknown main item tag 0x0 [ 130.081218][ T4437] hid-generic 0000:FFFFFFFE:20000000.000C: hidraw0: HID v0.01 Device [syz1] on syz1 [ 130.143191][T12484] sit0: entered allmulticast mode [ 130.169638][T12487] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 130.280705][T12512] SELinux: syz.3.3760 (12512) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 130.316110][ T4437] IPVS: starting estimator thread 0... [ 130.405926][T12513] IPVS: using max 2208 ests per chain, 110400 per kthread [ 130.630512][T12549] loop7: detected capacity change from 0 to 512 [ 130.684652][T12549] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 130.722828][T12561] SELinux: failed to load policy [ 130.814411][T12574] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3790'. [ 130.840732][T12576] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 130.909290][T12586] netlink: 324 bytes leftover after parsing attributes in process `syz.5.3796'. [ 130.937486][T12588] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 131.105693][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.113870][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.124415][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.132683][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.140828][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.149079][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.151116][T12603] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3803'. [ 131.157232][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.157263][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.182856][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.191165][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.199420][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.207685][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.215882][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.224047][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.232176][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.240338][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.248518][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.256705][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.264817][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.273042][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.281232][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.289378][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.297591][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.305723][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.313984][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.322115][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.330344][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.338484][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: unknown main item tag 0x0 [ 131.355364][T12066] hid-generic 0000:FFFFFFFE:20000000.000D: hidraw0: HID v0.01 Device [syz1] on syz1 [ 131.453806][T12613] loop3: detected capacity change from 0 to 256 [ 131.722297][T12633] netlink: 'syz.3.3817': attribute type 10 has an invalid length. [ 131.736663][T12633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.749281][T12633] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 131.846542][T12643] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3820'. [ 131.857183][T12649] ALSA: seq fatal error: cannot create timer (-22) [ 131.860774][T12066] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 131.882047][T12066] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.905765][T12650] loop6: detected capacity change from 0 to 1024 [ 131.912527][T12650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.912553][T12633] syz.3.3817 (12633) used greatest stack depth: 9144 bytes left [ 131.927168][T12650] EXT4-fs: Mount option(s) incompatible with ext2 [ 131.987389][T12657] syzkaller1: entered promiscuous mode [ 131.992971][T12657] syzkaller1: entered allmulticast mode [ 132.040753][T12664] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3832'. [ 132.084513][T12669] loop7: detected capacity change from 0 to 256 [ 132.117974][T12672] loop6: detected capacity change from 0 to 512 [ 132.127517][T12672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.180459][T12683] loop7: detected capacity change from 0 to 128 [ 132.188510][T12672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.189233][T12685] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3840'. [ 132.201574][T12672] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.214483][T12683] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.242289][T12672] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.251878][T12683] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.284583][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 132.284598][ T29] audit: type=1400 audit(1745559878.099:3262): avc: denied { read } for pid=12687 comm="syz.1.3842" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 132.318187][ T29] audit: type=1400 audit(1745559878.109:3263): avc: denied { create } for pid=12689 comm="syz.5.3841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 132.338780][ T29] audit: type=1400 audit(1745559878.109:3264): avc: denied { connect } for pid=12689 comm="syz.5.3841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 132.358814][ T29] audit: type=1400 audit(1745559878.109:3265): avc: denied { bind } for pid=12689 comm="syz.5.3841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 132.379053][ T29] audit: type=1400 audit(1745559878.109:3266): avc: denied { open } for pid=12687 comm="syz.1.3842" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 132.415497][T12683] EXT4-fs error (device loop7): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.7.3839: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 132.460874][T12299] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.488969][ T29] audit: type=1326 audit(1745559878.289:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.6.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed0bce969 code=0x7ffc0000 [ 132.500574][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3848'. [ 132.512675][ T29] audit: type=1326 audit(1745559878.289:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.6.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5ed0bce969 code=0x7ffc0000 [ 132.545773][ T29] audit: type=1326 audit(1745559878.289:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.6.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5ed0bce9a3 code=0x7ffc0000 [ 132.569466][ T29] audit: type=1326 audit(1745559878.289:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.6.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5ed0bce9a3 code=0x7ffc0000 [ 132.592829][ T29] audit: type=1326 audit(1745559878.289:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.6.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed0bce969 code=0x7ffc0000 [ 132.695133][T12717] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3855'. [ 132.704388][T12717] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3855'. [ 132.743885][T12721] pim6reg: entered allmulticast mode [ 132.751990][T12721] pim6reg: left allmulticast mode [ 132.852819][T12725] netlink: 372 bytes leftover after parsing attributes in process `syz.6.3859'. [ 133.009275][T12741] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12741 comm=syz.3.3867 [ 133.286442][T12761] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12761 comm=syz.3.3877 [ 133.299197][T12761] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12761 comm=syz.3.3877 [ 133.897695][T12819] SELinux: ebitmap: truncated map [ 133.919042][T12819] SELinux: failed to load policy [ 134.086246][T12837] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 134.166180][T12849] program syz.3.3918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.186861][T12849] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 134.273462][T12851] SELinux: failed to load policy [ 134.468894][T12871] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 134.606199][T12885] loop7: detected capacity change from 0 to 512 [ 134.613185][T12885] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 134.628608][T12885] EXT4-fs (loop7): 1 truncate cleaned up [ 134.636326][T12885] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.661744][ T3379] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 134.672595][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.686294][ T3379] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.767820][T12906] loop5: detected capacity change from 0 to 128 [ 134.774753][T12906] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 134.790343][T12906] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.804367][T12906] ext2 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.823286][T12906] EXT4-fs error (device loop5): make_indexed_dir:2271: inode #2: block 63: comm syz.5.3945: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=0, rec_len=5, size=1000 fake=1 [ 134.844448][T12906] EXT4-fs warning (device loop5): dx_probe:863: inode #2: comm syz.5.3945: dx entry: limit 0 != root limit 125 [ 134.856503][T12906] EXT4-fs warning (device loop5): dx_probe:936: inode #2: comm syz.5.3945: Corrupt directory, running e2fsck is recommended [ 134.869682][T12906] EXT4-fs error (device loop5): ext4_find_dest_de:2054: inode #2: block 4: comm syz.5.3945: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=0, size=1024 fake=0 [ 134.919314][T10818] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.050417][T12928] lo: entered promiscuous mode [ 135.055366][T12928] lo: entered allmulticast mode [ 135.079102][T12930] IPVS: Error joining to the multicast group [ 135.160251][T12940] loop6: detected capacity change from 0 to 1024 [ 135.168289][T12940] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.179624][T12940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.193083][T12940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.293896][T12960] loop6: detected capacity change from 0 to 128 [ 135.317664][T12959] usb usb6: usbfs: process 12959 (syz.7.3967) did not claim interface 0 before use [ 135.349469][T12966] netlink: 'syz.6.3969': attribute type 5 has an invalid length. [ 135.749321][ T3389] Process accounting resumed [ 136.000478][T13031] loop3: detected capacity change from 0 to 527 [ 136.010086][T13031] EXT4-fs (loop3): failed to parse options in superblock:  [ 136.023302][T13031] EXT4-fs (loop3): Unsupported encryption level 4 [ 136.481887][T13074] loop3: detected capacity change from 0 to 1024 [ 136.507326][T13074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.521433][T13074] EXT4-fs error (device loop3): ext4_lookup:1781: inode #2: comm syz.3.4020: bad inode number: 12 [ 136.532785][T13074] EXT4-fs (loop3): Remounting filesystem read-only [ 136.551795][ T5997] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.570596][T13078] __nla_validate_parse: 10 callbacks suppressed [ 136.570615][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4021'. [ 136.820308][T13110] hub 9-0:1.0: USB hub found [ 136.825093][T13110] hub 9-0:1.0: 8 ports detected [ 136.959621][T13128] ip6tnl1: entered promiscuous mode [ 137.399013][T13161] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4062'. [ 137.631877][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 137.631893][ T29] audit: type=1326 audit(1745559883.439:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.1.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47843ce969 code=0x7ffc0000 [ 137.682594][ T29] audit: type=1326 audit(1745559883.479:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.1.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47843ce969 code=0x7ffc0000 [ 137.706263][ T29] audit: type=1326 audit(1745559883.479:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.1.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47843ce969 code=0x7ffc0000 [ 137.730029][ T29] audit: type=1326 audit(1745559883.479:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.1.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47843ce969 code=0x7ffc0000 [ 137.730403][T13173] Falling back ldisc for ttyS3. [ 137.753752][ T29] audit: type=1326 audit(1745559883.479:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.1.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47843ce969 code=0x7ffc0000 [ 137.753788][ T29] audit: type=1326 audit(1745559883.479:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.1.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47843ce969 code=0x7ffc0000 [ 137.753821][ T29] audit: type=1326 audit(1745559883.479:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.1.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47843ce969 code=0x7ffc0000 [ 137.829714][ T29] audit: type=1326 audit(1745559883.479:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.1.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47843ce969 code=0x7ffc0000 [ 137.853226][ T29] audit: type=1326 audit(1745559883.479:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.1.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47843ce969 code=0x7ffc0000 [ 137.876936][ T29] audit: type=1326 audit(1745559883.479:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.1.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47843ce969 code=0x7ffc0000 [ 137.916571][T13182] loop5: detected capacity change from 0 to 512 [ 137.937159][T13182] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.944056][T13182] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 137.976416][T13182] EXT4-fs (loop5): 1 truncate cleaned up [ 137.982525][T13182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.094311][T10818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.200992][T13197] SELinux: Context system_u:object_r:system_dbusd_var_lib_t:s0 is not valid (left unmapped). [ 138.764927][T13256] ref_ctr_offset mismatch. inode: 0x103b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 138.939037][T13276] loop7: detected capacity change from 0 to 526 [ 138.951120][T13276] EXT4-fs (loop7): failed to parse options in superblock:  [ 138.964120][T13276] EXT4-fs (loop7): Unsupported encryption level 28 [ 139.413785][T13326] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 139.420361][T13326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.427953][T13326] vhci_hcd vhci_hcd.0: Device attached [ 139.439863][T13326] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 139.446459][T13326] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 139.453897][T13326] vhci_hcd vhci_hcd.0: Device attached [ 139.495492][T13326] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 139.502062][T13326] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 139.509740][T13326] vhci_hcd vhci_hcd.0: Device attached [ 139.517478][T13332] vhci_hcd: connection closed [ 139.517615][T10484] vhci_hcd: stop threads [ 139.526761][T10484] vhci_hcd: release socket [ 139.531185][T10484] vhci_hcd: disconnect device [ 139.536429][T13336] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 139.544587][T13327] vhci_hcd: connection closed [ 139.544752][T13330] vhci_hcd: connection closed [ 139.549799][T10484] vhci_hcd: stop threads [ 139.558881][T10484] vhci_hcd: release socket [ 139.563459][T10484] vhci_hcd: disconnect device [ 139.593661][T10484] vhci_hcd: stop threads [ 139.598082][T10484] vhci_hcd: release socket [ 139.602517][T10484] vhci_hcd: disconnect device [ 139.615349][T12066] vhci_hcd: vhci_device speed not set [ 139.627896][T13221] syz.5.4091 (13221) used greatest stack depth: 5952 bytes left [ 139.681438][T13349] netlink: 'syz.5.4143': attribute type 4 has an invalid length. [ 139.689391][T13349] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4143'. [ 139.849941][T13367] C: renamed from team_slave_0 (while UP) [ 139.857504][T13367] netlink: 'syz.3.4151': attribute type 1 has an invalid length. [ 139.865379][T13367] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4151'. [ 139.875699][T13367] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 139.935658][ T3302] block device autoloading is deprecated and will be removed. [ 140.044052][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4162'. [ 140.122652][T13402] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 140.225811][T13388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.234254][T13388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.357543][T13417] IPv4: Oversized IP packet from 127.202.26.0 [ 140.383584][T13419] netlink: 'syz.7.4175': attribute type 1 has an invalid length. [ 140.391987][T13419] netlink: 'syz.7.4175': attribute type 4 has an invalid length. [ 140.399984][T13419] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4175'. [ 140.440820][T13423] openvswitch: netlink: Message has 6 unknown bytes. [ 140.476352][T13425] wireguard0: entered promiscuous mode [ 140.565165][T13433] loop7: detected capacity change from 0 to 128 [ 140.601851][T13437] sd 0:0:1:0: device reset [ 140.877011][T13460] wireguard0: entered promiscuous mode [ 140.977416][T13469] tipc: Started in network mode [ 140.982341][T13469] tipc: Node identity ac14140f, cluster identity 4711 [ 141.006198][T13469] tipc: New replicast peer: 255.255.255.255 [ 141.012363][T13469] tipc: Enabled bearer , priority 10 [ 141.181943][T13505] netlink: 'syz.6.4214': attribute type 4 has an invalid length. [ 142.178278][T12066] tipc: Node number set to 2886997007 [ 142.334076][T13543] SELinux: security_context_str_to_sid () failed with errno=-22 [ 142.730182][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 142.730237][ T29] audit: type=1400 audit(1745559888.539:3675): avc: denied { name_bind } for pid=13564 comm="syz.1.4242" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 142.751390][T13511] syz.6.4216 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 142.772160][T13511] CPU: 1 UID: 0 PID: 13511 Comm: syz.6.4216 Tainted: G W 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 142.772214][T13511] Tainted: [W]=WARN [ 142.772223][T13511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.772240][T13511] Call Trace: [ 142.772247][T13511] [ 142.772256][T13511] __dump_stack+0x1d/0x30 [ 142.772280][T13511] dump_stack_lvl+0xe8/0x140 [ 142.772367][T13511] dump_stack+0x15/0x1b [ 142.772388][T13511] dump_header+0x81/0x220 [ 142.772423][T13511] oom_kill_process+0x334/0x3f0 [ 142.772510][T13511] out_of_memory+0x979/0xb80 [ 142.772534][T13511] ? css_next_descendant_pre+0x138/0x160 [ 142.772575][T13511] mem_cgroup_out_of_memory+0x13d/0x190 [ 142.772631][T13511] try_charge_memcg+0x5e2/0x870 [ 142.772663][T13511] obj_cgroup_charge_pages+0xb7/0x1a0 [ 142.772740][T13511] __memcg_kmem_charge_page+0x9f/0x170 [ 142.772781][T13511] __alloc_frozen_pages_noprof+0x188/0x360 [ 142.772813][T13511] alloc_pages_mpol+0xb3/0x250 [ 142.772857][T13511] alloc_pages_noprof+0x90/0x130 [ 142.772906][T13511] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 142.772956][T13511] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 142.772988][T13511] ? ip_set_alloc+0x1f/0x30 [ 142.773035][T13511] ? ip_set_alloc+0x1f/0x30 [ 142.773064][T13511] ? __kmalloc_cache_noprof+0x189/0x320 [ 142.773100][T13511] ip_set_alloc+0x1f/0x30 [ 142.773123][T13511] hash_netiface_create+0x282/0x740 [ 142.773205][T13511] ? __pfx_hash_netiface_create+0x10/0x10 [ 142.773238][T13511] ip_set_create+0x3c9/0x960 [ 142.773282][T13511] ? __nla_parse+0x40/0x60 [ 142.773314][T13511] nfnetlink_rcv_msg+0x4c3/0x590 [ 142.773414][T13511] netlink_rcv_skb+0x120/0x220 [ 142.773443][T13511] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 142.773467][T13511] nfnetlink_rcv+0x16b/0x1690 [ 142.773492][T13511] ? __kfree_skb+0x109/0x150 [ 142.773528][T13511] ? nlmon_xmit+0x4f/0x60 [ 142.773582][T13511] ? consume_skb+0x49/0x150 [ 142.773629][T13511] ? nlmon_xmit+0x4f/0x60 [ 142.773687][T13511] ? dev_hard_start_xmit+0x39e/0x3d0 [ 142.773746][T13511] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 142.773786][T13511] ? __dev_queue_xmit+0x182/0x1fb0 [ 142.773860][T13511] ? ref_tracker_free+0x37d/0x3e0 [ 142.773895][T13511] ? __netlink_deliver_tap+0x4dc/0x500 [ 142.773932][T13511] netlink_unicast+0x59e/0x670 [ 142.774014][T13511] netlink_sendmsg+0x598/0x6b0 [ 142.774083][T13511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.774124][T13511] __sock_sendmsg+0x142/0x180 [ 142.774154][T13511] ____sys_sendmsg+0x329/0x4d0 [ 142.774232][T13511] ___sys_sendmsg+0x17b/0x1d0 [ 142.774273][T13511] __x64_sys_sendmsg+0xd4/0x160 [ 142.774377][T13511] x64_sys_call+0x2999/0x2fb0 [ 142.774398][T13511] do_syscall_64+0xd0/0x1a0 [ 142.774422][T13511] ? clear_bhb_loop+0x25/0x80 [ 142.774469][T13511] ? clear_bhb_loop+0x25/0x80 [ 142.774495][T13511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.774517][T13511] RIP: 0033:0x7f5ed0bce969 [ 142.774630][T13511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.774655][T13511] RSP: 002b:00007f5ecf237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.774678][T13511] RAX: ffffffffffffffda RBX: 00007f5ed0df5fa0 RCX: 00007f5ed0bce969 [ 142.774693][T13511] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 142.774705][T13511] RBP: 00007f5ed0c50ab1 R08: 0000000000000000 R09: 0000000000000000 [ 142.774717][T13511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.774728][T13511] R13: 0000000000000000 R14: 00007f5ed0df5fa0 R15: 00007ffcca7ffd68 [ 142.774802][T13511] [ 142.774813][T13511] memory: usage 307200kB, limit 307200kB, failcnt 110 [ 143.136587][T13511] memory+swap: usage 307300kB, limit 9007199254740988kB, failcnt 0 [ 143.144515][T13511] kmem: usage 307004kB, limit 9007199254740988kB, failcnt 0 [ 143.151834][T13511] Memory cgroup stats for /syz6: [ 143.152302][T13511] cache 0 [ 143.160485][T13511] rss 184320 [ 143.163713][T13511] shmem 0 [ 143.166703][T13511] mapped_file 0 [ 143.170245][T13511] dirty 0 [ 143.173267][T13511] writeback 0 [ 143.176602][T13511] workingset_refault_anon 1 [ 143.181131][T13511] workingset_refault_file 0 [ 143.185749][T13511] swap 118784 [ 143.189100][T13511] swapcached 0 [ 143.192495][T13511] pgpgin 12362 [ 143.195890][T13511] pgpgout 12317 [ 143.199473][T13511] pgfault 25858 [ 143.202933][T13511] pgmajfault 1 [ 143.206406][T13511] inactive_anon 0 [ 143.210043][T13511] active_anon 0 [ 143.213494][T13511] inactive_file 0 [ 143.217149][T13511] active_file 0 [ 143.220603][T13511] unevictable 184320 [ 143.224501][T13511] hierarchical_memory_limit 314572800 [ 143.229893][T13511] hierarchical_memsw_limit 9223372036854771712 [ 143.236147][T13511] total_cache 0 [ 143.239694][T13511] total_rss 184320 [ 143.243406][T13511] total_shmem 0 [ 143.246976][T13511] total_mapped_file 0 [ 143.251028][T13511] total_dirty 0 [ 143.254553][T13511] total_writeback 0 [ 143.258466][T13511] total_workingset_refault_anon 1 [ 143.263582][T13511] total_workingset_refault_file 0 [ 143.268669][T13511] total_swap 118784 [ 143.272483][T13511] total_swapcached 0 [ 143.276389][T13511] total_pgpgin 12362 [ 143.280390][T13511] total_pgpgout 12317 [ 143.284358][T13511] total_pgfault 25858 [ 143.288370][T13511] total_pgmajfault 1 [ 143.292260][T13511] total_inactive_anon 0 [ 143.296424][T13511] total_active_anon 0 [ 143.300397][T13511] total_inactive_file 0 [ 143.304552][T13511] total_active_file 0 [ 143.308622][T13511] total_unevictable 184320 [ 143.313049][T13511] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4216,pid=13508,uid=0 [ 143.327814][T13511] Memory cgroup out of memory: Killed process 13511 (syz.6.4216) total-vm:95796kB, anon-rss:1064kB, file-rss:22068kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 143.349729][T13572] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4244'. [ 143.433427][T10484] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.443360][T10484] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 143.486224][ T29] audit: type=1400 audit(1745559889.299:3676): avc: denied { setopt } for pid=13577 comm="syz.5.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.526970][T10484] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.535276][ T29] audit: type=1400 audit(1745559889.299:3677): avc: denied { write } for pid=13577 comm="syz.5.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.536859][T10484] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 143.556442][ T29] audit: type=1400 audit(1745559889.329:3678): avc: denied { mounton } for pid=13581 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 143.587959][ T29] audit: type=1400 audit(1745559889.329:3679): avc: denied { read } for pid=13577 comm="syz.5.4248" path="socket:[42392]" dev="sockfs" ino=42392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.611294][ T29] audit: type=1400 audit(1745559889.329:3680): avc: denied { module_request } for pid=13581 comm="syz-executor" kmod="netdev-nr8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 143.642639][ T29] audit: type=1400 audit(1745559889.389:3681): avc: denied { sys_module } for pid=13581 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 143.667268][T13580] netlink: 'syz.7.4249': attribute type 3 has an invalid length. [ 143.675127][T13580] netlink: 'syz.7.4249': attribute type 3 has an invalid length. [ 143.716884][T10484] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.726836][T10484] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 143.827109][T10484] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.836988][T10484] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 143.873441][ T29] audit: type=1400 audit(1745559889.679:3682): avc: denied { create } for pid=13594 comm="syz.7.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 143.897824][ T29] audit: type=1400 audit(1745559889.709:3683): avc: denied { write } for pid=13594 comm="syz.7.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 143.918038][ T29] audit: type=1400 audit(1745559889.709:3684): avc: denied { read } for pid=13594 comm="syz.7.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.016500][T10484] bridge_slave_1: left allmulticast mode [ 144.022211][T10484] bridge_slave_1: left promiscuous mode [ 144.027998][T10484] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.044016][T10484] bridge_slave_0: left allmulticast mode [ 144.049960][T10484] bridge_slave_0: left promiscuous mode [ 144.055667][T10484] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.067267][T10484] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 144.126519][T10484] batman_adv: batadv0: Removing interface: ip6gretap1 [ 144.156264][T10484] bond2 (unregistering): (slave geneve2): Releasing active interface [ 144.197838][T10484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.209796][T10484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.220005][T10484] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 144.233169][T10484] bond0 (unregistering): Released all slaves [ 144.242516][T10484] bond1 (unregistering): Released all slaves [ 144.253573][T10484] bond2 (unregistering): Released all slaves [ 144.312554][T10484] tipc: Disabling bearer [ 144.317942][T10484] tipc: Left network mode [ 144.387815][T13581] chnl_net:caif_netlink_parms(): no params data found [ 144.423253][T10484] hsr_slave_0: left promiscuous mode [ 144.430545][T10484] hsr_slave_1: left promiscuous mode [ 144.437172][T10484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.444684][T10484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.453202][T10484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.460850][T10484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.478413][T10484] veth1_macvtap: left promiscuous mode [ 144.484088][T10484] veth0_macvtap: left promiscuous mode [ 144.490592][T10484] veth1_vlan: left promiscuous mode [ 144.496179][T10484] veth0_vlan: left promiscuous mode [ 144.501788][T13650] netlink: 'syz.6.4274': attribute type 4 has an invalid length. [ 144.510052][T13650] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.4274'. [ 144.581536][T10484] team0 (unregistering): Port device team_slave_1 removed [ 144.591293][T10484] team0 (unregistering): Port device C removed [ 144.656708][T13581] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.663958][T13581] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.672855][T13581] bridge_slave_0: entered allmulticast mode [ 144.679976][T13581] bridge_slave_0: entered promiscuous mode [ 144.687200][T13581] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.694332][T13581] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.701833][T13581] bridge_slave_1: entered allmulticast mode [ 144.708548][T13581] bridge_slave_1: entered promiscuous mode [ 144.736486][T13581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.752865][T13581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.780189][T13581] team0: Port device team_slave_0 added [ 144.797787][T13581] team0: Port device team_slave_1 added [ 144.803882][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4280'. [ 144.813002][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4280'. [ 144.832030][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4280'. [ 144.844208][T13581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.851298][T13581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.877372][T13581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.889196][T13581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.896302][T13581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.922597][T13581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.951763][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4280'. [ 144.960810][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4280'. [ 145.008496][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4280'. [ 145.049075][T13581] hsr_slave_0: entered promiscuous mode [ 145.055221][T13581] hsr_slave_1: entered promiscuous mode [ 145.058435][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4280'. [ 145.070012][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4280'. [ 145.071114][T13581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.086730][T13581] Cannot create hsr debugfs directory [ 145.235409][T13581] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 145.249388][T13581] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 145.270115][T13581] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 145.288845][T13581] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 145.310648][T13681] netlink: 'syz.1.4286': attribute type 30 has an invalid length. [ 145.355805][T13685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13685 comm=syz.5.4288 [ 145.449814][T13581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.486597][T13581] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.518533][T10523] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.525676][T10523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.565874][T10477] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.573074][T10477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.646956][T13720] loop7: detected capacity change from 0 to 512 [ 145.663089][T13720] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 145.684542][T13720] EXT4-fs (loop7): 1 truncate cleaned up [ 145.703301][T13725] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 145.734653][T13720] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.740234][T13581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.811735][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.865846][T13741] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13741 comm=syz.7.4309 [ 145.971655][T13581] veth0_vlan: entered promiscuous mode [ 145.991133][T13581] veth1_vlan: entered promiscuous mode [ 146.041877][T13581] veth0_macvtap: entered promiscuous mode [ 146.056138][T13581] veth1_macvtap: entered promiscuous mode [ 146.072951][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.083597][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.093703][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.104474][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.114601][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.125097][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.144999][T13581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.178784][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.189557][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.199434][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.209919][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.219883][T13581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.230351][T13581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.244516][T13581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.253013][T13581] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.261832][T13581] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.270637][T13581] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.279452][T13581] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.289006][T13765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.329014][T13763] syzkaller0: entered promiscuous mode [ 146.334540][T13763] syzkaller0: entered allmulticast mode [ 146.367328][T13768] 8021q: adding VLAN 0 to HW filter on device team1 [ 146.624288][T13796] loop7: detected capacity change from 0 to 512 [ 146.653042][T13800] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 146.681317][T13796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.701763][T13796] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.726133][T13796] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.4328: corrupted inode contents [ 146.740446][T13810] loop8: detected capacity change from 0 to 1024 [ 146.748699][T13796] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #2: comm syz.7.4328: mark_inode_dirty error [ 146.760588][T13810] EXT4-fs: Ignoring removed orlov option [ 146.766453][T13810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.775340][T13796] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.4328: corrupted inode contents [ 146.798499][T13810] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.820926][T13796] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.4328: mark_inode_dirty error [ 146.840745][T13796] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.4328: corrupted inode contents [ 146.855020][T13796] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #2: comm syz.7.4328: mark_inode_dirty error [ 146.868715][T13796] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.4328: corrupted inode contents [ 146.886895][T13825] serio: Serial port ptm0 [ 146.892014][T13796] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.4328: corrupted inode contents [ 146.904533][T13796] EXT4-fs error (device loop7): add_dirent_to_buf:2155: inode #2: comm syz.7.4328: mark_inode_dirty error [ 146.926718][T13581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.969630][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.052085][T13838] ALSA: seq fatal error: cannot create timer (-22) [ 147.069089][T13843] block device autoloading is deprecated and will be removed. [ 147.501459][T13889] ipip0: entered promiscuous mode [ 147.767498][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 147.767516][ T29] audit: type=1326 audit(1745559893.579:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13906 comm="syz.6.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed0bce969 code=0x7ffc0000 [ 147.835459][ T29] audit: type=1326 audit(1745559893.579:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13906 comm="syz.6.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed0bce969 code=0x7ffc0000 [ 147.838267][T13912] 8021q: adding VLAN 0 to HW filter on device team1 [ 147.859061][ T29] audit: type=1326 audit(1745559893.579:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13906 comm="syz.6.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed0bce969 code=0x7ffc0000 [ 147.859099][ T29] audit: type=1326 audit(1745559893.579:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13906 comm="syz.6.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed0bce969 code=0x7ffc0000 [ 147.912949][ T29] audit: type=1326 audit(1745559893.579:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13906 comm="syz.6.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed0bce969 code=0x7ffc0000 [ 147.936693][ T29] audit: type=1326 audit(1745559893.579:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13906 comm="syz.6.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed0bce969 code=0x7ffc0000 [ 147.960499][ T29] audit: type=1326 audit(1745559893.579:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13906 comm="syz.6.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed0bce969 code=0x7ffc0000 [ 147.984951][ T29] audit: type=1326 audit(1745559893.579:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13906 comm="syz.6.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed0bce969 code=0x7ffc0000 [ 148.008916][ T29] audit: type=1326 audit(1745559893.579:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13906 comm="syz.6.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed0bce969 code=0x7ffc0000 [ 148.032574][ T29] audit: type=1326 audit(1745559893.579:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13906 comm="syz.6.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed0bce969 code=0x7ffc0000 [ 148.264624][T13941] $H: renamed from bond0 (while UP) [ 148.276117][T13941] $H: entered promiscuous mode [ 148.281220][T13941] bond_slave_0: entered promiscuous mode [ 148.287170][T13941] bond_slave_1: entered promiscuous mode [ 148.489353][T13964] __nla_validate_parse: 7 callbacks suppressed [ 148.489375][T13964] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4404'. [ 148.529231][T13968] netlink: 'syz.7.4403': attribute type 3 has an invalid length. [ 148.640482][T13978] atomic_op ffff888110945128 conn xmit_atomic 0000000000000000 [ 149.151720][T14006] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 149.151720][T14006] program syz.8.4420 not setting count and/or reply_len properly [ 149.492702][T14056] netlink: 'syz.7.4443': attribute type 12 has an invalid length. [ 149.621696][T14073] SELinux: security policydb version 18 (MLS) not backwards compatible [ 149.670253][T14073] SELinux: failed to load policy [ 149.709458][T14084] $H: renamed from bond0 [ 149.734521][T14084] $H: entered promiscuous mode [ 149.739915][T14084] bond_slave_0: entered promiscuous mode [ 149.745690][T14084] bond_slave_1: entered promiscuous mode [ 149.765963][T14089] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4457'. [ 149.799918][T14091] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 149.870768][T14097] program syz.8.4463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.886477][T14099] atomic_op ffff888110944128 conn xmit_atomic 0000000000000000 [ 149.938673][T14104] 9pnet: p9_errstr2errno: server reported unknown error @΂( [ 149.985541][T14105] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 150.182152][T14132] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4479'. [ 150.193391][T14132] netlink: 'syz.5.4479': attribute type 5 has an invalid length. [ 150.201249][T14132] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4479'. [ 150.452388][T14117] bond0: entered promiscuous mode [ 150.457576][T14117] bond0: entered allmulticast mode [ 150.475429][T14117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.487264][T14117] bond0 (unregistering): Released all slaves [ 150.519647][T14156] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 150.519647][T14156] program syz.6.4488 not setting count and/or reply_len properly [ 150.656579][T14167] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 150.958982][T14200] hsr0: entered promiscuous mode [ 151.189758][T14194] bond0: entered promiscuous mode [ 151.194956][T14194] bond0: entered allmulticast mode [ 151.245488][T14194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.313230][T14194] bond0 (unregistering): Released all slaves [ 151.346884][T14221] sit0: entered promiscuous mode [ 151.351931][T14221] sit0: left allmulticast mode [ 151.356904][T14221] netlink: 'syz.7.4518': attribute type 1 has an invalid length. [ 151.364638][T14221] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4518'. [ 151.509886][T14227] loop7: detected capacity change from 0 to 512 [ 151.529203][T14227] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 151.577330][T14227] EXT4-fs (loop7): 1 truncate cleaned up [ 151.605653][T14227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.696250][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.850446][T14253] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4532'. [ 151.889547][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4536'. [ 151.929486][T14261] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 151.951922][T14264] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4537'. [ 152.048368][T14275] bond1: entered promiscuous mode [ 152.053447][T14275] bond1: entered allmulticast mode [ 152.070935][T14275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.081788][T14275] bond1 (unregistering): Released all slaves [ 152.186545][T14288] loop7: detected capacity change from 0 to 1024 [ 152.227254][T14288] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.277598][T14300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4552'. [ 152.310420][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.436489][T14315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.524503][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4562'. [ 152.675103][T14332] sd 0:0:1:0: device reset [ 152.824863][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 152.824950][ T29] audit: type=1400 audit(1745559898.629:3882): avc: denied { ioctl } for pid=14341 comm="syz.5.4572" path="socket:[45364]" dev="sockfs" ino=45364 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.860281][T14342] vlan3: entered allmulticast mode [ 152.865544][T14342] bond_slave_0: entered allmulticast mode [ 153.373091][ T29] audit: type=1400 audit(1745559899.159:3883): avc: denied { create } for pid=14365 comm="syz.6.4582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.392997][ T29] audit: type=1400 audit(1745559899.159:3884): avc: denied { bind } for pid=14365 comm="syz.6.4582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.611810][T14383] loop7: detected capacity change from 0 to 128 [ 153.643576][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4589'. [ 153.668300][T14382] 8021q: adding VLAN 0 to HW filter on device team1 [ 153.724700][T14383] bio_check_eod: 102 callbacks suppressed [ 153.724720][T14383] syz.7.4588: attempt to access beyond end of device [ 153.724720][T14383] loop7: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 153.807556][T14383] syz.7.4588: attempt to access beyond end of device [ 153.807556][T14383] loop7: rw=0, sector=97, nr_sectors = 32 limit=128 [ 153.865605][T14383] syz.7.4588: attempt to access beyond end of device [ 153.865605][T14383] loop7: rw=0, sector=145, nr_sectors = 88 limit=128 [ 153.941166][T14396] loop8: detected capacity change from 0 to 512 [ 153.969147][ T29] audit: type=1400 audit(1745559899.779:3885): avc: denied { unmount } for pid=12299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 153.970270][T10492] kworker/u8:38: attempt to access beyond end of device [ 153.970270][T10492] loop7: rw=1, sector=233, nr_sectors = 808 limit=128 [ 153.989463][T14396] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 154.016056][T14402] xt_hashlimit: max too large, truncated to 1048576 [ 154.036490][T14402] Cannot find set identified by id 0 to match [ 154.075306][T14396] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 154.122273][ T29] audit: type=1400 audit(1745559899.929:3886): avc: denied { read } for pid=14412 comm="syz.5.4603" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 154.147833][T14396] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #11: comm syz.8.4596: corrupted inode contents [ 154.219140][T14396] EXT4-fs error (device loop8): ext4_dirty_inode:6103: inode #11: comm syz.8.4596: mark_inode_dirty error [ 154.248711][ T29] audit: type=1400 audit(1745559899.959:3887): avc: denied { open } for pid=14412 comm="syz.5.4603" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 154.272509][ T29] audit: type=1400 audit(1745559899.959:3888): avc: denied { ioctl } for pid=14412 comm="syz.5.4603" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 154.315327][T14396] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4596: invalid indirect mapped block 1 (level 1) [ 154.345254][T14396] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #11: comm syz.8.4596: corrupted inode contents [ 154.369469][T14396] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 154.381360][T14396] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #11: comm syz.8.4596: corrupted inode contents [ 154.396917][T14396] EXT4-fs error (device loop8): ext4_truncate:4255: inode #11: comm syz.8.4596: mark_inode_dirty error [ 154.417868][T14396] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 154.426931][ T29] audit: type=1326 audit(1745559900.229:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14427 comm="syz.5.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192da2e969 code=0x7ffc0000 [ 154.450844][ T29] audit: type=1326 audit(1745559900.229:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14427 comm="syz.5.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f192da2e969 code=0x7ffc0000 [ 154.451383][T14430] atomic_op ffff888112fa0928 conn xmit_atomic 0000000000000000 [ 154.474418][ T29] audit: type=1326 audit(1745559900.229:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14427 comm="syz.5.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192da2e969 code=0x7ffc0000 [ 154.508630][T14396] EXT4-fs (loop8): 1 truncate cleaned up [ 154.514979][T14396] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.589340][T13581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.670515][T14451] pimreg: entered allmulticast mode [ 154.678538][T14451] pimreg: left allmulticast mode [ 154.848157][T14469] can0: slcan on ttyS3. [ 154.955474][T14469] can0 (unregistered): slcan off ttyS3. [ 154.964693][T14469] Falling back ldisc for ttyS3. [ 154.973850][T14481] hub 4-0:1.0: USB hub found [ 154.979211][T14481] hub 4-0:1.0: 8 ports detected [ 155.029934][T14491] xt_hashlimit: size too large, truncated to 1048576 [ 155.045003][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4642'. [ 155.055204][T14490] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.135430][T14493] IPVS: Error joining to the multicast group [ 155.216608][T14490] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.277029][T14490] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.368394][T14490] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.387969][T14525] vlan2: entered allmulticast mode [ 155.393311][T14525] batadv0: entered allmulticast mode [ 155.422473][T14528] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4656'. [ 155.447033][T14490] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.459244][T14490] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.471277][T14490] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.483448][T14490] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.617912][T14538] SELinux: failed to load policy [ 155.671690][T14561] binfmt_misc: register: failed to install interpreter file ./file2 [ 155.715972][T14565] SELinux: syz.7.4673 (14565) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 155.725994][T14569] can0: slcan on ttyS3. [ 155.786214][T14577] loop7: detected capacity change from 0 to 1024 [ 155.795398][T14569] can0 (unregistered): slcan off ttyS3. [ 155.801203][T14569] Falling back ldisc for ttyS3. [ 155.805990][T14577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.833482][T14580] vlan2: entered allmulticast mode [ 155.838701][T14580] batadv0: entered allmulticast mode [ 155.885544][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.920579][T14588] bridge: RTM_NEWNEIGH with invalid ether address [ 155.963134][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4689'. [ 155.973253][T14600] netlink: 'syz.8.4691': attribute type 4 has an invalid length. [ 155.981177][T14600] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4691'. [ 155.995678][T14599] random: crng reseeded on system resumption [ 156.068030][T14600] : renamed from bond0 (while UP) [ 156.269961][T14634] vlan2: entered allmulticast mode [ 156.304487][T14638] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4708'. [ 156.460091][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4718'. [ 156.635889][T14668] bond1: entered promiscuous mode [ 156.640966][T14668] bond1: entered allmulticast mode [ 156.646327][T14668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.659123][T14668] bond1 (unregistering): Released all slaves [ 156.776750][T14676] SELinux: failed to load policy [ 156.796875][T14678] SELinux: security_context_str_to_sid () failed with errno=-22 [ 157.112586][T14710] vlan0: entered allmulticast mode [ 157.305878][T14729] loop7: detected capacity change from 0 to 512 [ 157.358069][T14729] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.388949][T14729] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 157.402593][T14729] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.4747: attempt to clear invalid blocks 2 len 1 [ 157.415788][T14729] EXT4-fs (loop7): Remounting filesystem read-only [ 157.424559][T14729] EXT4-fs (loop7): 1 truncate cleaned up [ 157.431010][T14729] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.470712][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.641816][T14751] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4758'. [ 157.922187][T14780] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 157.930901][T14780] SELinux: failed to load policy [ 157.988518][T14782] netlink: 'syz.5.4773': attribute type 1 has an invalid length. [ 157.998360][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 157.998380][ T29] audit: type=1326 audit(1745559903.709:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.7.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 158.028202][ T29] audit: type=1326 audit(1745559903.709:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.7.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 158.051905][ T29] audit: type=1326 audit(1745559903.709:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.7.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 158.075523][ T29] audit: type=1326 audit(1745559903.709:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.7.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 158.099079][ T29] audit: type=1326 audit(1745559903.709:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.7.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 158.122856][ T29] audit: type=1326 audit(1745559903.709:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.7.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 158.146515][ T29] audit: type=1326 audit(1745559903.709:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.7.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 158.170109][ T29] audit: type=1326 audit(1745559903.709:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.7.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 158.193882][ T29] audit: type=1326 audit(1745559903.709:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.7.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 158.217609][ T29] audit: type=1326 audit(1745559903.709:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14777 comm="syz.7.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 158.247042][T14791] 9pnet: p9_errstr2errno: server reported unknown error [ 158.344005][T14801] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 158.563754][T14823] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 158.927710][T14847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14847 comm=syz.5.4802 [ 159.011347][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4804'. [ 159.259994][T14871] hub 2-0:1.0: USB hub found [ 159.286553][T14871] hub 2-0:1.0: 8 ports detected [ 159.569174][T14901] netem: change failed [ 159.781977][T14915] hub 2-0:1.0: USB hub found [ 159.801863][T14915] hub 2-0:1.0: 8 ports detected [ 159.905660][T14931] No such timeout policy "syz0" [ 160.048951][T14951] netlink: 'syz.6.4852': attribute type 1 has an invalid length. [ 160.070153][T14953] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 160.116268][T14951] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 160.127080][T14951] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 160.138141][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4854'. [ 160.163449][T14951] bond0: (slave wireguard0): making interface the new active one [ 160.230694][T14951] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 160.245431][T14958] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 160.353972][T14973] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4861'. [ 160.363054][T14973] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4861'. [ 160.875716][T15003] Falling back ldisc for ttyS3. [ 161.171756][T15024] gtp0: entered promiscuous mode [ 161.237185][T15029] sd 0:0:1:0: device reset [ 161.681610][T15073] loop7: detected capacity change from 0 to 16384 [ 161.921579][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4913'. [ 161.967720][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4913'. [ 161.986687][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4913'. [ 162.007558][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4913'. [ 162.047267][T15098] hsr0: entered promiscuous mode [ 162.377768][T15124] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4929'. [ 162.562517][T15137] loop7: detected capacity change from 0 to 16384 [ 162.581815][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4936'. [ 162.806422][T15140] I/O error, dev loop7, sector 12032 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 162.816593][T15140] Buffer I/O error on dev loop7, logical block 1504, lost async page write [ 162.825351][T15140] Buffer I/O error on dev loop7, logical block 1505, lost async page write [ 162.834087][T15140] Buffer I/O error on dev loop7, logical block 1506, lost async page write [ 162.842827][T15140] Buffer I/O error on dev loop7, logical block 1507, lost async page write [ 162.851778][T15140] Buffer I/O error on dev loop7, logical block 1508, lost async page write [ 162.860628][T15140] Buffer I/O error on dev loop7, logical block 1509, lost async page write [ 162.869275][T15140] Buffer I/O error on dev loop7, logical block 1510, lost async page write [ 162.877955][T15140] Buffer I/O error on dev loop7, logical block 1511, lost async page write [ 162.886787][T15140] Buffer I/O error on dev loop7, logical block 1512, lost async page write [ 162.895445][T15140] Buffer I/O error on dev loop7, logical block 1513, lost async page write [ 162.907060][T15140] I/O error, dev loop7, sector 13056 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 162.920401][T15140] I/O error, dev loop7, sector 14080 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 162.933954][T15140] I/O error, dev loop7, sector 15104 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 162.946486][T15140] I/O error, dev loop7, sector 16128 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0 [ 162.965894][T15140] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.975105][T15140] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.984382][T15140] loop7: unable to read partition table [ 162.990210][T15140] loop_reread_partitions: partition scan of loop7 ((Aiׯ@ p.[vc5Gת~_;o) failed (rc=-5) [ 163.128939][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 163.128957][ T29] audit: type=1326 audit(1745559908.939:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15156 comm="syz.7.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 163.166130][ T29] audit: type=1326 audit(1745559908.979:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15156 comm="syz.7.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 163.189778][ T29] audit: type=1326 audit(1745559908.979:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15156 comm="syz.7.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 163.213358][ T29] audit: type=1326 audit(1745559908.979:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15156 comm="syz.7.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 163.236952][ T29] audit: type=1326 audit(1745559908.979:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15156 comm="syz.7.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 163.260511][ T29] audit: type=1326 audit(1745559908.979:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15156 comm="syz.7.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 163.470118][ T29] audit: type=1400 audit(1745559909.279:4135): avc: denied { getopt } for pid=15178 comm="syz.5.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.612433][T15197] gretap0: entered promiscuous mode [ 163.618239][T15197] vlan2: entered promiscuous mode [ 163.669385][ T29] audit: type=1400 audit(1745559909.479:4136): avc: denied { create } for pid=15205 comm="syz.7.4967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 163.693084][ T29] audit: type=1400 audit(1745559909.499:4137): avc: denied { bind } for pid=15205 comm="syz.7.4967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 163.712650][ T29] audit: type=1400 audit(1745559909.499:4138): avc: denied { listen } for pid=15205 comm="syz.7.4967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 163.796279][T15216] loop7: detected capacity change from 0 to 16384 [ 164.018403][T15217] I/O error, dev loop7, sector 11776 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 164.032826][T15217] I/O error, dev loop7, sector 12800 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 164.048474][T15217] I/O error, dev loop7, sector 13824 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 164.076891][T15217] loop7: unable to read partition table [ 164.082861][T15217] loop_reread_partitions: partition scan of loop7 ((Aiׯ@ p.[vc5Gת~_;o) failed (rc=-5) [ 164.277395][T15239] __nla_validate_parse: 4 callbacks suppressed [ 164.277413][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4980'. [ 164.447192][T15247] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.486867][T15247] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.525581][T15256] loop7: detected capacity change from 0 to 512 [ 164.547077][T15247] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.560824][T15256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.575334][T15256] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.606459][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.616953][T15247] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.714124][T15247] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.733139][T15247] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.746497][T15247] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.759039][T15247] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.854476][T15288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15288 comm=syz.7.5002 [ 164.867274][T15288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15288 comm=syz.7.5002 [ 164.953836][ T9] kernel write not supported for file /715/attr/exec (pid: 9 comm: kworker/0:0) [ 165.037879][T15312] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.083485][T15322] loop8: detected capacity change from 0 to 512 [ 165.098249][T15312] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.109057][T15322] EXT4-fs (loop8): orphan cleanup on readonly fs [ 165.119690][T15322] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5018: bg 0: block 248: padding at end of block bitmap is not set [ 165.135763][T15322] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5018: Failed to acquire dquot type 1 [ 165.148922][T15322] EXT4-fs (loop8): 1 truncate cleaned up [ 165.158700][T15322] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.161245][T15312] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.198001][T13581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.230261][T15312] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.328406][T15312] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.347496][T15312] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.361118][T15312] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.380439][T15312] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.421981][T15357] sd 0:0:1:0: device reset [ 165.517759][T15370] IPVS: Error connecting to the multicast addr [ 165.547243][T15372] loop7: detected capacity change from 0 to 512 [ 165.579150][T15372] EXT4-fs (loop7): 1 orphan inode deleted [ 165.589937][T15372] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.602955][T10492] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:38: Failed to release dquot type 1 [ 165.614784][T15372] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.680734][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.791534][T15386] loop7: detected capacity change from 0 to 512 [ 165.809406][T15386] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 165.829375][T15386] EXT4-fs (loop7): 1 truncate cleaned up [ 165.835875][T15386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.907518][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.959368][T15395] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 166.175851][T15419] ALSA: seq fatal error: cannot create timer (-19) [ 166.793596][T15485] loop7: detected capacity change from 0 to 2048 [ 166.855802][T15485] loop7: p1 < > p3 [ 166.860228][T15485] loop7: p3 size 134217728 extends beyond EOD, truncated [ 166.946192][T15494] smc: net device bond0 applied user defined pnetid SYZ0 [ 166.957542][T15494] smc: net device bond0 erased user defined pnetid SYZ0 [ 166.974466][T15498] netlink: 'syz.5.5096': attribute type 3 has an invalid length. [ 167.297232][T15538] loop8: detected capacity change from 0 to 2048 [ 167.320608][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5112'. [ 167.357129][T15538] loop8: p1 < > p3 [ 167.361537][T15538] loop8: p3 size 134217728 extends beyond EOD, truncated [ 168.160884][T15569] SELinux: syz.1.5124 (15569) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 168.237306][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 168.237322][ T29] audit: type=1400 audit(1745559914.049:4237): avc: denied { append } for pid=15577 comm="syz.7.5129" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.268991][T15579] loop9: detected capacity change from 0 to 7 [ 168.285894][T15579] buffer_io_error: 1114 callbacks suppressed [ 168.285937][T15579] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.304380][T15579] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.312361][T15579] loop9: unable to read partition table [ 168.320047][T15579] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 168.320047][T15579] U) failed (rc=-5) [ 168.444206][ T29] audit: type=1400 audit(1745559914.249:4238): avc: denied { name_bind } for pid=15595 comm="syz.7.5136" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 168.548207][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5141'. [ 168.552488][T15611] loop7: detected capacity change from 0 to 512 [ 168.557166][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5141'. [ 168.567080][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5141'. [ 168.584942][T15611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.597977][T15611] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.619644][T15613] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 168.680082][T15623] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #18: comm syz.7.5143: corrupted inode contents [ 168.692384][T15623] EXT4-fs (loop7): Remounting filesystem read-only [ 168.699239][T15623] EXT4-fs warning (device loop7): ext4_evict_inode:279: xattr delete (err -30) [ 168.720647][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.774730][ T29] audit: type=1326 audit(1745559914.579:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15630 comm="syz.7.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 168.798494][ T29] audit: type=1326 audit(1745559914.579:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15630 comm="syz.7.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 168.832884][T15633] SELinux: syz.5.5152 (15633) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 168.861969][ T29] audit: type=1326 audit(1745559914.589:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15630 comm="syz.7.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 168.885813][ T29] audit: type=1326 audit(1745559914.589:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15630 comm="syz.7.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 168.909544][ T29] audit: type=1326 audit(1745559914.589:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15630 comm="syz.7.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 168.933205][ T29] audit: type=1326 audit(1745559914.589:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15630 comm="syz.7.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 168.956923][ T29] audit: type=1326 audit(1745559914.589:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15630 comm="syz.7.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 168.980618][ T29] audit: type=1326 audit(1745559914.589:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15630 comm="syz.7.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 169.022086][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5155'. [ 169.108964][T15652] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5161'. [ 169.432826][T15694] : renamed from pim6reg1 [ 169.563288][T15703] rdma_op ffff88810cd11180 conn xmit_rdma 0000000000000000 [ 169.569406][T15705] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 169.781272][T15716] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5189'. [ 170.022708][T15748] loop8: detected capacity change from 0 to 128 [ 170.211720][T15773] loop8: detected capacity change from 0 to 512 [ 170.248318][T15773] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5218: bg 0: block 35: padding at end of block bitmap is not set [ 170.269736][T15778] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 170.298311][T15773] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 170.368757][T15789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5225'. [ 170.415778][T15773] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5218: invalid indirect mapped block 4294967295 (level 1) [ 170.464916][T15773] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5218: invalid indirect mapped block 4294967295 (level 2) [ 170.514178][ T3302] block device autoloading is deprecated and will be removed. [ 170.544763][T15773] EXT4-fs (loop8): 1 truncate cleaned up [ 170.568961][T15773] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.679687][T13581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.700978][T15807] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 170.828406][T15811] syzkaller0: entered promiscuous mode [ 170.833968][T15811] syzkaller0: entered allmulticast mode [ 171.008829][T15826] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5240'. [ 171.052141][T15838] rtc_cmos 00:00: Alarms can be up to one day in the future [ 171.146985][T15857] syzkaller1: entered promiscuous mode [ 171.152668][T15857] syzkaller1: entered allmulticast mode [ 171.159135][ T3380] rtc_cmos 00:00: Alarms can be up to one day in the future [ 171.166891][ T3380] rtc_cmos 00:00: Alarms can be up to one day in the future [ 171.174650][ T3380] rtc_cmos 00:00: Alarms can be up to one day in the future [ 171.182367][ T3380] rtc_cmos 00:00: Alarms can be up to one day in the future [ 171.189985][ T3380] rtc rtc0: __rtc_set_alarm: err=-22 [ 171.244265][T15867] SELinux: syz.1.5259 (15867) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 171.290272][T15871] loop7: detected capacity change from 0 to 512 [ 171.323733][T15871] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5262: bg 0: block 35: padding at end of block bitmap is not set [ 171.375346][T15871] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 171.390139][T15881] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5264'. [ 171.453440][T15871] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5262: invalid indirect mapped block 4294967295 (level 1) [ 171.493050][T15871] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5262: invalid indirect mapped block 4294967295 (level 2) [ 171.512410][T15871] EXT4-fs (loop7): 1 truncate cleaned up [ 171.518617][T15871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.531068][T15895] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 171.531068][T15895] The task syz.6.5266 (15895) triggered the difference, watch for misbehavior. [ 171.584551][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.673106][T15912] xt_hashlimit: max too large, truncated to 1048576 [ 172.184845][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5298'. [ 172.195409][T15957] IPVS: Unknown mcast interface: vcan0 [ 172.309016][T15970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5304'. [ 172.340275][T15978] netem: incorrect gi model size [ 172.345306][T15978] netem: change failed [ 172.407948][T15989] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 172.907673][T16041] xt_hashlimit: max too large, truncated to 1048576 [ 173.040933][T16056] IPv6: Can't replace route, no match found [ 173.139729][T16071] atomic_op ffff888109213928 conn xmit_atomic 0000000000000000 [ 173.194535][T16073] pimreg: entered allmulticast mode [ 173.207578][T16076] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 173.220459][T16076] team0: Port device batadv1 added [ 173.226726][T16073] pimreg: left allmulticast mode [ 173.290353][T16081] netlink: 'syz.1.5355': attribute type 1 has an invalid length. [ 173.463525][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 173.463590][ T29] audit: type=1400 audit(1745559919.269:4365): avc: denied { mounton } for pid=16090 comm="syz.1.5361" path="/1082/bus" dev="tmpfs" ino=5588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 173.541688][ T29] audit: type=1326 audit(1745559919.349:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16093 comm="syz.1.5362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47843ce969 code=0x0 [ 173.589128][T16087] syzkaller0: entered promiscuous mode [ 173.594737][T16087] syzkaller0: entered allmulticast mode [ 173.621051][ T29] audit: type=1326 audit(1745559919.429:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.7.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 173.644723][ T29] audit: type=1326 audit(1745559919.429:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.7.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 173.716920][ T29] audit: type=1326 audit(1745559919.489:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.7.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 173.740699][ T29] audit: type=1326 audit(1745559919.489:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.7.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 173.764324][ T29] audit: type=1326 audit(1745559919.489:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.7.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acc7e969 code=0x7ffc0000 [ 174.050853][T16121] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 174.055521][T16120] IPVS: stopping master sync thread 16121 ... [ 174.088111][ T29] audit: type=1326 audit(1745559919.899:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16122 comm="syz.5.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192da2e969 code=0x7ffc0000 [ 174.111949][ T29] audit: type=1326 audit(1745559919.899:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16122 comm="syz.5.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192da2e969 code=0x7ffc0000 [ 174.152841][ T29] audit: type=1326 audit(1745559919.959:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16122 comm="syz.5.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f192da2e969 code=0x7ffc0000 [ 174.224234][T16129] macvtap1: entered promiscuous mode [ 174.229848][T16129] macvtap1: entered allmulticast mode [ 174.235327][T16129] hsr0: entered allmulticast mode [ 174.240479][T16129] hsr_slave_0: entered allmulticast mode [ 174.246255][T16129] hsr_slave_1: entered allmulticast mode [ 174.260165][T16129] hsr0: left allmulticast mode [ 174.264998][T16129] hsr_slave_0: left allmulticast mode [ 174.270678][T16129] hsr_slave_1: left allmulticast mode [ 174.541419][T16152] syzkaller0: entered promiscuous mode [ 174.547025][T16152] syzkaller0: entered allmulticast mode [ 174.703709][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5395'. [ 174.712699][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5395'. [ 174.722057][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5395'. [ 174.739073][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5395'. [ 174.809314][T16185] netlink: 'syz.8.5400': attribute type 1 has an invalid length. [ 175.163848][T16218] __nla_validate_parse: 5 callbacks suppressed [ 175.163863][T16218] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 175.337298][T16226] pimreg: entered allmulticast mode [ 175.344340][T16226] pimreg: left allmulticast mode [ 175.623129][T16229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16229 comm=syz.5.5420 [ 175.971370][T16262] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 175.984305][T16266] IPVS: stopping master sync thread 16267 ... [ 175.994260][T16267] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 176.239176][T16306] openvswitch: netlink: Message has 6 unknown bytes. [ 176.337757][T16320] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 176.460384][T16336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.470513][ T3380] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.484808][ T3380] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.503083][T16336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.610368][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5470'. [ 176.710467][T16355] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 176.846321][T16361] ip6gretap0: entered promiscuous mode [ 176.851894][T16361] ip6gretap0: entered allmulticast mode [ 177.041017][ T36] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0 [ 177.048646][ T36] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0 [ 177.056159][ T36] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0 [ 177.079046][ T36] hid-generic 0000:0004:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 177.109793][T16380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5485'. [ 177.275562][T16404] syzkaller0: entered allmulticast mode [ 177.308433][T16408] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.395041][T16420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5506'. [ 177.508815][T16430] loop7: detected capacity change from 0 to 164 [ 177.554622][T16430] syz.7.5511: attempt to access beyond end of device [ 177.554622][T16430] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 177.579035][T16430] syz.7.5511: attempt to access beyond end of device [ 177.579035][T16430] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 177.679868][T16443] loop8: detected capacity change from 0 to 512 [ 177.695458][T16443] EXT4-fs: Ignoring removed oldalloc option [ 177.720226][T16443] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.5517: Parent and EA inode have the same ino 15 [ 177.743184][T16443] EXT4-fs (loop8): Remounting filesystem read-only [ 177.749895][T16443] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 177.765142][T16443] EXT4-fs (loop8): 1 orphan inode deleted [ 177.773798][T16443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.788634][T16443] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.788964][T16451] openvswitch: netlink: Message has 6 unknown bytes. [ 177.844383][T16455] loop7: detected capacity change from 0 to 128 [ 178.064525][T16473] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 178.132402][T16481] syz_tun: entered allmulticast mode [ 178.132571][T10508] kworker/u8:50: attempt to access beyond end of device [ 178.132571][T10508] loop7: rw=1, sector=153, nr_sectors = 8 limit=128 [ 178.156395][T16483] netlink: 136 bytes leftover after parsing attributes in process `syz.5.5534'. [ 178.175235][T10508] kworker/u8:50: attempt to access beyond end of device [ 178.175235][T10508] loop7: rw=1, sector=169, nr_sectors = 8 limit=128 [ 178.190726][T16481] syz_tun: left allmulticast mode [ 178.205235][T10508] kworker/u8:50: attempt to access beyond end of device [ 178.205235][T10508] loop7: rw=1, sector=185, nr_sectors = 8 limit=128 [ 178.235387][T10508] kworker/u8:50: attempt to access beyond end of device [ 178.235387][T10508] loop7: rw=1, sector=201, nr_sectors = 8 limit=128 [ 178.261670][T10508] kworker/u8:50: attempt to access beyond end of device [ 178.261670][T10508] loop7: rw=1, sector=217, nr_sectors = 8 limit=128 [ 178.275588][T10508] kworker/u8:50: attempt to access beyond end of device [ 178.275588][T10508] loop7: rw=1, sector=233, nr_sectors = 8 limit=128 [ 178.293640][T10508] kworker/u8:50: attempt to access beyond end of device [ 178.293640][T10508] loop7: rw=1, sector=249, nr_sectors = 8 limit=128 [ 178.312720][T10508] kworker/u8:50: attempt to access beyond end of device [ 178.312720][T10508] loop7: rw=1, sector=265, nr_sectors = 8 limit=128 [ 178.484438][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 178.484453][ T29] audit: type=1400 audit(1745559924.289:4537): avc: denied { load_policy } for pid=16505 comm="syz.5.5543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 178.521565][T16506] SELinux: failed to load policy [ 178.552581][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5544'. [ 178.631258][ T29] audit: type=1400 audit(1745559924.439:4538): avc: denied { bind } for pid=16515 comm="syz.5.5547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.650837][ T29] audit: type=1400 audit(1745559924.439:4539): avc: denied { name_bind } for pid=16515 comm="syz.5.5547" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 178.671938][ T29] audit: type=1400 audit(1745559924.439:4540): avc: denied { node_bind } for pid=16515 comm="syz.5.5547" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 178.817596][T16524] netlink: 'syz.1.5551': attribute type 30 has an invalid length. [ 178.958302][ T29] audit: type=1400 audit(1745559924.769:4541): avc: denied { create } for pid=16527 comm="syz.1.5553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.994572][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5554'. [ 179.013964][ T29] audit: type=1400 audit(1745559924.769:4542): avc: denied { connect } for pid=16527 comm="syz.1.5553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.033989][ T29] audit: type=1400 audit(1745559924.769:4543): avc: denied { ioctl } for pid=16527 comm="syz.1.5553" path="socket:[52713]" dev="sockfs" ino=52713 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.164984][T16539] 9pnet: p9_errstr2errno: server reported unknown error j=ƫ&B [ 179.221576][ T29] audit: type=1400 audit(1745559924.999:4544): avc: denied { ioctl } for pid=16542 comm="syz.5.5559" path="socket:[52760]" dev="sockfs" ino=52760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.246690][ T29] audit: type=1400 audit(1745559925.019:4545): avc: denied { execmem } for pid=16544 comm="syz.7.5560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 179.333169][ T29] audit: type=1400 audit(1745559925.109:4546): avc: denied { shutdown } for pid=16548 comm="syz.5.5564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 179.402016][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5569'. [ 179.443286][T16563] rdma_op ffff88810a65a580 conn xmit_rdma 0000000000000000 [ 180.179029][T16605] ipvlan0: entered promiscuous mode [ 180.216892][T16605] bridge0: port 3(ipvlan0) entered blocking state [ 180.223526][T16605] bridge0: port 3(ipvlan0) entered disabled state [ 180.245925][T16605] ipvlan0: entered allmulticast mode [ 180.251523][T16605] bridge0: entered allmulticast mode [ 180.272356][T16605] ipvlan0: left allmulticast mode [ 180.277504][T16605] bridge0: left allmulticast mode [ 180.514540][T16619] macvlan2: entered promiscuous mode [ 180.519920][T16619] macvlan2: entered allmulticast mode [ 180.552528][T16619] bond_slave_0: entered promiscuous mode [ 180.558251][T16619] bond_slave_1: entered promiscuous mode [ 180.564058][T16619] bond0: entered allmulticast mode [ 180.569239][T16619] bond_slave_0: entered allmulticast mode [ 180.575034][T16619] bond_slave_1: entered allmulticast mode [ 180.580927][T16619] bond0: entered promiscuous mode [ 180.591701][T16619] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 180.599957][T16623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5595'. [ 180.600689][T16619] team0: Port device macvlan2 added [ 180.758227][T16633] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5601'. [ 181.141252][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.148894][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.156435][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.198467][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.206180][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.213640][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.221075][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.228534][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.235984][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.243553][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.251052][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.258737][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.266306][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.273740][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.285995][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.293436][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.300900][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.308416][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.315841][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.323278][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.330793][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.338267][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.345748][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.353192][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.360635][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.368081][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.375569][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.382999][ T3380] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 181.391153][ T3380] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 181.456281][T16676] vlan0: entered allmulticast mode [ 181.516196][T16682] loop8: detected capacity change from 0 to 512 [ 181.524054][T16682] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 181.527462][T16680] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5622'. [ 181.556575][T16682] EXT4-fs (loop8): 1 truncate cleaned up [ 181.562674][T16682] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.625135][T13581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.827461][T16717] netlink: 566 bytes leftover after parsing attributes in process `syz.8.5639'. [ 181.861649][T16722] loop7: detected capacity change from 0 to 512 [ 181.923892][T16722] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.936798][T16722] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.970754][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.074970][T16744] SELinux: policydb version -940913569 does not match my version range 15-34 [ 182.084102][T16744] SELinux: failed to load policy [ 182.255745][T16771] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5663'. [ 182.362881][T16783] netlink: 'syz.8.5669': attribute type 1 has an invalid length. [ 182.442562][T16796] netlink: 'syz.8.5673': attribute type 12 has an invalid length. [ 182.450461][T16796] netlink: 'syz.8.5673': attribute type 29 has an invalid length. [ 182.458393][T16796] netlink: 148 bytes leftover after parsing attributes in process `syz.8.5673'. [ 182.467477][T16796] netlink: 'syz.8.5673': attribute type 2 has an invalid length. [ 182.475245][T16796] netlink: 43 bytes leftover after parsing attributes in process `syz.8.5673'. [ 182.511825][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5674'. [ 182.552351][T16812] ipip0: entered promiscuous mode [ 182.653555][T16825] ALSA: seq fatal error: cannot create timer (-19) [ 182.972587][T16863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5705'. [ 183.078037][T16872] SELinux: ebitmap: truncated map [ 183.087141][T16872] SELinux: failed to load policy [ 183.561929][T16930] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5736'. [ 183.577934][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 183.577954][ T29] audit: type=1400 audit(1745559929.389:4848): avc: denied { associate } for pid=16931 comm="syz.6.5737" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 183.623319][ T29] audit: type=1400 audit(1745559929.429:4849): avc: denied { read append } for pid=16935 comm="syz.6.5739" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.647406][ T29] audit: type=1400 audit(1745559929.429:4850): avc: denied { open } for pid=16935 comm="syz.6.5739" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.671179][ T29] audit: type=1400 audit(1745559929.429:4851): avc: denied { ioctl } for pid=16935 comm="syz.6.5739" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.719898][ T29] audit: type=1400 audit(1745559929.529:4852): avc: denied { block_suspend } for pid=16939 comm="syz.1.5742" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.841287][ T29] audit: type=1400 audit(1745559929.649:4853): avc: denied { bind } for pid=16948 comm="syz.6.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.860885][ T29] audit: type=1400 audit(1745559929.649:4854): avc: denied { name_bind } for pid=16948 comm="syz.6.5745" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 183.882848][ T29] audit: type=1400 audit(1745559929.649:4855): avc: denied { node_bind } for pid=16948 comm="syz.6.5745" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 183.904814][ T29] audit: type=1400 audit(1745559929.649:4856): avc: denied { write } for pid=16948 comm="syz.6.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.924544][ T29] audit: type=1400 audit(1745559929.649:4857): avc: denied { name_connect } for pid=16948 comm="syz.6.5745" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 184.397079][T17005] loop8: detected capacity change from 0 to 1024 [ 184.414031][T17005] EXT4-fs: Ignoring removed nobh option [ 184.417365][T17004] vlan0: entered allmulticast mode [ 184.419753][T17005] EXT4-fs: Ignoring removed bh option [ 184.424802][T17004] bond_slave_0: entered allmulticast mode [ 184.475749][T17005] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.597303][T13581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.624863][T17029] block device autoloading is deprecated and will be removed. [ 184.632920][T17029] bio_check_eod: 104 callbacks suppressed [ 184.632938][T17029] syz.5.5781: attempt to access beyond end of device [ 184.632938][T17029] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 184.678829][T17034] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 184.827525][T17061] xt_hashlimit: size too large, truncated to 1048576 [ 185.521078][T17104] sit0: left promiscuous mode [ 185.540623][T17104] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.547884][T17104] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.630979][T17104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.643710][T17104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.682822][T17104] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.691372][T17104] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.699797][T17104] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.708317][T17104] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.730049][T17104] vlan2: left promiscuous mode [ 185.736023][T17104] bond0: left allmulticast mode [ 185.740942][T17104] bond_slave_0: left allmulticast mode [ 185.746476][T17104] bond_slave_1: left allmulticast mode [ 185.752388][T17104] bond0: left promiscuous mode [ 185.757239][T17104] bond_slave_0: left promiscuous mode [ 185.762713][T17104] bond_slave_1: left promiscuous mode [ 185.776211][T17104] macvlan2: left promiscuous mode [ 185.781331][T17104] macvlan2: left allmulticast mode [ 185.789354][T17104] ipip0: left promiscuous mode [ 185.820549][T17139] program syz.1.5825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.044772][T17172] __nla_validate_parse: 1 callbacks suppressed [ 186.044789][T17172] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5841'. [ 186.177627][T17193] ipvlan0: entered promiscuous mode [ 186.183312][T17193] bridge0: port 3(ipvlan0) entered blocking state [ 186.189996][T17193] bridge0: port 3(ipvlan0) entered disabled state [ 186.202975][T17193] ipvlan0: entered allmulticast mode [ 186.208433][T17193] bridge0: entered allmulticast mode [ 186.216128][T17193] ipvlan0: left allmulticast mode [ 186.221258][T17193] bridge0: left allmulticast mode [ 186.472238][T17232] xt_hashlimit: size too large, truncated to 1048576 [ 186.575566][T17235] SELinux: failed to load policy [ 186.668335][T17252] netlink: 'syz.7.5876': attribute type 21 has an invalid length. [ 186.676375][T17252] netlink: 'syz.7.5876': attribute type 20 has an invalid length. [ 186.684276][T17252] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.868160][T17257] loop7: detected capacity change from 0 to 512 [ 186.921111][T17257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.982321][T17257] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.207858][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.428420][ T3379] kernel write not supported for file /977/attr/exec (pid: 3379 comm: kworker/1:3) [ 187.682393][T17311] $H: left promiscuous mode [ 187.687590][T17311] bond_slave_0: left promiscuous mode [ 187.693070][T17311] bond_slave_1: left promiscuous mode [ 187.826019][T17327] vlan0: entered allmulticast mode [ 188.301084][T17345] ip6gretap0: left promiscuous mode [ 188.306715][T17345] ip6gretap0: left allmulticast mode [ 188.333083][T17345] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.340372][T17345] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.469057][T17345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.508194][T17345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.560325][T17345] geneve0: left allmulticast mode [ 188.577762][T17345] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.586578][T17345] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.594953][T17345] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.603509][T17345] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.666485][T17367] loop7: detected capacity change from 0 to 512 [ 188.675668][T17345] gtp0: left promiscuous mode [ 188.713850][T17367] EXT4-fs (loop7): 1 orphan inode deleted [ 188.727481][T17367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.777119][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 188.777136][ T29] audit: type=1326 audit(1745559934.589:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17358 comm="syz.8.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4284dae969 code=0x7ffc0000 [ 188.807315][T17367] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.820921][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5927'. [ 188.852761][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5928'. [ 188.868267][T17375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.875537][T17375] IPv6: NLM_F_CREATE should be set when creating new route [ 188.899076][ T29] audit: type=1326 audit(1745559934.589:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17358 comm="syz.8.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f4284dae969 code=0x7ffc0000 [ 188.922658][ T29] audit: type=1326 audit(1745559934.589:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17358 comm="syz.8.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4284dae969 code=0x7ffc0000 [ 188.946306][ T29] audit: type=1326 audit(1745559934.589:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17358 comm="syz.8.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4284dae969 code=0x7ffc0000 [ 188.970068][ T29] audit: type=1326 audit(1745559934.589:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17358 comm="syz.8.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4284dae969 code=0x7ffc0000 [ 188.993697][ T29] audit: type=1326 audit(1745559934.589:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17358 comm="syz.8.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4284dae969 code=0x7ffc0000 [ 189.043533][ T29] audit: type=1400 audit(1745559934.829:5075): avc: denied { read } for pid=17378 comm="syz.8.5939" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.065669][T10463] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 189.067295][ T29] audit: type=1400 audit(1745559934.829:5076): avc: denied { open } for pid=17378 comm="syz.8.5939" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.077044][T10463] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:16: Failed to release dquot type 1 [ 189.100738][ T29] audit: type=1400 audit(1745559934.829:5077): avc: denied { ioctl } for pid=17378 comm="syz.8.5939" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.225895][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.287917][T17407] netlink: 'syz.8.5935': attribute type 10 has an invalid length. [ 189.297373][T17407] hsr_slave_0: left promiscuous mode [ 189.305323][T17407] hsr_slave_1: left promiscuous mode [ 189.318724][T17409] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5943'. [ 189.358659][T17414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.412886][T17414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.886919][T17444] batadv1: entered allmulticast mode [ 189.902117][T17444] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 190.631164][T17471] loop7: detected capacity change from 0 to 128 [ 190.700969][T17470] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.708290][T17470] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.878806][T17470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.898151][T17470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.909612][T17491] loop7: detected capacity change from 0 to 1024 [ 190.964692][T17470] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.973326][T17470] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.982414][T17470] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.991023][T17470] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.031152][T17491] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.044950][T17491] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.164597][T10463] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:16: bg 0: block 393: padding at end of block bitmap is not set [ 191.227505][T10463] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 191.240408][T10463] EXT4-fs (loop7): This should not happen!! Data will be lost [ 191.240408][T10463] [ 191.279818][T12299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.299719][T17503] netlink: 'syz.5.5974': attribute type 21 has an invalid length. [ 191.307867][T17503] netlink: 'syz.5.5974': attribute type 1 has an invalid length. [ 191.315752][T17503] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5974'. [ 191.413173][T17521] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5976'. [ 191.485372][T17500] ================================================================== [ 191.493498][T17500] BUG: KCSAN: data-race in do_select / pollwake [ 191.499809][T17500] [ 191.502159][T17500] write to 0xffffc900073cba00 of 4 bytes by interrupt on cpu 0: [ 191.509818][T17500] pollwake+0xb6/0x100 [ 191.513902][T17500] __wake_up+0x63/0xb0 [ 191.517992][T17500] bpf_ringbuf_notify+0x22/0x30 [ 191.522858][T17500] irq_work_run+0xdf/0x2d0 [ 191.527298][T17500] __sysvec_irq_work+0x22/0x170 [ 191.532182][T17500] sysvec_irq_work+0x66/0x80 [ 191.536809][T17500] asm_sysvec_irq_work+0x1a/0x20 [ 191.541766][T17500] default_send_IPI_self+0x34/0x50 [ 191.547001][T17500] arch_irq_work_raise+0x46/0x50 [ 191.551980][T17500] __irq_work_queue_local+0x80/0x1b0 [ 191.557287][T17500] irq_work_queue+0x70/0x100 [ 191.561929][T17500] bpf_ringbuf_discard+0xd3/0xf0 [ 191.566880][T17500] bpf_prog_fe0ed97373b08409+0x47/0x4b [ 191.572349][T17500] bpf_trace_run3+0x10c/0x1d0 [ 191.577048][T17500] kmem_cache_free+0x246/0x2f0 [ 191.581837][T17500] radix_tree_node_rcu_free+0x69/0x80 [ 191.587235][T17500] rcu_core+0x59c/0xc00 [ 191.591410][T17500] rcu_core_si+0xd/0x20 [ 191.595588][T17500] handle_softirqs+0xb7/0x290 [ 191.600293][T17500] run_ksoftirqd+0x1c/0x30 [ 191.604724][T17500] smpboot_thread_fn+0x328/0x530 [ 191.609678][T17500] kthread+0x486/0x510 [ 191.613764][T17500] ret_from_fork+0x4b/0x60 [ 191.618203][T17500] ret_from_fork_asm+0x1a/0x30 [ 191.622979][T17500] [ 191.625304][T17500] read to 0xffffc900073cba00 of 4 bytes by task 17500 on cpu 1: [ 191.632942][T17500] do_select+0xe41/0xf40 [ 191.637194][T17500] core_sys_select+0x3dc/0x600 [ 191.641964][T17500] __se_sys_pselect6+0x216/0x280 [ 191.646999][T17500] __x64_sys_pselect6+0x78/0x90 [ 191.651942][T17500] x64_sys_call+0x1caa/0x2fb0 [ 191.656813][T17500] do_syscall_64+0xd0/0x1a0 [ 191.661331][T17500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.667256][T17500] [ 191.669582][T17500] value changed: 0x00000000 -> 0x00000001 [ 191.675307][T17500] [ 191.677635][T17500] Reported by Kernel Concurrency Sanitizer on: [ 191.683792][T17500] CPU: 1 UID: 0 PID: 17500 Comm: syz.1.5973 Tainted: G W 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 191.697884][T17500] Tainted: [W]=WARN [ 191.701707][T17500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.711770][T17500] ================================================================== [ 191.737036][T17533] netlink: 12 bytes leftover after parsing attributes in process `'. [ 199.238811][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 199.238829][ T29] audit: type=1400 audit(1745559945.049:5119): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 199.267338][ T29] audit: type=1400 audit(1745559945.049:5120): avc: denied { search } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.289025][ T29] audit: type=1400 audit(1745559945.049:5121): avc: denied { append } for pid=2987 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.311375][ T29] audit: type=1400 audit(1745559945.049:5122): avc: denied { open } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.334091][ T29] audit: type=1400 audit(1745559945.049:5123): avc: denied { getattr } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1