last executing test programs: 1m51.681731425s ago: executing program 2 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000340)=[{}], 0x1, 0x8e, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000009}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 1m51.611749695s ago: executing program 2 (id=606): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1) 1m51.534912386s ago: executing program 2 (id=607): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4810) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a0102"], 0x2c}}, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) 1m50.7316505s ago: executing program 2 (id=627): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r1}) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x9, @empty}, 0x2001, {[0x0, 0x3, 0x0, 0x0, 0x2000002, 0x0, 0x5]}}, 0x5c) socket$inet6(0xa, 0x3, 0x211) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(r1, 0x0, 0x4000018) unshare(0x64000600) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000180)=ANY=[@ANYRES64=r2]) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x50001) 1m49.663815176s ago: executing program 2 (id=633): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m49.587243076s ago: executing program 2 (id=636): r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1004014, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m34.535065592s ago: executing program 32 (id=636): r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1004014, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m31.899164705s ago: executing program 0 (id=931): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b67, &(0x7f0000000180)) 1m31.834520696s ago: executing program 0 (id=932): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600a4000140200007", 0x3b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001418edffff1108000300", 0x2c}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1m31.647529747s ago: executing program 0 (id=937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1m31.589199537s ago: executing program 0 (id=941): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m31.487495157s ago: executing program 0 (id=944): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m31.449606417s ago: executing program 0 (id=945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) 1m16.395132824s ago: executing program 33 (id=945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) 40.376580656s ago: executing program 1 (id=2115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) 40.302708576s ago: executing program 1 (id=2116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 40.282801107s ago: executing program 1 (id=2117): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 40.262423637s ago: executing program 1 (id=2118): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x3) 40.243354827s ago: executing program 1 (id=2119): socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)) r0 = socket$unix(0x1, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) pread64(r1, &(0x7f0000000240)=""/173, 0xad, 0xdc) 40.012742098s ago: executing program 1 (id=2121): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000680)={0x42040000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) io_uring_setup(0x8000009, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0xb, 0x226, 0x0, r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) close_range(r5, 0xffffffffffffffff, 0x0) r10 = io_uring_setup(0x40f8, &(0x7f0000000180)={0x0, 0x42bad, 0x40, 0x1, 0x272}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) 39.981484148s ago: executing program 34 (id=2121): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000680)={0x42040000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) io_uring_setup(0x8000009, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0xb, 0x226, 0x0, r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) close_range(r5, 0xffffffffffffffff, 0x0) r10 = io_uring_setup(0x40f8, &(0x7f0000000180)={0x0, 0x42bad, 0x40, 0x1, 0x272}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) 31.531498241s ago: executing program 3 (id=2344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x181, 0xfffffffb}) syz_io_uring_setup(0x2c0d, &(0x7f0000000400)={0x0, 0xc890, 0x4000, 0x4}, 0x0, 0x0) 31.531244821s ago: executing program 3 (id=2345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) pipe2$9p(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40002, 0x128) socket$inet6_sctp(0xa, 0x5, 0x84) mq_notify(0xffffffffffffffff, 0x0) 31.492685891s ago: executing program 3 (id=2347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000006000a004e220000050002000a00000014000900000000"], 0x38}}, 0x0) 31.469243001s ago: executing program 3 (id=2351): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0) 31.235421692s ago: executing program 3 (id=2360): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000900)="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", 0x45c) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r3, 0x0, 0x0}, 0x10) 31.055395873s ago: executing program 3 (id=2369): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 31.007137563s ago: executing program 35 (id=2369): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 1.266294694s ago: executing program 8 (id=3255): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090000000000000000000200000014000180050002"], 0x28}}, 0x0) 901.278336ms ago: executing program 5 (id=3267): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 847.349256ms ago: executing program 6 (id=3272): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2, 0x0, 0x8000000000000}, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 834.735336ms ago: executing program 5 (id=3274): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) close_range(r0, r3, 0x0) 774.527916ms ago: executing program 6 (id=3276): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0x9, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xffff8001, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000280)=0x6c, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 774.341596ms ago: executing program 5 (id=3277): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)="19", 0xffe0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 749.969037ms ago: executing program 6 (id=3280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd144, 0x0, 0xffffffff, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) io_uring_enter(r3, 0x3516, 0xddd6, 0x4, 0x0, 0x0) 632.045027ms ago: executing program 5 (id=3281): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) 579.539577ms ago: executing program 6 (id=3283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000008000000000000000000000000000077b4b2795c6dac0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0x8, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0x10c00, 0x23e, 0x10004, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xfff3}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) bind$bt_hci(r6, &(0x7f0000000540)={0x1f, 0x0, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x100, 0x0) 579.234247ms ago: executing program 7 (id=3284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/227, 0xe3}], 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 484.553118ms ago: executing program 6 (id=3286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 401.372298ms ago: executing program 7 (id=3287): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000"], 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2e696, 0xfd, "00120dd608f500001e20000080c90a008000"}) fcntl$getflags(0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 401.103748ms ago: executing program 4 (id=3288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) perf_event_open(0x0, 0xffffffffffffffff, 0x20000000, 0xffffffffffffffff, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x0, 0x14, 0x2009, 0x2}, 0x8, 0x7, 0x200, 0x0, 0xce2, 0x0, 0x0}) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 400.174578ms ago: executing program 5 (id=3289): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x20000000000000b3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) close(r0) 382.758758ms ago: executing program 8 (id=3290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17f}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049cc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1, r2}}, 0x40) 315.647069ms ago: executing program 5 (id=3291): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x900, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 315.388499ms ago: executing program 4 (id=3292): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)="19", 0xffe0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 295.671799ms ago: executing program 6 (id=3293): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x1, 0x2, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 253.227179ms ago: executing program 4 (id=3294): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x6, @mcast2, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f00000004c0)="0065dd00", 0x4) 219.678969ms ago: executing program 8 (id=3295): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x9}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 219.469719ms ago: executing program 7 (id=3296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x8001}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r2, 0x1) 219.107319ms ago: executing program 4 (id=3297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204080, &(0x7f00000004c0), 0xfd, 0x573, &(0x7f0000000cc0)="$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") r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0xe0) getdents(r2, 0x0, 0x0) 198.673369ms ago: executing program 8 (id=3298): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a707000000000306000000", 0xf}], 0x1, 0x7, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010021bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="858804000300000008001b000000000008000d00080000004469db08a9d815762789002d90c8aaa3f6e79b2d17d00e"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 198.096759ms ago: executing program 7 (id=3299): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x800) 122.00955ms ago: executing program 7 (id=3300): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x40}}, 0x0) 121.82577ms ago: executing program 8 (id=3301): r0 = socket(0x11, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 121.24147ms ago: executing program 4 (id=3302): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) read(r1, &(0x7f0000000040)=""/190, 0xbe) 92.96241ms ago: executing program 8 (id=3303): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf7, r2, 0x1, 0xc0}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 39.65132ms ago: executing program 4 (id=3304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f0000000040), 0x8) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=3305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) kernel console output (not intermixed with test programs): .1.1801'. [ 139.240620][ T8370] is_bad_inode(inode)=0 [ 139.253720][ T8370] NEXT_ORPHAN(inode)=0 [ 139.257867][ T8370] max_ino=32 [ 139.261132][ T8370] i_nlink=1 [ 139.266537][ T8370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.287537][ T8370] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.1815: Unrecognised inode hash code 20 [ 139.299085][ T8370] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1815: Corrupt directory, running e2fsck is recommended [ 139.361987][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.430736][ T8400] loop5: detected capacity change from 0 to 512 [ 139.470875][ T8400] EXT4-fs (loop5): too many log groups per flexible block group [ 139.479853][ T8400] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 139.496048][ T8400] EXT4-fs (loop5): mount failed [ 139.571433][ T8411] loop4: detected capacity change from 0 to 8192 [ 139.741996][ T8432] loop3: detected capacity change from 0 to 1024 [ 139.749555][ T8432] EXT4-fs: Ignoring removed orlov option [ 139.755415][ T8432] EXT4-fs (loop3): Invalid log block size: 27052 [ 139.865048][ T8439] __nla_validate_parse: 2 callbacks suppressed [ 139.865068][ T8439] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1843'. [ 140.005617][ T8448] loop5: detected capacity change from 0 to 512 [ 140.032546][ T8448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.052434][ T8448] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.116364][ T8448] EXT4-fs error (device loop5): ext4_validate_block_bitmap:423: comm syz.5.1847: bg 0: bad block bitmap checksum [ 140.140325][ T5924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.298814][ T8468] loop6: detected capacity change from 0 to 1024 [ 140.317211][ T8478] loop1: detected capacity change from 0 to 512 [ 140.324935][ T8468] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 140.344213][ T8478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.357423][ T8478] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.500388][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.511879][ T8490] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 140.520241][ T8490] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 141.025610][ T8506] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1870'. [ 141.246939][ T8529] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1881'. [ 141.266822][ T8533] loop6: detected capacity change from 0 to 512 [ 141.283573][ T8533] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.300246][ T8535] program syz.5.1884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.410752][ T8545] hub 2-0:1.0: USB hub found [ 141.418491][ T8553] tipc: Enabling of bearer rejected, failed to enable media [ 141.445667][ T8545] hub 2-0:1.0: 8 ports detected [ 141.467390][ T8559] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 141.546236][ T8568] loop4: detected capacity change from 0 to 128 [ 141.577290][ T8568] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.626580][ T8568] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.662145][ T4941] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.962382][ T8609] netlink: 'syz.6.1920': attribute type 20 has an invalid length. [ 141.970431][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1920'. [ 142.004073][ T4941] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.013086][ T8609] netlink: 'syz.6.1920': attribute type 20 has an invalid length. [ 142.020971][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1920'. [ 142.045441][ T4941] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.085870][ T4941] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.097614][ T4941] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.171189][ T8618] loop3: detected capacity change from 0 to 1024 [ 142.189091][ T8618] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.204775][ T8624] loop4: detected capacity change from 0 to 2048 [ 142.211846][ T8618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.223703][ T8618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.241474][ T8618] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.248460][ T8618] EXT4-fs: Cannot change journaled quota options when quota turned on [ 142.261217][ T8624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.304455][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.470599][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.567605][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1945'. [ 142.584573][ T8672] vcan0: entered allmulticast mode [ 142.614312][ T8672] vcan0: left allmulticast mode [ 142.688548][ T8685] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 142.696862][ T8685] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 142.720969][ T8686] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 142.775673][ T8694] loop6: detected capacity change from 0 to 1024 [ 142.783031][ T8694] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 142.797399][ T8695] bridge0: entered promiscuous mode [ 142.802797][ T8695] macsec1: entered promiscuous mode [ 142.809155][ T8695] bridge0: port 3(macsec1) entered blocking state [ 142.815741][ T8695] bridge0: port 3(macsec1) entered disabled state [ 142.822462][ T8695] macsec1: entered allmulticast mode [ 142.827904][ T8695] bridge0: entered allmulticast mode [ 142.833693][ T8695] macsec1: left allmulticast mode [ 142.838849][ T8695] bridge0: left allmulticast mode [ 142.844561][ T8695] bridge0: left promiscuous mode [ 142.971128][ T8703] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 143.110354][ T8707] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1961'. [ 143.528771][ T8722] loop3: detected capacity change from 0 to 1024 [ 143.594166][ T8722] EXT4-fs: Ignoring removed nobh option [ 143.599882][ T8722] EXT4-fs: Ignoring removed bh option [ 143.667366][ T8722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.706833][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 143.706847][ T29] audit: type=1326 audit(1761886857.935:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 143.736404][ T29] audit: type=1326 audit(1761886857.935:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 143.777939][ T8722] EXT4-fs (loop3): shut down requested (0) [ 143.794741][ T29] audit: type=1326 audit(1761886857.995:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 143.818209][ T29] audit: type=1326 audit(1761886857.995:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 143.841844][ T29] audit: type=1326 audit(1761886857.995:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 143.865442][ T29] audit: type=1326 audit(1761886857.995:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 143.888897][ T29] audit: type=1326 audit(1761886857.995:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 143.894914][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1963'. [ 143.912409][ T29] audit: type=1326 audit(1761886857.995:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 143.912442][ T29] audit: type=1326 audit(1761886857.995:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 143.968322][ T29] audit: type=1326 audit(1761886857.995:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 144.021576][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.041074][ T8749] loop1: detected capacity change from 0 to 512 [ 144.070616][ T8751] bridge0: entered promiscuous mode [ 144.087615][ T8749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.089086][ T8751] macsec1: entered promiscuous mode [ 144.100347][ T8749] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.110139][ T8751] bridge0: port 3(macsec1) entered blocking state [ 144.122126][ T8751] bridge0: port 3(macsec1) entered disabled state [ 144.131366][ T8751] macsec1: entered allmulticast mode [ 144.136757][ T8751] bridge0: entered allmulticast mode [ 144.142890][ T8751] macsec1: left allmulticast mode [ 144.148097][ T8751] bridge0: left allmulticast mode [ 144.153980][ T8751] bridge0: left promiscuous mode [ 144.183218][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.192939][ T8757] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1981'. [ 144.229943][ T8762] netlink: 'syz.3.1984': attribute type 20 has an invalid length. [ 144.236594][ T8760] loop4: detected capacity change from 0 to 512 [ 144.237846][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1984'. [ 144.290291][ T4941] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.299403][ T4941] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.311065][ T8762] netlink: 'syz.3.1984': attribute type 20 has an invalid length. [ 144.319092][ T4941] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.328085][ T8760] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.1983: iget: bad extra_isize 90 (inode size 256) [ 144.328168][ T4941] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.350941][ T8760] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1983: error while reading EA inode 18 err=-117 [ 144.363982][ T8760] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.1983: iget: bad extra_isize 90 (inode size 256) [ 144.387486][ T8760] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1983: error while reading EA inode 18 err=-117 [ 144.410987][ T8760] EXT4-fs (loop4): 1 orphan inode deleted [ 144.417436][ T8760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.471806][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.645588][ T8799] netlink: 'syz.4.1999': attribute type 1 has an invalid length. [ 144.716227][ T8799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.735919][ T8809] bond1: (slave geneve2): making interface the new active one [ 144.748703][ T8809] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 144.760668][ T8812] dummy0: entered promiscuous mode [ 144.773991][ T8812] macsec1: entered promiscuous mode [ 144.780803][ T8812] dummy0: left promiscuous mode [ 144.951238][ T8823] loop1: detected capacity change from 0 to 512 [ 145.018185][ T8823] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 145.046241][ T8823] EXT4-fs (loop1): invalid journal inode [ 145.052383][ T8823] EXT4-fs (loop1): can't get journal size [ 145.062383][ T8823] EXT4-fs (loop1): 1 truncate cleaned up [ 145.070291][ T8823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.083611][ T8823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.188386][ T8850] loop1: detected capacity change from 0 to 512 [ 145.218272][ T1033] hid_parser_main: 17 callbacks suppressed [ 145.218289][ T1033] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.231770][ T1033] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.239298][ T1033] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.246738][ T1033] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.286748][ T8850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.295841][ T1033] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.299506][ T8850] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.306792][ T1033] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.306826][ T1033] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.306854][ T1033] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.339554][ T1033] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.346971][ T1033] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.402091][ T8863] loop6: detected capacity change from 0 to 512 [ 145.433530][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.443543][ T1033] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 145.466058][ T8863] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.2025: iget: bad extra_isize 90 (inode size 256) [ 145.487101][ T8863] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2025: error while reading EA inode 18 err=-117 [ 145.517501][ T8863] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.2025: iget: bad extra_isize 90 (inode size 256) [ 145.565508][ T8869] hub 2-0:1.0: USB hub found [ 145.577554][ T8863] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2025: error while reading EA inode 18 err=-117 [ 145.591626][ T8869] hub 2-0:1.0: 8 ports detected [ 145.602523][ T8875] __nla_validate_parse: 2 callbacks suppressed [ 145.602538][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2029'. [ 145.626027][ T8863] EXT4-fs (loop6): 1 orphan inode deleted [ 145.633706][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2017'. [ 145.649774][ T8863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.706996][ T1033] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.718939][ T6876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.778691][ T8890] loop4: detected capacity change from 0 to 128 [ 145.788838][ T8890] bio_check_eod: 36116 callbacks suppressed [ 145.788856][ T8890] syz.4.2035: attempt to access beyond end of device [ 145.788856][ T8890] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 145.810101][ T8890] syz.4.2035: attempt to access beyond end of device [ 145.810101][ T8890] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 145.823593][ T8890] buffer_io_error: 50 callbacks suppressed [ 145.823611][ T8890] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 145.868877][ T8890] syz.4.2035: attempt to access beyond end of device [ 145.868877][ T8890] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 145.882361][ T8890] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 145.895352][ T8890] syz.4.2035: attempt to access beyond end of device [ 145.895352][ T8890] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 145.921721][ T8890] syz.4.2035: attempt to access beyond end of device [ 145.921721][ T8890] loop4: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 145.935368][ T8890] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 145.965853][ T8890] syz.4.2035: attempt to access beyond end of device [ 145.965853][ T8890] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 145.979361][ T8890] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 145.996113][ T8890] syz.4.2035: attempt to access beyond end of device [ 145.996113][ T8890] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 146.058459][ T8890] syz.4.2035: attempt to access beyond end of device [ 146.058459][ T8890] loop4: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 146.071913][ T8890] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 146.094122][ T8890] syz.4.2035: attempt to access beyond end of device [ 146.094122][ T8890] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 146.107633][ T8890] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 146.136768][ T8890] syz.4.2035: attempt to access beyond end of device [ 146.136768][ T8890] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 146.158827][ T8890] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 146.167775][ T8890] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 146.198482][ T8909] hub 2-0:1.0: USB hub found [ 146.204232][ T8909] hub 2-0:1.0: 8 ports detected [ 146.214502][ T8890] Buffer I/O error on dev loop4, logical block 111, lost async page write [ 146.236670][ T8890] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 146.440422][ T8938] loop6: detected capacity change from 0 to 164 [ 146.478230][ T8938] isofs_fill_super: bread failed, dev=loop6, iso_blknum=41, block=82 [ 146.503345][ T8944] netlink: 'syz.1.2062': attribute type 1 has an invalid length. [ 146.544562][ T8944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.565916][ T8944] bond1: (slave geneve2): making interface the new active one [ 146.574943][ T8944] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 146.734025][ T8964] loop6: detected capacity change from 0 to 128 [ 146.848563][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2048'. [ 147.000159][ T8973] netlink: 'syz.1.2073': attribute type 10 has an invalid length. [ 147.008238][ T8973] batadv0: entered allmulticast mode [ 147.042290][ T8973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.051283][ T8973] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 147.062824][ T8973] netlink: 'syz.1.2073': attribute type 10 has an invalid length. [ 147.070758][ T8973] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2073'. [ 147.080255][ T8973] batadv0: entered promiscuous mode [ 147.086667][ T8973] bond0: (slave batadv0): Releasing backup interface [ 147.111153][ T8973] bridge0: port 3(batadv0) entered blocking state [ 147.117770][ T8973] bridge0: port 3(batadv0) entered disabled state [ 147.167347][ T8982] random: crng reseeded on system resumption [ 147.177704][ T8982] Restarting kernel threads ... [ 147.193401][ T8982] Done restarting kernel threads. [ 147.301612][ T8997] loop6: detected capacity change from 0 to 1024 [ 147.308539][ T8997] EXT4-fs: Ignoring removed orlov option [ 147.314750][ T8997] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 147.352719][ T8997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.385944][ T4936] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 147.395343][ T4936] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 147.449483][ T9007] netlink: 'syz.3.2086': attribute type 1 has an invalid length. [ 147.459334][ T6876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.481416][ T9007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.509791][ T9007] bond1: (slave geneve2): making interface the new active one [ 147.518951][ T9007] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 147.586711][ T9018] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.680983][ T9026] loop4: detected capacity change from 0 to 1024 [ 147.697052][ T9026] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 147.801305][ T9033] loop5: detected capacity change from 0 to 164 [ 147.824178][ T9035] loop6: detected capacity change from 0 to 512 [ 147.897363][ T9035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.913065][ T9035] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.065126][ T9043] 9pnet_fd: Insufficient options for proto=fd [ 148.095682][ T9042] tmpfs: Too small a size for current use [ 148.180015][ T6876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.428850][ T9047] SELinux: failed to load policy [ 148.559167][ T9055] loop1: detected capacity change from 0 to 512 [ 148.565785][ T9057] loop3: detected capacity change from 0 to 2048 [ 148.566769][ T9055] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.594338][ T9063] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2109'. [ 148.618345][ T9057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.634356][ T9055] EXT4-fs (loop1): 1 truncate cleaned up [ 148.640726][ T9055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.641445][ T9073] loop6: detected capacity change from 0 to 512 [ 148.698538][ T9073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.757334][ T9073] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.797952][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 148.797980][ T29] audit: type=1400 audit(1761886863.025:4130): avc: denied { write open } for pid=9071 comm="syz.6.2111" path="/172/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.858122][ T6876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.873813][ T29] audit: type=1400 audit(1761886863.055:4131): avc: denied { read } for pid=9071 comm="syz.6.2111" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.897809][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.941763][ T29] audit: type=1400 audit(1761886863.165:4132): avc: denied { open } for pid=9080 comm="syz.6.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 148.961239][ T29] audit: type=1400 audit(1761886863.165:4133): avc: denied { kernel } for pid=9080 comm="syz.6.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 148.990493][ T4936] Bluetooth: hci0: Frame reassembly failed (-84) [ 148.998232][ T29] audit: type=1400 audit(1761886863.215:4134): avc: denied { read } for pid=9081 comm="syz.1.2115" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 149.192067][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.217373][ T29] audit: type=1400 audit(1761886863.445:4135): avc: denied { create } for pid=9090 comm="syz.3.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.239071][ T29] audit: type=1400 audit(1761886863.465:4136): avc: denied { bind } for pid=9090 comm="syz.3.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.258609][ T29] audit: type=1400 audit(1761886863.465:4137): avc: denied { write } for pid=9090 comm="syz.3.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.300173][ T4937] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.339235][ T4937] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.375103][ T9095] ALSA: seq fatal error: cannot create timer (-19) [ 149.410320][ T4937] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.423032][ T29] audit: type=1400 audit(1761886863.635:4138): avc: denied { mounton } for pid=9099 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 149.566575][ T29] audit: type=1400 audit(1761886863.775:4139): avc: denied { tracepoint } for pid=9110 comm="syz.5.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.597987][ T4937] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.749103][ T4937] bridge0: port 3(batadv0) entered disabled state [ 149.765765][ T4937] bridge_slave_1: left allmulticast mode [ 149.771464][ T4937] bridge_slave_1: left promiscuous mode [ 149.777295][ T4937] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.787949][ T4937] bridge_slave_0: left allmulticast mode [ 149.793639][ T4937] bridge_slave_0: left promiscuous mode [ 149.799377][ T4937] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.861256][ T4937] bond1 (unregistering): (slave geneve2): Releasing active interface [ 149.930071][ T4937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.950525][ T4937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.960550][ T4937] bond0 (unregistering): Released all slaves [ 149.969623][ T4937] bond1 (unregistering): Released all slaves [ 150.014696][ T9099] chnl_net:caif_netlink_parms(): no params data found [ 150.031163][ T4937] IPVS: stopping master sync thread 3648 ... [ 150.045743][ T4937] IPVS: stopping master sync thread 3645 ... [ 150.055659][ T4937] IPVS: stopping master sync thread 3644 ... [ 150.062313][ T4937] IPVS: stopping master sync thread 3643 ... [ 150.070913][ T9098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2124'. [ 150.100401][ T4937] hsr_slave_0: left promiscuous mode [ 150.110445][ T4937] hsr_slave_1: left promiscuous mode [ 150.121299][ T4937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.128938][ T4937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.145311][ T9138] loop4: detected capacity change from 0 to 512 [ 150.152340][ T9138] EXT4-fs: Ignoring removed nobh option [ 150.158445][ T4937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.165975][ T4937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.178045][ T9138] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.2133: corrupted inode contents [ 150.192045][ T4937] veth1_macvtap: left promiscuous mode [ 150.197766][ T4937] veth0_macvtap: left promiscuous mode [ 150.199075][ T9138] EXT4-fs (loop4): Remounting filesystem read-only [ 150.203379][ T4937] veth1_vlan: left promiscuous mode [ 150.215295][ T4937] veth0_vlan: left promiscuous mode [ 150.216041][ T9138] EXT4-fs (loop4): 1 truncate cleaned up [ 150.227255][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2134'. [ 150.236186][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2134'. [ 150.240108][ T9138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.257709][ T9138] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.268985][ T9138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.327734][ T9154] SELinux: ebitmap: truncated map [ 150.333498][ T9154] SELinux: failed to load policy [ 150.369712][ T9159] syz.5.2140: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 150.384448][ T9159] CPU: 0 UID: 0 PID: 9159 Comm: syz.5.2140 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.384483][ T9159] Tainted: [W]=WARN [ 150.384490][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.384504][ T9159] Call Trace: [ 150.384510][ T9159] [ 150.384518][ T9159] __dump_stack+0x1d/0x30 [ 150.384609][ T9159] dump_stack_lvl+0xe8/0x140 [ 150.384631][ T9159] dump_stack+0x15/0x1b [ 150.384650][ T9159] warn_alloc+0x12b/0x1a0 [ 150.384687][ T9159] ? __rcu_read_unlock+0x4f/0x70 [ 150.384763][ T9159] __vmalloc_node_range_noprof+0x9d/0xed0 [ 150.384829][ T9159] ? __futex_wait+0x1fa/0x260 [ 150.384853][ T9159] ? __pfx_futex_wake_mark+0x10/0x10 [ 150.384875][ T9159] ? __rcu_read_unlock+0x4f/0x70 [ 150.384901][ T9159] ? avc_has_perm_noaudit+0x1b1/0x200 [ 150.385002][ T9159] ? should_fail_ex+0x30/0x280 [ 150.385099][ T9159] ? xskq_create+0x36/0xe0 [ 150.385124][ T9159] vmalloc_user_noprof+0x7d/0xb0 [ 150.385160][ T9159] ? xskq_create+0x80/0xe0 [ 150.385182][ T9159] xskq_create+0x80/0xe0 [ 150.385248][ T9159] xsk_init_queue+0x95/0xf0 [ 150.385291][ T9159] xsk_setsockopt+0x3f5/0x640 [ 150.385319][ T9159] ? __pfx_xsk_setsockopt+0x10/0x10 [ 150.385420][ T9159] __sys_setsockopt+0x184/0x200 [ 150.385513][ T9159] __x64_sys_setsockopt+0x64/0x80 [ 150.385551][ T9159] x64_sys_call+0x20ec/0x3000 [ 150.385577][ T9159] do_syscall_64+0xd2/0x200 [ 150.385679][ T9159] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 150.385720][ T9159] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 150.385762][ T9159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.385797][ T9159] RIP: 0033:0x7fa7e57defc9 [ 150.385904][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.385954][ T9159] RSP: 002b:00007fa7e4247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.385978][ T9159] RAX: ffffffffffffffda RBX: 00007fa7e5a35fa0 RCX: 00007fa7e57defc9 [ 150.385993][ T9159] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 150.386009][ T9159] RBP: 00007fa7e5861f91 R08: 0000000000000004 R09: 0000000000000000 [ 150.386068][ T9159] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.386125][ T9159] R13: 00007fa7e5a36038 R14: 00007fa7e5a35fa0 R15: 00007ffc3a91efc8 [ 150.386149][ T9159] [ 150.387371][ T9161] loop9: detected capacity change from 0 to 7 [ 150.397522][ T9159] Mem-Info: [ 150.401583][ T9161] loop9: unable to read partition table [ 150.411685][ T9159] active_anon:3522 inactive_anon:7 isolated_anon:29 [ 150.411685][ T9159] active_file:22953 inactive_file:2298 isolated_file:0 [ 150.411685][ T9159] unevictable:0 dirty:276 writeback:0 [ 150.411685][ T9159] slab_reclaimable:3366 slab_unreclaimable:15765 [ 150.411685][ T9159] mapped:28983 shmem:214 pagetables:958 [ 150.411685][ T9159] sec_pagetables:0 bounce:0 [ 150.411685][ T9159] kernel_misc_reclaimable:0 [ 150.411685][ T9159] free:1871557 free_pcp:22874 free_cma:0 [ 150.415302][ T9161] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 150.415302][ T9161] ) failed (rc=-5) [ 150.418086][ T9159] Node 0 active_anon:14088kB inactive_anon:28kB active_file:91812kB inactive_file:9192kB unevictable:0kB isolated(anon):116kB isolated(file):0kB mapped:115932kB dirty:1104kB writeback:0kB shmem:856kB kernel_stack:4224kB pagetables:3832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 150.717441][ T9159] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.717570][ T9159] lowmem_reserve[]: 0 2881 7859 7859 [ 150.717613][ T9159] Node 0 DMA32 free:2946740kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950268kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 150.717678][ T9159] lowmem_reserve[]: 0 0 4978 4978 [ 150.717752][ T9159] Node 0 Normal free:4524128kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14084kB inactive_anon:28kB active_file:91812kB inactive_file:9188kB unevictable:0kB writepending:1116kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:87900kB local_pcp:37504kB free_cma:0kB [ 150.717835][ T9159] lowmem_reserve[]: 0 0 0 0 [ 150.717902][ T9159] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.718099][ T9159] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946740kB [ 150.718342][ T9159] Node 0 Normal: 0*4kB 2*8kB (ME) 1*16kB (M) 2*32kB (UE) 2*64kB (UE) 131*128kB (UME) 166*256kB (UME) 88*512kB (UME) 68*1024kB (UM) 42*2048kB (UM) 1041*4096kB (UM) = 4524128kB [ 150.873483][ T9159] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 150.874183][ T4937] team0 (unregistering): Port device team_slave_1 removed [ 150.883056][ T9159] 25433 total pagecache pages [ 150.894772][ T9159] 7 pages in swap cache [ 150.898970][ T9159] Free swap = 124968kB [ 150.903134][ T9159] Total swap = 124996kB [ 150.907359][ T9159] 2097051 pages RAM [ 150.911390][ T9159] 0 pages HighMem/MovableOnly [ 150.916417][ T9159] 81084 pages reserved [ 150.920829][ T4937] team0 (unregistering): Port device team_slave_0 removed [ 150.980712][ T9099] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.987880][ T9099] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.000963][ T9099] bridge_slave_0: entered allmulticast mode [ 151.012179][ T9099] bridge_slave_0: entered promiscuous mode [ 151.020156][ T9099] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.027368][ T9099] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.035789][ T5306] Bluetooth: hci0: command 0x1003 tx timeout [ 151.038813][ T9099] bridge_slave_1: entered allmulticast mode [ 151.041840][ T3685] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.048524][ T9099] bridge_slave_1: entered promiscuous mode [ 151.092823][ T9099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.118141][ T9099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.168307][ T9099] team0: Port device team_slave_0 added [ 151.175378][ T9099] team0: Port device team_slave_1 added [ 151.207063][ T9099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.214224][ T9099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.240264][ T9099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.261801][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 151.269699][ T9099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.270785][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 151.277766][ T9099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.312541][ T9099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.377592][ T9099] hsr_slave_0: entered promiscuous mode [ 151.384282][ T9099] hsr_slave_1: entered promiscuous mode [ 151.390286][ T9099] debugfs: 'hsr0' already exists in 'hsr' [ 151.396067][ T9099] Cannot create hsr debugfs directory [ 151.491167][ T9099] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 151.500013][ T9099] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 151.508827][ T9099] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 151.518022][ T9099] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 151.576664][ T9099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.594138][ T9099] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.604938][ T4936] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.612059][ T4936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.623167][ T4912] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.630263][ T4912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.677364][ T9202] loop9: detected capacity change from 0 to 7 [ 151.692585][ T9202] buffer_io_error: 48 callbacks suppressed [ 151.692603][ T9202] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.709984][ T9202] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.718046][ T9202] loop9: unable to read partition table [ 151.724231][ T9202] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 151.724231][ T9202] ) failed (rc=-5) [ 151.737668][ T9198] loop4: detected capacity change from 0 to 8192 [ 151.770354][ T9099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.899962][ T9099] veth0_vlan: entered promiscuous mode [ 151.908007][ T9099] veth1_vlan: entered promiscuous mode [ 151.927044][ T9099] veth0_macvtap: entered promiscuous mode [ 151.934404][ T9099] veth1_macvtap: entered promiscuous mode [ 151.951262][ T9099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.962896][ T9099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.973828][ T4941] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.982897][ T4941] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.995176][ T4941] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.006013][ T4941] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.574516][ T9250] loop6: detected capacity change from 0 to 2048 [ 152.607560][ T9250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 152.649411][ T9250] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 152.664493][ T9250] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 152.676786][ T9250] EXT4-fs (loop6): This should not happen!! Data will be lost [ 152.676786][ T9250] [ 152.686512][ T9250] EXT4-fs (loop6): Total free blocks count 0 [ 152.692550][ T9250] EXT4-fs (loop6): Free/Dirty block details [ 152.698488][ T9250] EXT4-fs (loop6): free_blocks=2415919104 [ 152.704240][ T9250] EXT4-fs (loop6): dirty_blocks=16 [ 152.709504][ T9250] EXT4-fs (loop6): Block reservation details [ 152.715498][ T9250] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 152.724659][ T9257] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 152.799749][ T9265] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2168'. [ 153.243774][ T9316] loop6: detected capacity change from 0 to 256 [ 153.265909][ T9316] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 153.274660][ T9316] FAT-fs (loop6): Filesystem has been set read-only [ 153.608152][ T9349] usb usb8: usbfs: process 9349 (syz.6.2206) did not claim interface 0 before use [ 153.862925][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 153.862997][ T29] audit: type=1400 audit(1761886868.085:4251): avc: denied { setopt } for pid=9368 comm="syz.7.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.949772][ T29] audit: type=1326 audit(1761886868.165:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.4.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c72befc9 code=0x7ffc0000 [ 153.973390][ T29] audit: type=1326 audit(1761886868.165:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.4.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c72befc9 code=0x7ffc0000 [ 154.081250][ T29] audit: type=1400 audit(1761886868.305:4254): avc: denied { create } for pid=9380 comm="syz.3.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.122717][ T29] audit: type=1400 audit(1761886868.345:4255): avc: denied { write } for pid=9380 comm="syz.3.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.226770][ T29] audit: type=1400 audit(1761886868.455:4256): avc: denied { relabelfrom } for pid=9394 comm="syz.4.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 154.246920][ T29] audit: type=1400 audit(1761886868.455:4257): avc: denied { relabelto } for pid=9394 comm="syz.4.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 154.296775][ T9389] Falling back ldisc for ttyS3. [ 154.365577][ T29] audit: type=1400 audit(1761886868.585:4258): avc: denied { bind } for pid=9403 comm="syz.5.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.385268][ T29] audit: type=1400 audit(1761886868.585:4259): avc: denied { listen } for pid=9403 comm="syz.5.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.404976][ T29] audit: type=1400 audit(1761886868.585:4260): avc: denied { connect } for pid=9403 comm="syz.5.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.575912][ T9416] netlink: 'syz.5.2236': attribute type 10 has an invalid length. [ 154.666085][ T9416] team0: Port device dummy0 added [ 154.666334][ T9422] netlink: 'syz.5.2236': attribute type 10 has an invalid length. [ 154.686540][ T9422] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 154.743388][ T9422] team0: Failed to send options change via netlink (err -105) [ 154.759731][ T9422] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 154.768911][ T9422] team0: Port device dummy0 removed [ 154.777746][ T9422] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 155.043618][ T9455] SELinux: failed to load policy [ 155.093467][ T9469] loop7: detected capacity change from 0 to 512 [ 155.123352][ T9474] SELinux: policydb version -1784094321 does not match my version range 15-35 [ 155.134342][ T9469] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.147027][ T9474] SELinux: failed to load policy [ 155.155992][ T9469] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.194547][ T9099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.749177][ T1033] hid_parser_main: 18 callbacks suppressed [ 155.749200][ T1033] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 155.762816][ T1033] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 155.773574][ T1033] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3 [ 155.782179][ T1033] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 156.037375][ T9530] netlink: 51 bytes leftover after parsing attributes in process `syz.5.2276'. [ 156.066669][ T9529] macvtap0: refused to change device tx_queue_len [ 156.104465][ T9535] loop4: detected capacity change from 0 to 256 [ 156.240560][ T9552] loop7: detected capacity change from 0 to 128 [ 156.256751][ T9552] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.285970][ T9552] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.446256][ T9571] loop7: detected capacity change from 0 to 512 [ 156.453136][ T9571] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 156.481251][ T9571] EXT4-fs (loop7): orphan cleanup on readonly fs [ 156.497829][ T9571] EXT4-fs error (device loop7): ext4_orphan_get:1392: comm syz.7.2301: inode #15: comm syz.7.2301: iget: illegal inode # [ 156.531559][ T9571] EXT4-fs (loop7): Remounting filesystem read-only [ 156.546237][ T9571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 156.617938][ T9099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.689258][ T9572] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2291'. [ 156.699412][ T9584] netlink: 'syz.4.2305': attribute type 10 has an invalid length. [ 156.729316][ T9584] netlink: 'syz.4.2305': attribute type 10 has an invalid length. [ 156.745625][ T9584] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 156.866905][ T9592] Falling back ldisc for ttyS3. [ 157.005476][ T9607] loop5: detected capacity change from 0 to 256 [ 157.077234][ T9607] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 157.085113][ T9607] FAT-fs (loop5): Filesystem has been set read-only [ 157.106951][ T9607] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 157.114992][ T9607] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 157.123360][ T9607] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 157.160444][ T9622] netlink: 'syz.6.2321': attribute type 10 has an invalid length. [ 157.199807][ T9622] team0: Port device dummy0 added [ 157.210730][ T9622] netlink: 'syz.6.2321': attribute type 10 has an invalid length. [ 157.222780][ T9622] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 157.231619][ T9629] loop5: detected capacity change from 0 to 512 [ 157.238160][ T9622] team0: Failed to send options change via netlink (err -105) [ 157.246521][ T9622] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 157.258084][ T9622] team0: Port device dummy0 removed [ 157.263550][ T9631] loop3: detected capacity change from 0 to 512 [ 157.269426][ T9622] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 157.280205][ T9629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.294374][ T9629] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.305791][ T9631] EXT4-fs (loop3): 1 truncate cleaned up [ 157.311950][ T9631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.347666][ T9631] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2325: bg 0: block 465: padding at end of block bitmap is not set [ 157.363281][ T9629] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2324: corrupted inode contents [ 157.375205][ T9631] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 157.375236][ T9631] EXT4-fs (loop3): This should not happen!! Data will be lost [ 157.375236][ T9631] [ 157.399911][ T9642] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2328'. [ 157.412335][ T9629] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2324: mark_inode_dirty error [ 157.427385][ T9629] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2324: corrupted inode contents [ 157.439525][ T9629] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.2324: mark_inode_dirty error [ 157.439549][ T4937] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 157.463170][ T4937] EXT4-fs (loop3): This should not happen!! Data will be lost [ 157.463170][ T4937] [ 157.472863][ T4937] EXT4-fs (loop3): Total free blocks count 0 [ 157.478948][ T4937] EXT4-fs (loop3): Free/Dirty block details [ 157.484855][ T4937] EXT4-fs (loop3): free_blocks=0 [ 157.489832][ T4937] EXT4-fs (loop3): dirty_blocks=64 [ 157.494984][ T4937] EXT4-fs (loop3): Block reservation details [ 157.527237][ T9646] syzkaller0: entered promiscuous mode [ 157.532765][ T9646] syzkaller0: entered allmulticast mode [ 157.546782][ T5924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.590396][ T9654] loop5: detected capacity change from 0 to 512 [ 157.601319][ T9656] sd 0:0:1:0: device reset [ 157.617704][ T9654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.630909][ T9654] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.661192][ T5924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.733477][ T9673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.862531][ T9687] loop4: detected capacity change from 0 to 2048 [ 157.916876][ T9687] Alternate GPT is invalid, using primary GPT. [ 157.923285][ T9687] loop4: p1 p2 p3 [ 157.927108][ T9687] loop4: partition table partially beyond EOD, truncated [ 158.023116][ C1] sd 0:0:1:0: [sda] tag#3033 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 158.033572][ C1] sd 0:0:1:0: [sda] tag#3033 CDB: Write(6) 0a 00 00 00 06 00 00 00 02 00 00 00 [ 158.093623][ T9712] netdevsim netdevsim5: Direct firmware load for ÿÿÿÿ failed with error -2 [ 158.148802][ T9718] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2363' sets config #0 [ 158.186388][ T9723] netlink: 'syz.6.2364': attribute type 4 has an invalid length. [ 158.263827][ T4937] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.274170][ T4937] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.310582][ T9735] loop6: detected capacity change from 0 to 512 [ 158.317858][ T4937] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.328242][ T4937] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.340210][ T9735] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 158.352740][ T9735] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 158.424086][ T4937] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.434471][ T4937] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.457920][ T9747] loop4: detected capacity change from 0 to 512 [ 158.468667][ T9747] EXT4-fs: Ignoring removed i_version option [ 158.474728][ T9747] EXT4-fs: Ignoring removed bh option [ 158.486181][ T9750] loop7: detected capacity change from 0 to 512 [ 158.510066][ T9747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.523250][ T9750] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 158.533896][ T9747] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.548923][ T4937] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.559365][ T4937] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.582305][ T9750] EXT4-fs (loop7): 1 truncate cleaned up [ 158.591749][ T9750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.667214][ T9099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.697777][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.788087][ T4937] bridge_slave_1: left allmulticast mode [ 158.793825][ T4937] bridge_slave_1: left promiscuous mode [ 158.799850][ T4937] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.819964][ T9780] loop6: detected capacity change from 0 to 2048 [ 158.827011][ T9780] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.833482][ T9780] EXT4-fs: Ignoring removed i_version option [ 158.841240][ T4937] bridge_slave_0: left allmulticast mode [ 158.847054][ T4937] bridge_slave_0: left promiscuous mode [ 158.852780][ T4937] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.877876][ T9780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.904049][ T6876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.948344][ T4937] bond1 (unregistering): (slave geneve2): Releasing active interface [ 158.978420][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 158.978497][ T29] audit: type=1326 audit(1761886873.205:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9794 comm="syz.6.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 159.021216][ T4937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.030159][ T29] audit: type=1326 audit(1761886873.235:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9794 comm="syz.6.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 159.053657][ T29] audit: type=1326 audit(1761886873.235:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9794 comm="syz.6.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 159.077114][ T29] audit: type=1326 audit(1761886873.235:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9794 comm="syz.6.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 159.100637][ T29] audit: type=1326 audit(1761886873.235:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9794 comm="syz.6.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 159.124109][ T29] audit: type=1326 audit(1761886873.235:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9794 comm="syz.6.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 159.147601][ T29] audit: type=1326 audit(1761886873.235:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9794 comm="syz.6.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 159.170851][ T29] audit: type=1326 audit(1761886873.235:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9794 comm="syz.6.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 159.194425][ T29] audit: type=1326 audit(1761886873.235:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9794 comm="syz.6.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 159.217980][ T29] audit: type=1326 audit(1761886873.235:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9794 comm="syz.6.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 159.255943][ T4937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.277443][ T4937] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 159.305824][ T4937] bond0 (unregistering): Released all slaves [ 159.319081][ T4937] bond1 (unregistering): Released all slaves [ 159.331963][ T9742] chnl_net:caif_netlink_parms(): no params data found [ 159.387322][ T9804] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 159.403837][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.418575][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.456618][ T9742] bridge_slave_0: entered allmulticast mode [ 159.473360][ T9742] bridge_slave_0: entered promiscuous mode [ 159.483599][ T4937] tipc: Disabling bearer [ 159.488898][ T4937] tipc: Left network mode [ 159.497574][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.504656][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.514684][ T9742] bridge_slave_1: entered allmulticast mode [ 159.521412][ T9742] bridge_slave_1: entered promiscuous mode [ 159.573431][ T4937] hsr_slave_0: left promiscuous mode [ 159.580391][ T4937] hsr_slave_1: left promiscuous mode [ 159.586229][ T4937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.593619][ T4937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.609230][ T4937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.616692][ T4937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.629459][ T4937] veth1_macvtap: left promiscuous mode [ 159.635911][ T4937] veth0_macvtap: left promiscuous mode [ 159.642110][ T4937] veth1_vlan: left promiscuous mode [ 159.647392][ T4937] veth0_vlan: left promiscuous mode [ 159.714638][ T4937] team0 (unregistering): Port device team_slave_1 removed [ 159.726435][ T4937] team0 (unregistering): Port device team_slave_0 removed [ 159.777100][ T9742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.794327][ T9742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.848415][ T9841] loop7: detected capacity change from 0 to 512 [ 159.851500][ T9742] team0: Port device team_slave_0 added [ 159.855286][ T9841] EXT4-fs: Ignoring removed bh option [ 159.869104][ T9742] team0: Port device team_slave_1 added [ 159.883617][ T9841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.901817][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.908958][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.934941][ T9742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.947149][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.954120][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.980149][ T9742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.980190][ T9841] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.045462][ T9742] hsr_slave_0: entered promiscuous mode [ 160.051816][ T9742] hsr_slave_1: entered promiscuous mode [ 160.078242][ T9099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.154534][ T9742] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 160.165753][ T9742] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 160.188338][ T9742] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 160.211167][ T9742] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 160.338276][ T9873] pim6reg1: entered promiscuous mode [ 160.343621][ T9873] pim6reg1: entered allmulticast mode [ 160.444164][ T9742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.459554][ T9742] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.469768][ T9880] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2422'. [ 160.484310][ T4912] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.491543][ T4912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.531331][ T4912] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.538684][ T4912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.616750][ T9892] netlink: 'syz.4.2425': attribute type 2 has an invalid length. [ 160.624653][ T9892] netlink: 11970 bytes leftover after parsing attributes in process `syz.4.2425'. [ 160.675552][ T9898] loop5: detected capacity change from 0 to 2048 [ 160.727569][ T9742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.736198][ T9898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.807506][ T9918] hub 9-0:1.0: USB hub found [ 160.812311][ T9918] hub 9-0:1.0: 8 ports detected [ 160.829253][ T5924] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 160.860846][ T5924] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 160.902055][ T5924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.929040][ T9936] $Hÿ: renamed from bond0 (while UP) [ 160.940733][ T9936] $Hÿ: entered promiscuous mode [ 160.946018][ T9936] bond_slave_0: entered promiscuous mode [ 160.951831][ T9936] bond_slave_1: entered promiscuous mode [ 160.957819][ T9936] dummy0: entered promiscuous mode [ 161.001007][ T9742] veth0_vlan: entered promiscuous mode [ 161.009651][ T9742] veth1_vlan: entered promiscuous mode [ 161.027156][ T9742] veth0_macvtap: entered promiscuous mode [ 161.037533][ T9742] veth1_macvtap: entered promiscuous mode [ 161.047959][ T9742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.058659][ T9742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.066651][ T9945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2440'. [ 161.078586][ T4942] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.093485][ T4942] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.106552][ T4942] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.119828][ T4942] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.153309][ T9951] SELinux: failed to load policy [ 161.416994][ T9965] loop6: detected capacity change from 0 to 32768 [ 161.466880][ T9965] loop6: p1 p2 p3 < p5 p6 p7 > [ 161.474573][ T9965] loop6: p2 size 16775168 extends beyond EOD, truncated [ 161.483158][ T9965] loop6: p5 start 4294970168 is beyond EOD, truncated [ 161.576934][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2454'. [ 161.609381][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2455'. [ 161.665450][ T9993] loop5: detected capacity change from 0 to 512 [ 161.673403][ T9993] EXT4-fs: Ignoring removed nobh option [ 161.697968][ T9993] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.2457: corrupted inode contents [ 161.718080][ T9993] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #3: comm syz.5.2457: mark_inode_dirty error [ 161.730614][ T9993] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.2457: corrupted inode contents [ 161.744516][ T9993] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.2457: mark_inode_dirty error [ 161.761967][ T9993] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2457: Failed to acquire dquot type 0 [ 161.774197][ T9993] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.2457: corrupted inode contents [ 161.787897][ T9993] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.2457: mark_inode_dirty error [ 161.801155][ T9993] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.2457: corrupted inode contents [ 161.813894][ T9993] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2457: mark_inode_dirty error [ 161.845275][ T9993] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.2457: corrupted inode contents [ 161.857952][ T9993] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 161.867059][ T9993] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.2457: corrupted inode contents [ 161.879836][ T9993] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.2457: mark_inode_dirty error [ 161.892257][ T9993] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 161.908790][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2463'. [ 161.918445][ T9993] EXT4-fs (loop5): 1 truncate cleaned up [ 161.924836][ T9993] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.935572][T10019] loop6: detected capacity change from 0 to 1024 [ 161.943178][T10019] EXT4-fs: Ignoring removed nobh option [ 161.949045][T10019] EXT4-fs: Ignoring removed bh option [ 162.105630][T10039] loop4: detected capacity change from 0 to 2048 [ 162.131009][T10039] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.137593][T10039] EXT4-fs: Ignoring removed i_version option [ 162.173340][T10045] pim6reg1: entered allmulticast mode [ 162.541615][T10060] loop4: detected capacity change from 0 to 512 [ 162.567034][T10060] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 162.581236][T10060] EXT4-fs (loop4): orphan cleanup on readonly fs [ 162.598470][T10060] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.2479: corrupted inode contents [ 162.611035][T10060] EXT4-fs (loop4): Remounting filesystem read-only [ 162.618016][T10060] EXT4-fs (loop4): 1 truncate cleaned up [ 162.624277][ T4912] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 162.634938][ T4912] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 162.651626][T10066] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 162.661721][T10066] block device autoloading is deprecated and will be removed. [ 162.669887][ T4912] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 162.732873][T10070] loop7: detected capacity change from 0 to 2048 [ 162.750850][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2485'. [ 162.760721][T10074] loop4: detected capacity change from 0 to 512 [ 162.768165][T10074] EXT4-fs: Ignoring removed oldalloc option [ 162.774668][T10070] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.2484: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 162.794061][T10070] EXT4-fs (loop7): Remounting filesystem read-only [ 162.796988][T10074] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.816022][T10074] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2486: bg 0: block 217: padding at end of block bitmap is not set [ 162.826421][T10081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.831366][T10074] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 162.839448][T10081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.873216][T10083] loop7: detected capacity change from 0 to 128 [ 162.883392][T10083] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 163.002423][T10093] loop7: detected capacity change from 0 to 4096 [ 163.181172][T10106] serio: Serial port ptm0 [ 163.286381][T10121] program syz.4.2505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.513173][T10155] loop6: detected capacity change from 0 to 128 [ 163.542510][T10155] ext4 filesystem being mounted at /268/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 163.711764][T10176] loop6: detected capacity change from 0 to 1156 [ 164.003294][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 164.003308][ T29] audit: type=1326 audit(1761886878.225:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10198 comm="syz.5.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e57defc9 code=0x7ffc0000 [ 164.096006][ T29] audit: type=1326 audit(1761886878.225:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10198 comm="syz.5.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e57defc9 code=0x7ffc0000 [ 164.264755][T10215] loop4: detected capacity change from 0 to 512 [ 164.338042][ T29] audit: type=1326 audit(1761886878.555:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.8.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4318efc9 code=0x7ffc0000 [ 164.361733][ T29] audit: type=1326 audit(1761886878.555:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.8.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4318efc9 code=0x7ffc0000 [ 164.385253][ T29] audit: type=1326 audit(1761886878.555:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.8.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f8e4318efc9 code=0x7ffc0000 [ 164.409087][ T29] audit: type=1326 audit(1761886878.555:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.8.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4318efc9 code=0x7ffc0000 [ 164.432721][ T29] audit: type=1326 audit(1761886878.555:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.8.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4318efc9 code=0x7ffc0000 [ 164.456297][ T29] audit: type=1326 audit(1761886878.555:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.8.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e4318efc9 code=0x7ffc0000 [ 164.480049][ T29] audit: type=1326 audit(1761886878.555:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.8.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4318efc9 code=0x7ffc0000 [ 164.503582][ T29] audit: type=1326 audit(1761886878.555:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.8.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4318efc9 code=0x7ffc0000 [ 164.540706][T10215] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.606872][T10229] SELinux: failed to load policy [ 164.700526][T10239] loop4: detected capacity change from 0 to 128 [ 164.704459][T10231] loop8: detected capacity change from 0 to 1024 [ 164.725306][T10231] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 164.768795][T10231] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.2543: Invalid block bitmap block 0 in block_group 0 [ 164.791522][T10231] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.2543: Failed to acquire dquot type 0 [ 164.806403][T10231] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.2543: Freeing blocks not in datazone - block = 0, count = 4096 [ 164.828158][T10231] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.2543: Invalid inode bitmap blk 0 in block_group 0 [ 164.845889][T10231] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 164.845906][ T4942] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:64: Failed to release dquot type 0 [ 164.866891][T10231] EXT4-fs (loop8): 1 orphan inode deleted [ 164.918536][T10258] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2556'. [ 164.972453][T10264] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 164.980733][T10264] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 165.041617][T10272] tipc: Started in network mode [ 165.046571][T10272] tipc: Node identity ac14140f, cluster identity 4711 [ 165.053597][T10272] tipc: New replicast peer: 255.255.255.255 [ 165.059789][T10272] tipc: Enabled bearer , priority 10 [ 165.067064][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2563'. [ 165.076172][T10272] tipc: Disabling bearer [ 165.165414][T10279] loop5: detected capacity change from 0 to 4096 [ 165.291973][T10288] netlink: 'syz.4.2570': attribute type 12 has an invalid length. [ 165.400496][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2576'. [ 165.409841][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2576'. [ 165.445419][T10302] loop7: detected capacity change from 0 to 512 [ 165.457979][T10300] loop5: detected capacity change from 0 to 1024 [ 165.468482][T10302] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.479442][T10300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.505471][T10308] atomic_op ffff88810f38c528 conn xmit_atomic 0000000000000000 [ 165.575063][T10314] loop8: detected capacity change from 0 to 1764 [ 165.741087][ T10] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 165.748745][ T10] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 165.756318][ T10] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 165.763875][ T10] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 165.771331][ T10] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 165.778888][ T10] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 165.786345][ T10] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 165.793746][ T10] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 165.801299][ T10] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 165.808712][ T10] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 165.830662][ T10] hid-generic 0003:0003:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 165.897182][T10344] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2592'. [ 165.906809][T10344] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 165.924706][T10343] loop4: detected capacity change from 0 to 512 [ 165.952836][T10343] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.003945][T10355] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 166.056457][T10363] loop8: detected capacity change from 0 to 512 [ 166.067193][T10363] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 166.082694][T10363] EXT4-fs (loop8): mount failed [ 166.318185][T10378] infiniband syz!: set active [ 166.323296][T10378] infiniband syz!: added team_slave_0 [ 166.339965][T10378] RDS/IB: syz!: added [ 166.348708][T10378] smc: adding ib device syz! with port count 1 [ 166.361591][T10378] smc: ib device syz! port 1 has no pnetid [ 166.382472][T10383] loop6: detected capacity change from 0 to 4096 [ 166.555393][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2612'. [ 166.691766][T10402] netlink: 'syz.8.2615': attribute type 1 has an invalid length. [ 166.699588][T10402] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2615'. [ 166.798758][T10413] loop5: detected capacity change from 0 to 1024 [ 166.990400][T10432] loop7: detected capacity change from 0 to 1024 [ 167.046402][T10432] EXT4-fs mount: 33 callbacks suppressed [ 167.046425][T10432] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.145101][ T9099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.229466][ T5924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.944817][T10484] loop8: detected capacity change from 0 to 1024 [ 167.960424][T10484] EXT4-fs: Ignoring removed orlov option [ 167.966302][T10484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.984775][T10484] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.011750][T10484] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 168.024091][T10484] EXT4-fs (loop8): This should not happen!! Data will be lost [ 168.024091][T10484] [ 168.033956][T10484] EXT4-fs (loop8): Total free blocks count 0 [ 168.040020][T10484] EXT4-fs (loop8): Free/Dirty block details [ 168.046036][T10484] EXT4-fs (loop8): free_blocks=0 [ 168.051079][T10484] EXT4-fs (loop8): dirty_blocks=0 [ 168.054557][T10468] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2642'. [ 168.056398][T10484] EXT4-fs (loop8): Block reservation details [ 168.071450][T10484] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 168.099162][T10492] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2648'. [ 168.123767][ T9742] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.224520][T10499] netlink: 'syz.8.2651': attribute type 13 has an invalid length. [ 168.274912][T10499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.425055][T10518] netlink: 176 bytes leftover after parsing attributes in process `syz.8.2663'. [ 168.701450][T10553] veth0_to_team: entered promiscuous mode [ 168.870576][T10570] loop7: detected capacity change from 0 to 512 [ 168.889136][T10570] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.907269][T10570] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.976013][ T9099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.131516][T10598] loop4: detected capacity change from 0 to 1024 [ 169.152784][T10598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.165629][T10579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.185489][T10579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.212156][T10606] veth0_to_team: entered promiscuous mode [ 169.277788][T10610] netlink: 'syz.7.2703': attribute type 13 has an invalid length. [ 169.385277][T10610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.429323][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 169.429338][ T29] audit: type=1400 audit(1761886883.655:4697): avc: denied { connect } for pid=10617 comm="syz.7.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.569547][T10632] loop6: detected capacity change from 0 to 512 [ 169.589042][T10632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.611975][T10632] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.665608][ T6876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.804285][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.860032][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2720'. [ 169.945003][T10653] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2723'. [ 169.998892][T10655] netlink: 'syz.6.2725': attribute type 1 has an invalid length. [ 170.056395][ T29] audit: type=1326 audit(1761886884.275:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10661 comm="syz.7.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54366efc9 code=0x7ffc0000 [ 170.080040][ T29] audit: type=1326 audit(1761886884.275:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10661 comm="syz.7.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54366efc9 code=0x7ffc0000 [ 170.103548][ T29] audit: type=1400 audit(1761886884.285:4700): avc: denied { watch watch_reads } for pid=10660 comm="syz.4.2727" path="/proc/1307" dev="proc" ino=31279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 170.127632][ T29] audit: type=1326 audit(1761886884.285:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10661 comm="syz.7.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54366efc9 code=0x7ffc0000 [ 170.151295][ T29] audit: type=1326 audit(1761886884.285:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10661 comm="syz.7.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54366efc9 code=0x7ffc0000 [ 170.174805][ T29] audit: type=1326 audit(1761886884.285:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10661 comm="syz.7.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54366efc9 code=0x7ffc0000 [ 170.203662][ T29] audit: type=1326 audit(1761886884.425:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10661 comm="syz.7.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54366efc9 code=0x7ffc0000 [ 170.264549][T10665] loop4: detected capacity change from 0 to 2048 [ 170.273965][ T29] audit: type=1326 audit(1761886884.475:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10661 comm="syz.7.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54366efc9 code=0x7ffc0000 [ 170.297570][ T29] audit: type=1326 audit(1761886884.475:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10661 comm="syz.7.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54366efc9 code=0x7ffc0000 [ 170.366460][T10665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.415388][T10665] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.497213][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.577749][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2738'. [ 170.701905][T10701] loop4: detected capacity change from 0 to 512 [ 170.734322][T10701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 170.749323][T10701] EXT4-fs (loop4): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 170.772009][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.884122][T10717] loop5: detected capacity change from 0 to 256 [ 170.919006][T10717] FAT-fs (loop5): Directory bread(block 64) failed [ 170.942046][T10717] FAT-fs (loop5): Directory bread(block 65) failed [ 170.957710][T10717] FAT-fs (loop5): Directory bread(block 66) failed [ 170.965403][T10717] FAT-fs (loop5): Directory bread(block 67) failed [ 170.972080][T10717] FAT-fs (loop5): Directory bread(block 68) failed [ 170.979426][T10717] FAT-fs (loop5): Directory bread(block 69) failed [ 170.990384][T10720] loop7: detected capacity change from 0 to 1024 [ 170.997355][T10720] EXT4-fs: Ignoring removed orlov option [ 171.003181][T10720] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.009926][T10717] FAT-fs (loop5): Directory bread(block 70) failed [ 171.017214][T10717] FAT-fs (loop5): Directory bread(block 71) failed [ 171.023996][T10717] FAT-fs (loop5): Directory bread(block 72) failed [ 171.030849][T10717] FAT-fs (loop5): Directory bread(block 73) failed [ 171.041844][T10720] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.062014][T10720] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 171.074397][T10720] EXT4-fs (loop7): This should not happen!! Data will be lost [ 171.074397][T10720] [ 171.084220][T10720] EXT4-fs (loop7): Total free blocks count 0 [ 171.090261][T10720] EXT4-fs (loop7): Free/Dirty block details [ 171.096170][T10720] EXT4-fs (loop7): free_blocks=0 [ 171.101196][T10720] EXT4-fs (loop7): dirty_blocks=0 [ 171.106276][T10720] EXT4-fs (loop7): Block reservation details [ 171.112281][T10720] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 171.138579][ T9099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.214819][T10731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.260521][T10731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.287500][T10740] loop5: detected capacity change from 0 to 512 [ 171.296353][T10740] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2760: error while reading EA inode 32 err=-116 [ 171.309090][T10740] EXT4-fs (loop5): Remounting filesystem read-only [ 171.315883][T10740] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 171.326223][T10740] EXT4-fs (loop5): 1 orphan inode deleted [ 171.332516][T10740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.332745][T10731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.370599][ T5924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.409196][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2763'. [ 171.423128][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2763'. [ 171.434513][T10731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.446242][ T4937] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.455573][ T4937] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.465446][ T4937] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.479134][ T4937] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.504821][ T4937] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.517670][ T4937] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.533710][T10755] raw_sendmsg: syz.7.2767 forgot to set AF_INET. Fix it! [ 171.534800][ T4937] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.550299][ T4937] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.726977][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2781'. [ 171.922004][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2794'. [ 172.115587][T10832] netlink: 'syz.8.2802': attribute type 6 has an invalid length. [ 172.143331][T10836] netlink: 'syz.5.2804': attribute type 1 has an invalid length. [ 172.512516][T10862] ipip0: entered promiscuous mode [ 172.533329][T10861] loop5: detected capacity change from 0 to 2048 [ 172.570692][T10861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.616099][T10861] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.665084][ T5924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.682119][T10880] loop4: detected capacity change from 0 to 128 [ 172.699600][T10880] bio_check_eod: 74 callbacks suppressed [ 172.699618][T10880] syz.4.2821: attempt to access beyond end of device [ 172.699618][T10880] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 172.736233][T10880] syz.4.2821: attempt to access beyond end of device [ 172.736233][T10880] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 172.749727][T10880] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 172.762228][T10880] syz.4.2821: attempt to access beyond end of device [ 172.762228][T10880] loop4: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 172.778506][T10880] syz.4.2821: attempt to access beyond end of device [ 172.778506][T10880] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 172.792204][T10880] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 172.803443][T10880] syz.4.2821: attempt to access beyond end of device [ 172.803443][T10880] loop4: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 172.818296][T10880] syz.4.2821: attempt to access beyond end of device [ 172.818296][T10880] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 172.831744][T10880] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 172.843851][T10880] syz.4.2821: attempt to access beyond end of device [ 172.843851][T10880] loop4: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 172.857887][T10880] syz.4.2821: attempt to access beyond end of device [ 172.857887][T10880] loop4: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 172.871528][T10880] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 172.893152][T10880] syz.4.2821: attempt to access beyond end of device [ 172.893152][T10880] loop4: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 172.909542][T10880] syz.4.2821: attempt to access beyond end of device [ 172.909542][T10880] loop4: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 172.923083][T10880] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 172.934443][T10880] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 172.946542][ T3395] hid_parser_main: 8 callbacks suppressed [ 172.946563][ T3395] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 172.952586][T10887] loop8: detected capacity change from 0 to 4096 [ 172.959870][ T3395] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 172.966696][T10887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.973551][ T3395] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 172.987695][ T3395] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 172.995102][ T3395] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 173.002542][ T3395] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 173.009969][ T3395] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 173.017395][ T3395] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 173.019080][T10880] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 173.024800][ T3395] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 173.040842][ T3395] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 173.041369][T10880] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 173.049968][ T3395] hid-generic 0003:0003:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 173.077292][T10887] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.093410][T10892] netlink: 'syz.5.2826': attribute type 30 has an invalid length. [ 173.093745][T10880] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 173.112979][T10880] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 173.181640][ T9742] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.255397][T10896] loop8: detected capacity change from 0 to 4096 [ 173.264360][T10896] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.293539][ T9742] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.498162][T10925] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 173.510157][T10927] serio: Serial port ptm0 [ 173.691753][T10942] __nla_validate_parse: 4 callbacks suppressed [ 173.691769][T10942] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2837'. [ 173.734040][T10946] netlink: 'syz.7.2851': attribute type 39 has an invalid length. [ 173.818636][T10906] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2832'. [ 174.381534][T10991] loop5: detected capacity change from 0 to 512 [ 174.391402][T10991] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.2869: corrupted in-inode xattr: invalid ea_ino [ 174.405396][T10991] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2869: couldn't read orphan inode 15 (err -117) [ 174.420952][T10991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.440717][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 174.440734][ T29] audit: type=1400 audit(1761886888.665:5029): avc: denied { create } for pid=10990 comm="syz.5.2869" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 174.501078][T10998] netlink: 'syz.6.2872': attribute type 39 has an invalid length. [ 174.530953][ T29] audit: type=1400 audit(1761886888.735:5030): avc: denied { rename } for pid=10990 comm="syz.5.2869" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.577449][ T5924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.601425][T11003] batadv_slave_1: entered promiscuous mode [ 174.608189][T11003] batadv_slave_1: left promiscuous mode [ 174.643767][T11007] netlink: 'syz.7.2874': attribute type 30 has an invalid length. [ 174.667260][ T29] audit: type=1326 audit(1761886888.895:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e57defc9 code=0x7ffc0000 [ 174.691475][ T29] audit: type=1326 audit(1761886888.895:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11009 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e57defc9 code=0x7ffc0000 [ 174.746208][T11012] loop4: detected capacity change from 0 to 512 [ 174.768199][T11012] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2878: error while reading EA inode 32 err=-116 [ 174.778884][T11019] loop7: detected capacity change from 0 to 128 [ 174.791300][T11012] EXT4-fs (loop4): Remounting filesystem read-only [ 174.799470][T11012] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 174.810160][T11012] EXT4-fs (loop4): 1 orphan inode deleted [ 174.817170][T11012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.840824][T11022] netlink: 'syz.6.2879': attribute type 12 has an invalid length. [ 174.901284][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.986701][ T29] audit: type=1326 audit(1761886889.215:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 175.030812][T11044] vhci_hcd: invalid port number 255 [ 175.055341][T11054] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2897'. [ 175.070300][T11058] loop5: detected capacity change from 0 to 512 [ 175.073707][ T29] audit: type=1326 audit(1761886889.235:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 175.079823][T11058] EXT4-fs: inline encryption not supported [ 175.100305][ T29] audit: type=1326 audit(1761886889.235:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 175.129782][ T29] audit: type=1326 audit(1761886889.235:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 175.153301][ T29] audit: type=1326 audit(1761886889.235:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 175.153766][T11058] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 175.176810][ T29] audit: type=1326 audit(1761886889.235:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.6.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc913fefc9 code=0x7ffc0000 [ 175.225425][T11058] EXT4-fs (loop5): 1 truncate cleaned up [ 175.234583][T11058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.298071][ T5924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.339780][T11072] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2907'. [ 175.350682][T11072] netem: change failed [ 175.437111][T11091] loop6: detected capacity change from 0 to 512 [ 175.454198][T11091] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.723022][ T9] hid-generic 0000:0003:0000.0008: hidraw0: HID v0.03 Device [syz0] on syz1 [ 175.766635][T11107] loop7: detected capacity change from 0 to 512 [ 175.776008][T11107] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 175.800287][T11107] EXT4-fs (loop7): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 175.831213][ T9099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.867815][T11116] smc: net device bond0 applied user defined pnetid SYZ0 [ 175.875195][T11116] smc: net device bond0 erased user defined pnetid SYZ0 [ 176.223396][T11129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2929'. [ 176.225934][T11126] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 176.470758][T11145] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 176.738727][T11161] loop5: detected capacity change from 0 to 7279 [ 176.764196][T11161] loop5: detected capacity change from 7279 to 9791 [ 176.876614][T11173] loop7: detected capacity change from 0 to 164 [ 177.083337][T11184] bridge0: entered promiscuous mode [ 177.094437][T11184] macsec1: entered promiscuous mode [ 177.105326][T11184] bridge0: port 3(macsec1) entered blocking state [ 177.112155][T11184] bridge0: port 3(macsec1) entered disabled state [ 177.119963][T11184] macsec1: entered allmulticast mode [ 177.125443][T11184] bridge0: entered allmulticast mode [ 177.131691][T11184] macsec1: left allmulticast mode [ 177.136757][T11184] bridge0: left allmulticast mode [ 177.142493][T11184] bridge0: left promiscuous mode [ 177.231913][T11187] loop7: detected capacity change from 0 to 764 [ 177.246039][T11187] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 177.255646][T11187] Symlink component flag not implemented [ 177.261621][T11187] Symlink component flag not implemented (7) [ 177.432401][T11195] netlink: 'syz.7.2958': attribute type 5 has an invalid length. [ 177.504079][T11196] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2953'. [ 177.549917][T11199] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 177.676158][T11207] loop8: detected capacity change from 0 to 256 [ 177.685112][T11209] netlink: 'syz.6.2963': attribute type 12 has an invalid length. [ 177.807388][T11221] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2969'. [ 177.971783][T11234] netlink: 'syz.6.2975': attribute type 1 has an invalid length. [ 178.068282][T11239] loop6: detected capacity change from 0 to 1024 [ 178.121152][T11239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.160766][T11252] netlink: 'syz.4.2982': attribute type 10 has an invalid length. [ 178.173240][T11252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.181881][T11252] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 178.195505][T11252] netlink: 'syz.4.2982': attribute type 10 has an invalid length. [ 178.203599][T11252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2982'. [ 178.213170][T11252] batadv0: entered promiscuous mode [ 178.218578][T11252] batadv0: entered allmulticast mode [ 178.225520][T11252] bond0: (slave batadv0): Releasing backup interface [ 178.236601][T11252] bridge0: port 3(batadv0) entered blocking state [ 178.243080][T11252] bridge0: port 3(batadv0) entered disabled state [ 178.259182][T11256] lo speed is unknown, defaulting to 1000 [ 178.276180][T11256] lo speed is unknown, defaulting to 1000 [ 178.284107][T11256] lo speed is unknown, defaulting to 1000 [ 178.305408][T11261] SELinux: Context system_u:object_r:auditd_etc_t:s0 is not valid (left unmapped). [ 178.315305][ T6876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.353284][T11256] infiniband syz2: set active [ 178.358087][T11256] infiniband syz2: added lo [ 178.363000][ T10] lo speed is unknown, defaulting to 1000 [ 178.387083][T11256] RDS/IB: syz2: added [ 178.391223][T11256] smc: adding ib device syz2 with port count 1 [ 178.397518][T11256] smc: ib device syz2 port 1 has no pnetid [ 178.403677][ T10] lo speed is unknown, defaulting to 1000 [ 178.410061][T11256] lo speed is unknown, defaulting to 1000 [ 178.444749][T11275] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2993'. [ 178.450608][T11256] lo speed is unknown, defaulting to 1000 [ 178.494841][T11256] lo speed is unknown, defaulting to 1000 [ 178.502832][T11279] loop6: detected capacity change from 0 to 128 [ 178.533589][T11256] lo speed is unknown, defaulting to 1000 [ 178.540075][T11279] FAT-fs (loop6): Directory bread(block 414) failed [ 178.561375][T11279] FAT-fs (loop6): Directory bread(block 415) failed [ 178.570350][T11279] FAT-fs (loop6): Directory bread(block 416) failed [ 178.577237][T11279] FAT-fs (loop6): Directory bread(block 417) failed [ 178.578689][T11256] lo speed is unknown, defaulting to 1000 [ 178.584142][T11279] FAT-fs (loop6): Directory bread(block 418) failed [ 178.598735][T11279] FAT-fs (loop6): Directory bread(block 419) failed [ 178.605578][T11279] FAT-fs (loop6): Directory bread(block 420) failed [ 178.612713][T11279] FAT-fs (loop6): Directory bread(block 421) failed [ 178.633547][T11279] FAT-fs (loop6): FAT read failed (blocknr 128) [ 178.687347][T11290] loop6: detected capacity change from 0 to 1024 [ 178.694649][T11290] EXT4-fs: inline encryption not supported [ 178.702638][T11294] loop7: detected capacity change from 0 to 256 [ 178.721878][T11290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.734801][T11294] FAT-fs (loop7): codepage cp932 not found [ 178.765776][ T4936] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 178.775058][ T4936] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 178.804239][ T6876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.883797][T11315] loop7: detected capacity change from 0 to 128 [ 178.976553][T11315] bio_check_eod: 20 callbacks suppressed [ 178.976572][T11315] syz.7.3011: attempt to access beyond end of device [ 178.976572][T11315] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 179.006667][T11315] syz.7.3011: attempt to access beyond end of device [ 179.006667][T11315] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 179.022829][T11315] syz.7.3011: attempt to access beyond end of device [ 179.022829][T11315] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 179.050587][T11315] syz.7.3011: attempt to access beyond end of device [ 179.050587][T11315] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 179.064264][T11315] syz.7.3011: attempt to access beyond end of device [ 179.064264][T11315] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 179.078464][T11315] syz.7.3011: attempt to access beyond end of device [ 179.078464][T11315] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 179.092122][T11315] syz.7.3011: attempt to access beyond end of device [ 179.092122][T11315] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 179.105621][T11315] syz.7.3011: attempt to access beyond end of device [ 179.105621][T11315] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 179.119298][T11315] syz.7.3011: attempt to access beyond end of device [ 179.119298][T11315] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 179.135484][T11315] syz.7.3011: attempt to access beyond end of device [ 179.135484][T11315] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 179.373265][T11347] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3026'. [ 179.407585][T11347] IPVS: Unknown mcast interface: vetN1 [ 179.509476][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 179.509550][ T29] audit: type=1326 audit(1761886893.735:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e57defc9 code=0x7ffc0000 [ 179.541148][ T29] audit: type=1326 audit(1761886893.765:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7e57defc9 code=0x7ffc0000 [ 179.564837][ T29] audit: type=1326 audit(1761886893.765:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e57defc9 code=0x7ffc0000 [ 179.588562][ T29] audit: type=1326 audit(1761886893.765:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e57defc9 code=0x7ffc0000 [ 179.612067][ T29] audit: type=1326 audit(1761886893.765:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7e57defc9 code=0x7ffc0000 [ 179.635597][ T29] audit: type=1326 audit(1761886893.765:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e57defc9 code=0x7ffc0000 [ 179.659200][ T29] audit: type=1326 audit(1761886893.765:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e57defc9 code=0x7ffc0000 [ 179.683152][ T29] audit: type=1326 audit(1761886893.765:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa7e57defc9 code=0x7ffc0000 [ 179.684280][T11358] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 179.706781][ T29] audit: type=1326 audit(1761886893.765:5460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e57defc9 code=0x7ffc0000 [ 179.737123][ T29] audit: type=1326 audit(1761886893.765:5461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7e57dd810 code=0x7ffc0000 [ 179.801674][T11365] : renamed from vlan0 (while UP) [ 179.851162][T11369] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 179.939841][T11380] loop4: detected capacity change from 0 to 512 [ 179.968353][T11380] EXT4-fs (loop4): orphan cleanup on readonly fs [ 179.996055][T11380] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3039: bad orphan inode 13 [ 180.029769][T11380] ext4_test_bit(bit=12, block=18) = 1 [ 180.035316][T11380] is_bad_inode(inode)=0 [ 180.039580][T11380] NEXT_ORPHAN(inode)=2130706432 [ 180.044487][T11380] max_ino=32 [ 180.047761][T11380] i_nlink=1 [ 180.056290][T11380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.165129][T11393] loop7: detected capacity change from 0 to 512 [ 180.182782][T11397] loop5: detected capacity change from 0 to 128 [ 180.183609][T11393] EXT4-fs: Ignoring removed bh option [ 180.205632][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.215366][T11397] EXT4-fs: Ignoring removed nobh option [ 180.238540][T11397] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.262685][T11393] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.275572][T11393] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.282758][T11397] ext4 filesystem being mounted at /496/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.338031][ T9099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.482082][ T5924] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.542731][T11422] loop5: detected capacity change from 0 to 512 [ 180.611159][T11422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.655803][T11422] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.675349][T11433] loop7: detected capacity change from 0 to 1024 [ 180.682329][T11433] EXT4-fs: Ignoring removed nobh option [ 180.687980][T11433] EXT4-fs: Ignoring removed bh option [ 180.697009][T11422] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 180.742378][T11433] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.766969][ T5924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.791755][T11433] EXT4-fs error (device loop7): __ext4_remount:6748: comm syz.7.3062: Abort forced by user [ 180.846505][T11433] EXT4-fs (loop7): Remounting filesystem read-only [ 180.853109][T11433] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 180.906088][ T9099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.996313][T11434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3052'. [ 181.086625][T11460] loop4: detected capacity change from 0 to 128 [ 181.169240][T11464] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 181.868491][T11488] pim6reg1: entered promiscuous mode [ 181.873873][T11488] pim6reg1: entered allmulticast mode [ 182.037546][T11501] : renamed from vlan0 (while UP) [ 182.124628][T11506] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3077'. [ 182.136365][T11505] loop5: detected capacity change from 0 to 2048 [ 182.168372][T11505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.190120][T11505] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.277298][T11518] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3091: bg 0: block 345: padding at end of block bitmap is not set [ 182.293391][T11518] EXT4-fs (loop5): Remounting filesystem read-only [ 182.301192][ T4936] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 182.421654][T11508] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3092'. [ 182.433189][ T5924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.796873][T11545] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 182.957317][T11557] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3110'. [ 182.969662][T11550] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3110'. [ 183.000495][T11560] loop5: detected capacity change from 0 to 512 [ 183.021567][T11560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.034619][T11560] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.063356][ T5924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.068564][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3116'. [ 183.500525][T11583] SELinux: failed to load policy [ 183.503680][T11584] can0: slcan on ptm0. [ 183.545935][T11584] can0 (unregistered): slcan off ptm0. [ 183.551541][T11584] Falling back ldisc for ptm0. [ 183.685603][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3128'. [ 183.695230][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3128'. [ 184.016623][T11617] syzkaller0: entered promiscuous mode [ 184.022117][T11617] syzkaller0: entered allmulticast mode [ 184.237115][T11639] can0: slcan on ptm0. [ 184.285930][T11639] can0 (unregistered): slcan off ptm0. [ 184.291655][T11639] Falling back ldisc for ptm0. [ 184.347369][T11644] netlink: 'syz.5.3148': attribute type 5 has an invalid length. [ 184.386516][ T4942] Bluetooth: hci0: Frame reassembly failed (-84) [ 184.521486][T11655] netlink: 87 bytes leftover after parsing attributes in process `syz.8.3152'. [ 184.867829][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 184.867847][ T29] audit: type=1400 audit(1761886899.095:5635): avc: denied { watch watch_reads } for pid=11672 comm="syz.6.3159" path="/370/file0" dev="tmpfs" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 185.026566][T11682] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 185.138030][T11686] syzkaller1: entered promiscuous mode [ 185.143606][T11686] syzkaller1: entered allmulticast mode [ 185.181088][T11690] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 185.371224][ T29] audit: type=1400 audit(1761886899.595:5636): avc: denied { ioctl } for pid=11700 comm="syz.7.3172" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 185.437151][T11707] veth0: entered promiscuous mode [ 185.483322][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3174'. [ 185.638219][T11725] SELinux: failed to load policy [ 186.140892][T11746] veth0: entered promiscuous mode [ 186.162763][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3191'. [ 186.190855][ T29] audit: type=1400 audit(1761886900.415:5637): avc: denied { setopt } for pid=11749 comm="syz.7.3193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.254411][T11752] loop6: detected capacity change from 0 to 1024 [ 186.261367][T11752] EXT4-fs: inline encryption not supported [ 186.278602][T11752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.342543][ T6876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.342981][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3196'. [ 186.362738][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3196'. [ 186.465735][ T3685] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.472304][ T5306] Bluetooth: hci0: command 0x1003 tx timeout [ 186.503033][ T29] audit: type=1326 audit(1761886900.725:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c72befc9 code=0x7ffc0000 [ 186.546010][ T29] audit: type=1326 audit(1761886900.765:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8c72befc9 code=0x7ffc0000 [ 186.569626][ T29] audit: type=1326 audit(1761886900.765:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c72befc9 code=0x7ffc0000 [ 186.593207][ T29] audit: type=1326 audit(1761886900.765:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c72befc9 code=0x7ffc0000 [ 186.616799][ T29] audit: type=1326 audit(1761886900.765:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb8c72befc9 code=0x7ffc0000 [ 186.640375][ T29] audit: type=1326 audit(1761886900.765:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c72befc9 code=0x7ffc0000 [ 186.664169][ T29] audit: type=1326 audit(1761886900.765:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11774 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8c72bd810 code=0x7ffc0000 [ 186.758799][T11784] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3204'. [ 186.808077][T11788] tipc: Started in network mode [ 186.813168][T11788] tipc: Node identity 7280bad46b6b, cluster identity 4711 [ 186.820440][T11788] tipc: Enabled bearer , priority 0 [ 186.833760][T11788] tipc: Disabling bearer [ 187.017493][T11808] loop4: detected capacity change from 0 to 2048 [ 187.028674][T11808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.043571][T11808] ext4 filesystem being mounted at /633/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.058659][T11808] EXT4-fs (loop4): shut down requested (2) [ 187.064974][T11808] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 187.073963][T11808] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 187.083515][T11808] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 187.205222][T11808] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 187.227514][T11808] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 187.275524][T11808] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 187.318164][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.382463][T11817] lo speed is unknown, defaulting to 1000 [ 187.556885][T11844] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 187.565651][T11844] SELinux: failed to load policy [ 187.641865][T11855] SELinux: failed to load policy [ 187.857741][T11886] netlink: 'syz.4.3247': attribute type 4 has an invalid length. [ 187.865552][T11886] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3247'. [ 187.891067][T11886] .`: renamed from bond0 (while UP) [ 187.897900][T11889] Unsupported ieee802154 address type: 0 [ 187.946337][T11893] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 188.038911][T11901] tipc: Failed to remove unknown binding: 66,1,1/0:1553716181/1553716183 [ 188.073686][T11904] netlink: 'syz.4.3256': attribute type 1 has an invalid length. [ 188.081612][T11904] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3256'. [ 188.121695][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3255'. [ 188.130647][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3255'. [ 188.294144][T11931] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 188.326151][T11933] pim6reg1: entered promiscuous mode [ 188.331512][T11933] pim6reg1: entered allmulticast mode [ 188.414627][T11941] loop6: detected capacity change from 0 to 512 [ 188.421680][T11941] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.484356][T11945] wg2: entered promiscuous mode [ 188.489363][T11945] wg2: entered allmulticast mode [ 188.548574][T11958] loop7: detected capacity change from 0 to 512 [ 188.576631][T11958] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 188.584759][T11958] EXT4-fs (loop7): orphan cleanup on readonly fs [ 188.593175][T11958] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.3278: corrupted inode contents [ 188.605488][T11958] EXT4-fs (loop7): Remounting filesystem read-only [ 188.612655][T11958] EXT4-fs (loop7): 1 truncate cleaned up [ 188.620097][ T4890] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 188.630905][ T4890] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 188.648295][ T4890] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 188.662967][T11958] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.696483][ T9099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.731139][T11972] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 188.854001][T11983] pim6reg1: entered promiscuous mode [ 188.859453][T11983] pim6reg1: entered allmulticast mode [ 188.926897][T11992] SELinux: failed to load policy [ 189.117637][T12010] loop4: detected capacity change from 0 to 1024 [ 189.131244][T12012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.147041][ T3395] lo speed is unknown, defaulting to 1000 [ 189.154699][T12010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.190491][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.321857][T12028] ================================================================== [ 189.330003][T12028] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 189.338985][T12028] [ 189.341328][T12028] read to 0xffff88811adce720 of 4 bytes by task 12027 on cpu 0: [ 189.349056][T12028] selinux_inode_permission+0x334/0x740 [ 189.354624][T12028] security_inode_permission+0x6d/0xb0 [ 189.360202][T12028] inode_permission+0x106/0x310 [ 189.365161][T12028] link_path_walk+0x162/0x900 [ 189.369885][T12028] path_openat+0x1de/0x2170 [ 189.374394][T12028] do_filp_open+0x109/0x230 [ 189.378903][T12028] io_openat2+0x272/0x390 [ 189.383241][T12028] io_openat+0x1b/0x30 [ 189.387328][T12028] __io_issue_sqe+0xfe/0x2e0 [ 189.391934][T12028] io_issue_sqe+0x56/0xa80 [ 189.396382][T12028] io_submit_sqes+0x675/0x1060 [ 189.401168][T12028] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 189.406735][T12028] __x64_sys_io_uring_enter+0x78/0x90 [ 189.412125][T12028] x64_sys_call+0x2df0/0x3000 [ 189.416811][T12028] do_syscall_64+0xd2/0x200 [ 189.421328][T12028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.427269][T12028] [ 189.429594][T12028] write to 0xffff88811adce720 of 4 bytes by task 12028 on cpu 1: [ 189.437311][T12028] selinux_inode_permission+0x3ac/0x740 [ 189.442874][T12028] security_inode_permission+0x6d/0xb0 [ 189.448343][T12028] inode_permission+0x106/0x310 [ 189.453211][T12028] link_path_walk+0x162/0x900 [ 189.457907][T12028] path_openat+0x1de/0x2170 [ 189.462505][T12028] do_filp_open+0x109/0x230 [ 189.467014][T12028] io_openat2+0x272/0x390 [ 189.471361][T12028] io_openat+0x1b/0x30 [ 189.475441][T12028] __io_issue_sqe+0xfe/0x2e0 [ 189.480050][T12028] io_issue_sqe+0x56/0xa80 [ 189.484481][T12028] io_wq_submit_work+0x3f7/0x5f0 [ 189.489430][T12028] io_worker_handle_work+0x44e/0x9b0 [ 189.494726][T12028] io_wq_worker+0x22e/0x860 [ 189.499242][T12028] ret_from_fork+0x122/0x1b0 [ 189.503838][T12028] ret_from_fork_asm+0x1a/0x30 [ 189.508638][T12028] [ 189.510956][T12028] value changed: 0x00000000 -> 0x00000001 [ 189.516674][T12028] [ 189.518997][T12028] Reported by Kernel Concurrency Sanitizer on: [ 189.525162][T12028] CPU: 1 UID: 0 PID: 12028 Comm: iou-wrk-12027 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.536827][T12028] Tainted: [W]=WARN [ 189.540630][T12028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.550687][T12028] ==================================================================