last executing test programs: 1.743065044s ago: executing program 4 (id=487): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x221081e, &(0x7f0000000340)={[{@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x7fff}}, {@mb_optimize_scan}, {@dioread_lock}]}, 0x1, 0x514, &(0x7f0000000b80)="$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") socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.537169256s ago: executing program 4 (id=490): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_bp={&(0x7f0000000380), 0x2}, 0x11d08, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(&(0x7f00000002c0)={0x44100000, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) alarm(0x5) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000440)={@remote, 0x0}, &(0x7f0000000480)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000004c80)={0x15, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x0, 0x40f00, 0x1002d, '\x00', r6, @fallback=0x30, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x43, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r9}}], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={r9, @in6={{0xa, 0x4e22, 0x642f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xefc}}, 0x101, 0x6}, 0x90) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 1.3457853s ago: executing program 1 (id=493): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, r3, 0x0, 0x46) close(r3) syz_open_dev$usbfs(0x0, 0x205, 0x8401) 1.265342031s ago: executing program 1 (id=494): ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40095505, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(r0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 1.259830161s ago: executing program 1 (id=495): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 1.233192411s ago: executing program 1 (id=496): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mq_open(0x0, 0x40, 0x62, 0x0) open(0x0, 0x4000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0xf, 0x0, 0x2, 0x0}) 1.052532644s ago: executing program 1 (id=499): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 1.034337864s ago: executing program 4 (id=500): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 894.997017ms ago: executing program 4 (id=504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, 0x0, 0x40080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 747.380029ms ago: executing program 2 (id=508): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r1}]) 664.49553ms ago: executing program 4 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000400db00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) 610.099941ms ago: executing program 2 (id=512): socket$packet(0x11, 0x2, 0x300) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 504.808532ms ago: executing program 3 (id=517): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000000200)) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000780)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 493.628332ms ago: executing program 0 (id=518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 467.136323ms ago: executing program 4 (id=519): openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) close_range(r3, 0xffffffffffffffff, 0x0) 422.124033ms ago: executing program 2 (id=529): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000001980)=ANY=[@ANYBLOB], 0x0) 421.110054ms ago: executing program 3 (id=530): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14) read(r0, &(0x7f00000002c0)=""/4095, 0xfff) 362.129985ms ago: executing program 0 (id=520): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001500)=0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001c00)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001780)=@newsa={0x410, 0x10, 0x200, 0x70bd28, 0x25dfdbfb, {{@in6=@mcast2, @in=@local, 0x4e22, 0x36, 0x4e22, 0x9, 0x2, 0xa0, 0xa0, 0x2c, r1}, {@in=@loopback, 0x4d6, 0x3c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x5, 0x6, 0x81, 0x6, 0x4, 0x5, 0xffffffffffffffff, 0x2}, {0x0, 0x2, 0x2, 0xfffffffffffff632}, {0x100, 0x2, 0xb}, 0x70bd2d, 0x34ff, 0xa, 0x0, 0x9}, [@migrate={0x50, 0x11, [{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, @in6=@mcast1, @in6=@remote, 0x2b, 0x6, 0x0, 0x3500, 0x8, 0x2}]}, @policy_type={0xa, 0x10, {0x1}}, @etimer_thresh={0x8, 0xc, 0x7a}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd29, 0x400}}, @algo_crypt={0x13b, 0x2, {{'xchacha12\x00'}, 0x798, "09587eebdf0aec36d1d0549a9a2185f85588acf3b1f9adfc2dfdeb80b399c0bd204d7704a9b9670f5681a42d4b2ae8352e6e85057ef562b6f3ba0422abc3ba14a23eebbf898af2f4f3145128e4e9803f1ffbb2a9e1e5172332893294f1940fb590b46e0270d538a26466bf53a3cfa2d62f221deecad2a6ff74a7e457b341a4332372b0c52186a0a152e450aab2a9e4e5a42e3ee5dfe02d6bf5e3284ac1a796e5e1e44422990bf437495cf9dc1b5125818182a7bae37bf5e2af950e47a958c63f34cf6963a12d67d387382b52fb4eaad47786de27408e0e6591b1be2fe6460c9e5a07b147bb3f25e398a0c26a9168a870bfb6c4"}}, @extra_flags={0x8, 0x18, 0x40}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e23, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @tmpl={0x144, 0x5, [{{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in=@loopback, 0x3504, 0x0, 0x0, 0x32, 0x401, 0x9, 0x9}, {{@in6=@private1, 0x4d2, 0xff}, 0xa, @in6=@mcast1, 0x3505, 0x0, 0x0, 0x8, 0x2, 0x99a9, 0x53}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x6c}, 0xa, @in=@empty, 0x3505, 0x3, 0x3, 0x0, 0x7665, 0x8, 0x9}, {{@in6=@loopback, 0x4d2, 0x6c}, 0xa, @in6=@local, 0x3506, 0x3, 0x3, 0x3, 0x9, 0x7, 0x91af}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x2b}, 0xa, @in=@multicast2, 0x34ff, 0x2, 0x2, 0x1, 0x2, 0x5, 0x9}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}]}, 0x410}, 0x1, 0x0, 0x0, 0x40000}, 0x4005) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) 361.804325ms ago: executing program 2 (id=521): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 323.218755ms ago: executing program 1 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 279.578376ms ago: executing program 3 (id=523): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000000)=0xc92b) 279.183846ms ago: executing program 2 (id=524): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x29, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="57d83fc003cea3d40d78bcce96a104352c936fe3bb30da74b1878e50e2945d7978c83513d5d6407bfc981d9cd2ed70639c7b5d4c0a25065acd3bf7", @ANYBLOB="3e81e00638030e937ff9d0"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 278.489886ms ago: executing program 0 (id=525): getitimer(0x2000000, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="18000000160050de8934291ee04df14c1185849e0d156f0000000000ae7a00000000004b93", @ANYRESOCT], 0x18}}, 0x8884) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x80000001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x1, 0x545) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 253.298786ms ago: executing program 3 (id=536): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@i_version}, {@data_err_abort}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x10, 0x3, 0x7c27) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 183.337837ms ago: executing program 2 (id=526): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff"], 0x48) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 118.804738ms ago: executing program 0 (id=527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0x0) 118.234798ms ago: executing program 3 (id=528): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 117.525308ms ago: executing program 0 (id=531): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22.02919ms ago: executing program 0 (id=532): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r4 = eventfd2(0x9, 0x0) io_pgetevents(r3, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) io_destroy(r3) 0s ago: executing program 3 (id=533): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. [ 33.483190][ T29] audit: type=1400 audit(1748648879.321:62): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.484322][ T3306] cgroup: Unknown subsys name 'net' [ 33.506028][ T29] audit: type=1400 audit(1748648879.321:63): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.533418][ T29] audit: type=1400 audit(1748648879.341:64): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.672671][ T3306] cgroup: Unknown subsys name 'cpuset' [ 33.678960][ T3306] cgroup: Unknown subsys name 'rlimit' [ 33.850840][ T29] audit: type=1400 audit(1748648879.681:65): avc: denied { setattr } for pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.874270][ T29] audit: type=1400 audit(1748648879.691:66): avc: denied { create } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.894847][ T29] audit: type=1400 audit(1748648879.691:67): avc: denied { write } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.915259][ T29] audit: type=1400 audit(1748648879.691:68): avc: denied { read } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.935875][ T29] audit: type=1400 audit(1748648879.701:69): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.945331][ T3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.960840][ T29] audit: type=1400 audit(1748648879.701:70): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.993074][ T29] audit: type=1400 audit(1748648879.801:71): avc: denied { relabelto } for pid=3310 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.029187][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.902418][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.948748][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 35.960500][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 36.030218][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.037412][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.044688][ T3317] bridge_slave_0: entered allmulticast mode [ 36.051271][ T3317] bridge_slave_0: entered promiscuous mode [ 36.060323][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.067485][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.074701][ T3317] bridge_slave_1: entered allmulticast mode [ 36.081194][ T3317] bridge_slave_1: entered promiscuous mode [ 36.123452][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.130637][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.138042][ T3323] bridge_slave_0: entered allmulticast mode [ 36.144581][ T3323] bridge_slave_0: entered promiscuous mode [ 36.156578][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.168308][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.175647][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.183664][ T3323] bridge_slave_1: entered allmulticast mode [ 36.190191][ T3323] bridge_slave_1: entered promiscuous mode [ 36.206785][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.219713][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 36.234296][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.241389][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.248714][ T3320] bridge_slave_0: entered allmulticast mode [ 36.255408][ T3320] bridge_slave_0: entered promiscuous mode [ 36.262244][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 36.287976][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.295491][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.302839][ T3320] bridge_slave_1: entered allmulticast mode [ 36.309257][ T3320] bridge_slave_1: entered promiscuous mode [ 36.331663][ T3317] team0: Port device team_slave_0 added [ 36.338621][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.352064][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.369455][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.379624][ T3317] team0: Port device team_slave_1 added [ 36.405172][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.421920][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.428894][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.455691][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.490518][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.497553][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.523718][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.535217][ T3323] team0: Port device team_slave_0 added [ 36.549304][ T3320] team0: Port device team_slave_0 added [ 36.570128][ T3323] team0: Port device team_slave_1 added [ 36.576241][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.583583][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.590779][ T3325] bridge_slave_0: entered allmulticast mode [ 36.597418][ T3325] bridge_slave_0: entered promiscuous mode [ 36.604274][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.611470][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.618889][ T3325] bridge_slave_1: entered allmulticast mode [ 36.625666][ T3325] bridge_slave_1: entered promiscuous mode [ 36.632583][ T3320] team0: Port device team_slave_1 added [ 36.644526][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.651604][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.658950][ T3316] bridge_slave_0: entered allmulticast mode [ 36.665474][ T3316] bridge_slave_0: entered promiscuous mode [ 36.696561][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.703730][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.710954][ T3316] bridge_slave_1: entered allmulticast mode [ 36.717566][ T3316] bridge_slave_1: entered promiscuous mode [ 36.728269][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.735367][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.762256][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.785067][ T3317] hsr_slave_0: entered promiscuous mode [ 36.791248][ T3317] hsr_slave_1: entered promiscuous mode [ 36.797581][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.804803][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.831260][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.847760][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.854788][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.880899][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.893006][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.903547][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.912974][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.919922][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.946018][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.957995][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.990586][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.026356][ T3325] team0: Port device team_slave_0 added [ 37.033720][ T3316] team0: Port device team_slave_0 added [ 37.041673][ T3320] hsr_slave_0: entered promiscuous mode [ 37.047846][ T3320] hsr_slave_1: entered promiscuous mode [ 37.053940][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.061598][ T3320] Cannot create hsr debugfs directory [ 37.073086][ T3325] team0: Port device team_slave_1 added [ 37.084798][ T3316] team0: Port device team_slave_1 added [ 37.119616][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.126725][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.153598][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.170716][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.177980][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.204249][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.217412][ T3323] hsr_slave_0: entered promiscuous mode [ 37.223530][ T3323] hsr_slave_1: entered promiscuous mode [ 37.229359][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.237006][ T3323] Cannot create hsr debugfs directory [ 37.250207][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.257272][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.283748][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.295206][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.302207][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.328303][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.411942][ T3325] hsr_slave_0: entered promiscuous mode [ 37.418180][ T3325] hsr_slave_1: entered promiscuous mode [ 37.424245][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.431990][ T3325] Cannot create hsr debugfs directory [ 37.449404][ T3316] hsr_slave_0: entered promiscuous mode [ 37.455505][ T3316] hsr_slave_1: entered promiscuous mode [ 37.461546][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.469141][ T3316] Cannot create hsr debugfs directory [ 37.573240][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.582336][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.613038][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.633719][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.655505][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.669027][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.679175][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.690656][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.740024][ T3325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.749503][ T3325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.761256][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.770618][ T3325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.789840][ T3325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.803756][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.812828][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.827868][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.838003][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.847761][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.866299][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.873400][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.894284][ T2204] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.901887][ T2204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.914323][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.923083][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.933025][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.945794][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.973102][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.000261][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.028662][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.053395][ T2204] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.060636][ T2204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.073179][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.080456][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.101150][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.128086][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.141334][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.155315][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.166445][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.178550][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.185746][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.205208][ T2204] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.212374][ T2204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.222460][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.233012][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.240252][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.264365][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.271493][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.283337][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.315134][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.322260][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.333385][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.340480][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.405895][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.420082][ T3317] veth0_vlan: entered promiscuous mode [ 38.454834][ T3317] veth1_vlan: entered promiscuous mode [ 38.481421][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.511696][ T3317] veth0_macvtap: entered promiscuous mode [ 38.523606][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.552959][ T3317] veth1_macvtap: entered promiscuous mode [ 38.595481][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.609947][ T3320] veth0_vlan: entered promiscuous mode [ 38.619778][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.629141][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.640993][ T3320] veth1_vlan: entered promiscuous mode [ 38.649034][ T3317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.657830][ T3317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.666782][ T3317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.675663][ T3317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.699148][ T3325] veth0_vlan: entered promiscuous mode [ 38.717567][ T3325] veth1_vlan: entered promiscuous mode [ 38.743597][ T3320] veth0_macvtap: entered promiscuous mode [ 38.758671][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.758690][ T29] audit: type=1400 audit(1748648884.591:81): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.PRnpey/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.777924][ T3320] veth1_macvtap: entered promiscuous mode [ 38.789346][ T29] audit: type=1400 audit(1748648884.591:82): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.817683][ T29] audit: type=1400 audit(1748648884.591:83): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.PRnpey/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.831566][ T3323] veth0_vlan: entered promiscuous mode [ 38.843771][ T29] audit: type=1400 audit(1748648884.591:84): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.859474][ T3325] veth0_macvtap: entered promiscuous mode [ 38.883130][ T29] audit: type=1400 audit(1748648884.591:85): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.PRnpey/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.890287][ T3323] veth1_vlan: entered promiscuous mode [ 38.909968][ T29] audit: type=1400 audit(1748648884.591:86): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.PRnpey/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.930565][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.943279][ T29] audit: type=1400 audit(1748648884.591:87): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.943309][ T29] audit: type=1400 audit(1748648884.721:88): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.958679][ T3325] veth1_macvtap: entered promiscuous mode [ 38.989739][ T29] audit: type=1400 audit(1748648884.721:89): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="gadgetfs" ino=4215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.013476][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.031570][ T3323] veth0_macvtap: entered promiscuous mode [ 39.040256][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.045371][ T3323] veth1_macvtap: entered promiscuous mode [ 39.064838][ T3320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.073879][ T3320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.082771][ T3320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.091505][ T3320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.110338][ T3316] veth0_vlan: entered promiscuous mode [ 39.119768][ T3316] veth1_vlan: entered promiscuous mode [ 39.130760][ T29] audit: type=1400 audit(1748648884.961:90): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.179340][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.194964][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.203866][ T3316] veth0_macvtap: entered promiscuous mode [ 39.211163][ T3316] veth1_macvtap: entered promiscuous mode [ 39.229478][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.241589][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.254122][ T3323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.263081][ T3323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.272008][ T3323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.280728][ T3323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.305620][ T3325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.314596][ T3325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.323387][ T3325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.332187][ T3325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.350825][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.387847][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.408781][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.417712][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.426582][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.435442][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.520578][ T3468] loop2: detected capacity change from 0 to 1024 [ 39.575773][ T3468] ======================================================= [ 39.575773][ T3468] WARNING: The mand mount option has been deprecated and [ 39.575773][ T3468] and is ignored by this kernel. Remove the mand [ 39.575773][ T3468] option from the mount to silence this warning. [ 39.575773][ T3468] ======================================================= [ 39.639984][ T3478] netlink: 'syz.4.5': attribute type 5 has an invalid length. [ 39.686446][ T3468] EXT4-fs: Ignoring removed nobh option [ 39.692143][ T3468] EXT4-fs: Ignoring removed bh option [ 39.725283][ T3468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.764395][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.927428][ T3507] loop3: detected capacity change from 0 to 1024 [ 39.949881][ T3507] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.960939][ T3507] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.984713][ T3507] JBD2: no valid journal superblock found [ 39.990527][ T3507] EXT4-fs (loop3): Could not load journal inode [ 40.063603][ T3517] bridge0: port 3(gretap0) entered blocking state [ 40.070204][ T3517] bridge0: port 3(gretap0) entered disabled state [ 40.077999][ T3507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15'. [ 40.087817][ T3517] gretap0: entered allmulticast mode [ 40.097997][ T3517] gretap0: entered promiscuous mode [ 40.107877][ T3517] bridge0: port 3(gretap0) entered blocking state [ 40.114440][ T3517] bridge0: port 3(gretap0) entered forwarding state [ 40.276344][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 40.379409][ T3545] loop0: detected capacity change from 0 to 1024 [ 40.397503][ T3545] EXT4-fs: Ignoring removed i_version option [ 40.406739][ T3545] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.424212][ T3545] EXT4-fs: Ignoring removed nobh option [ 40.429926][ T3545] EXT4-fs: Ignoring removed bh option [ 40.450290][ T3550] loop3: detected capacity change from 0 to 512 [ 40.483064][ T3545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.511531][ T3550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.541547][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.541903][ T3550] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.589550][ T3550] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.32: Failed to acquire dquot type 0 [ 40.644284][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.798206][ T3564] loop3: detected capacity change from 0 to 1024 [ 40.831219][ T3564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.879151][ T3564] EXT4-fs: Ignoring sb option on remount [ 40.884910][ T3564] EXT4-fs: Ignoring removed orlov option [ 40.893359][ T3564] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 40.913678][ T3564] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 40.949393][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.960824][ T3520] syz.4.21 (3520) used greatest stack depth: 10720 bytes left [ 41.091725][ T3577] loop3: detected capacity change from 0 to 128 [ 41.128591][ T3577] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.144684][ T3582] loop0: detected capacity change from 0 to 1024 [ 41.159894][ T3577] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.176878][ T3585] loop7: detected capacity change from 0 to 16384 [ 41.184400][ T3585] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.221464][ C0] hrtimer: interrupt took 38589 ns [ 41.232122][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.243279][ T3589] netlink: 5 bytes leftover after parsing attributes in process `syz.2.46'. [ 41.276217][ T3582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.321084][ T3582] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 41.343642][ T3582] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 51 with max blocks 1 with error 28 [ 41.356125][ T3582] EXT4-fs (loop0): This should not happen!! Data will be lost [ 41.356125][ T3582] [ 41.366371][ T3582] EXT4-fs (loop0): Total free blocks count 0 [ 41.372668][ T3582] EXT4-fs (loop0): Free/Dirty block details [ 41.378777][ T3582] EXT4-fs (loop0): free_blocks=68451041280 [ 41.384876][ T3582] EXT4-fs (loop0): dirty_blocks=32 [ 41.390031][ T3582] EXT4-fs (loop0): Block reservation details [ 41.396083][ T3582] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 41.432095][ T3582] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 52 with error 28 [ 41.468818][ T3582] syz.0.43 (3582) used greatest stack depth: 9872 bytes left [ 41.829123][ T3618] loop2: detected capacity change from 0 to 164 [ 41.839201][ T3618] process 'syz.2.55' launched '/dev/fd/6' with NULL argv: empty string added [ 41.849065][ T3618] syz.2.55: attempt to access beyond end of device [ 41.849065][ T3618] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 41.863295][ T3618] syz.2.55: attempt to access beyond end of device [ 41.863295][ T3618] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.899265][ T3620] loop2: detected capacity change from 0 to 128 [ 41.911510][ T3620] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.925564][ T3620] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.992699][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.042862][ T3626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 42.385193][ T3632] loop0: detected capacity change from 0 to 1024 [ 42.407051][ T3632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.431674][ T3638] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 42.435268][ T3634] loop1: detected capacity change from 0 to 512 [ 42.452114][ T3632] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.60: bg 0: block 88: padding at end of block bitmap is not set [ 42.479317][ T3634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.497304][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.498485][ T3634] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.587044][ T3642] loop0: detected capacity change from 0 to 2048 [ 42.621574][ T3643] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm syz.1.61: corrupted inode contents [ 42.635065][ T3643] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #19: comm syz.1.61: mark_inode_dirty error [ 42.647370][ T3643] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm syz.1.61: corrupted inode contents [ 42.660483][ T3643] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.61: mark_inode_dirty error [ 42.674250][ T3307] loop0: p1 < > p4 [ 42.679543][ T3643] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.61: mark inode dirty (error -117) [ 42.692316][ T3307] loop0: p4 size 8388608 extends beyond EOD, truncated [ 42.701262][ T3643] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 42.714646][ T3642] loop0: p1 < > p4 [ 42.728291][ T3642] loop0: p4 size 8388608 extends beyond EOD, truncated [ 42.755838][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.323942][ T3723] netlink: 5 bytes leftover after parsing attributes in process `syz.0.71'. [ 43.509431][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.528182][ T3377] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 43.554534][ T3006] udevd[3006]: worker [3307] terminated by signal 33 (Unknown signal 33) [ 43.574180][ T3006] udevd[3006]: worker [3307] failed while handling '/devices/virtual/misc/uhid/0000:0000:0000.0001/hidraw/hidraw0' [ 43.735616][ T3739] loop4: detected capacity change from 0 to 512 [ 43.762661][ T3739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.795285][ T3739] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.909958][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 43.909982][ T29] audit: type=1400 audit(1748648889.741:220): avc: denied { create } for pid=3744 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.952093][ T29] audit: type=1400 audit(1748648889.741:221): avc: denied { connect } for pid=3744 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.988306][ T3743] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm syz.4.76: corrupted inode contents [ 44.020800][ T29] audit: type=1400 audit(1748648889.841:222): avc: denied { associate } for pid=3747 comm="syz.2.78" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 44.051620][ T3743] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #19: comm syz.4.76: mark_inode_dirty error [ 44.105040][ T3743] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm syz.4.76: corrupted inode contents [ 44.124418][ T3743] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.76: mark_inode_dirty error [ 44.139587][ T3743] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.76: mark inode dirty (error -117) [ 44.166645][ T3753] loop2: detected capacity change from 0 to 2048 [ 44.177609][ T3743] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 44.202483][ T3530] loop2: p1 < > p4 [ 44.207302][ T3530] loop2: p4 size 8388608 extends beyond EOD, truncated [ 44.224588][ T3753] loop2: p1 < > p4 [ 44.231493][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.251625][ T3753] loop2: p4 size 8388608 extends beyond EOD, truncated [ 44.327769][ T29] audit: type=1400 audit(1748648890.161:223): avc: denied { create } for pid=3761 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.347466][ T29] audit: type=1400 audit(1748648890.161:224): avc: denied { write } for pid=3761 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.421824][ T29] audit: type=1400 audit(1748648890.251:225): avc: denied { mount } for pid=3768 comm="syz.1.86" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 44.443923][ T29] audit: type=1400 audit(1748648890.251:226): avc: denied { write } for pid=3768 comm="syz.1.86" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.496425][ T29] audit: type=1400 audit(1748648890.311:227): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 44.517260][ T29] audit: type=1400 audit(1748648890.311:228): avc: denied { validate_trans } for pid=3771 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.575866][ T29] audit: type=1400 audit(1748648890.401:229): avc: denied { setopt } for pid=3776 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.807543][ T3796] tipc: Started in network mode [ 44.812532][ T3796] tipc: Node identity ac14140f, cluster identity 4711 [ 44.843955][ T3796] tipc: New replicast peer: 255.255.255.255 [ 44.850261][ T3796] tipc: Enabled bearer , priority 10 [ 44.961450][ T3803] netlink: 'syz.2.100': attribute type 13 has an invalid length. [ 44.986758][ T3817] loop3: detected capacity change from 0 to 2048 [ 45.017428][ T3803] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.025019][ T3803] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.035093][ T3817] loop3: p1 < > p4 [ 45.040021][ T3817] loop3: p4 size 8388608 extends beyond EOD, truncated [ 45.096043][ T3803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.115726][ T3803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.169595][ T3803] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.178962][ T3803] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.187997][ T3803] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.197003][ T3803] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.440493][ T3830] loop4: detected capacity change from 0 to 8192 [ 45.494791][ T3834] ref_ctr_offset mismatch. inode: 0x99 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x500000018 [ 45.551725][ T3837] loop1: detected capacity change from 0 to 128 [ 45.585143][ T3837] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 45.609678][ T3843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 45.636459][ T3837] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.683706][ T3850] futex_wake_op: syz.0.119 tries to shift op by -1; fix this program [ 45.708015][ T3850] smc: net device bond0 applied user defined pnetid SYZ2 [ 45.716717][ T3850] smc: net device bond0 erased user defined pnetid SYZ2 [ 45.719315][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.806580][ T3865] loop3: detected capacity change from 0 to 128 [ 45.827336][ T3866] loop2: detected capacity change from 0 to 512 [ 45.844788][ T3865] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.882554][ T3869] loop0: detected capacity change from 0 to 2048 [ 45.889559][ T3865] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.924409][ T3866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.937885][ T3866] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.955929][ T3760] loop0: p1 < > p4 [ 45.961839][ T3395] tipc: Node number set to 2886997007 [ 45.980132][ T3760] loop0: p4 size 8388608 extends beyond EOD, truncated [ 46.014325][ T3869] loop0: p1 < > p4 [ 46.018863][ T3869] loop0: p4 size 8388608 extends beyond EOD, truncated [ 46.044998][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.104828][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.144586][ T3885] loop1: detected capacity change from 0 to 164 [ 46.173543][ T3885] syz.1.132: attempt to access beyond end of device [ 46.173543][ T3885] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 46.228912][ T3885] syz.1.132: attempt to access beyond end of device [ 46.228912][ T3885] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 46.341333][ T3900] netlink: 'syz.3.133': attribute type 13 has an invalid length. [ 46.444296][ T3900] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.451721][ T3900] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.560429][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.572980][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.614232][ T3900] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.623458][ T3900] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.632709][ T3900] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.641955][ T3900] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.662114][ T3917] loop4: detected capacity change from 0 to 2048 [ 46.686323][ T3917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.755945][ T3917] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.791058][ T3924] ªªªªªª: renamed from vlan0 [ 46.796307][ T3917] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 46.808927][ T3917] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.808927][ T3917] [ 46.818651][ T3917] EXT4-fs (loop4): Total free blocks count 0 [ 46.824710][ T3917] EXT4-fs (loop4): Free/Dirty block details [ 46.830708][ T3917] EXT4-fs (loop4): free_blocks=2415919104 [ 46.836625][ T3917] EXT4-fs (loop4): dirty_blocks=48 [ 46.841801][ T3917] EXT4-fs (loop4): Block reservation details [ 46.847804][ T3917] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 46.874546][ T3926] pim6reg1: entered promiscuous mode [ 46.880068][ T3926] pim6reg1: entered allmulticast mode [ 46.897836][ T3931] loop2: detected capacity change from 0 to 164 [ 46.902439][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.922398][ T3931] syz.2.148: attempt to access beyond end of device [ 46.922398][ T3931] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 46.937518][ T3931] syz.2.148: attempt to access beyond end of device [ 46.937518][ T3931] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 47.004238][ T3938] loop2: detected capacity change from 0 to 512 [ 47.012470][ T3938] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.037588][ T3943] syz.1.154 uses obsolete (PF_INET,SOCK_PACKET) [ 47.045801][ T3938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.059104][ T3938] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.093379][ T3951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 47.156184][ T3953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.223305][ T3961] Invalid ELF header magic: != ELF [ 47.290539][ T3968] netlink: 'syz.1.159': attribute type 13 has an invalid length. [ 47.351261][ T3968] bridge0: port 3(gretap0) entered disabled state [ 47.360277][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.427986][ T3968] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.435408][ T3968] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.501504][ T3968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.515176][ T3968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.557335][ T3968] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.566630][ T3968] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.575715][ T3968] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.584940][ T3968] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.606495][ T3976] tipc: Enabling of bearer rejected, failed to enable media [ 47.676808][ T3988] SELinux: syz.0.169 (3988) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 47.726589][ T3993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.740478][ T3993] xt_hashlimit: max too large, truncated to 1048576 [ 47.749832][ T3993] Cannot find add_set index 0 as target [ 47.785912][ T3995] loop3: detected capacity change from 0 to 1024 [ 47.794994][ T3995] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.816009][ T3995] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.837648][ T3995] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 47.846420][ T3995] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.854705][ T3995] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #3: comm syz.3.174: iget: bad i_size value: 1407374883559424 [ 47.867899][ T3995] EXT4-fs (loop3): Remounting filesystem read-only [ 47.874521][ T3995] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 47.889330][ T3995] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 47.899424][ T3995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.950063][ T4006] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 47.982637][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.031303][ T4016] loop2: detected capacity change from 0 to 164 [ 48.039656][ T4016] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.049807][ T4016] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.060632][ T4016] Symlink component flag not implemented [ 48.066647][ T4016] Symlink component flag not implemented [ 48.088969][ T4016] Symlink component flag not implemented (7) [ 48.095160][ T4016] Symlink component flag not implemented (116) [ 48.245946][ T4027] loop2: detected capacity change from 0 to 2048 [ 48.273967][ T4027] loop2: p1 < > p4 [ 48.290426][ T4027] loop2: p4 size 8388608 extends beyond EOD, truncated [ 48.306831][ T4034] loop3: detected capacity change from 0 to 512 [ 48.309082][ T3006] loop2: p1 < > p4 [ 48.315209][ T4034] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.324075][ T4034] EXT4-fs: Ignoring removed i_version option [ 48.326245][ T3006] loop2: p4 size 8388608 extends beyond EOD, truncated [ 48.346756][ T4034] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.360379][ T4034] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.462411][ T4034] EXT4-fs (loop3): 1 truncate cleaned up [ 48.469722][ T4034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.517292][ T4034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.189'. [ 48.538268][ T4045] loop1: detected capacity change from 0 to 512 [ 48.573627][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.590377][ T4045] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.622191][ T4045] EXT4-fs (loop1): 1 truncate cleaned up [ 48.628418][ T4045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.646528][ T4045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.961581][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 48.961599][ T29] audit: type=1326 audit(1748648894.791:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff833de969 code=0x7ffc0000 [ 48.993909][ T29] audit: type=1326 audit(1748648894.831:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff833de969 code=0x7ffc0000 [ 49.037602][ T29] audit: type=1326 audit(1748648894.861:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4fa2e969 code=0x7ffc0000 [ 49.061228][ T29] audit: type=1326 audit(1748648894.861:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4fa2e969 code=0x7ffc0000 [ 49.084705][ T29] audit: type=1326 audit(1748648894.861:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b4fa2e969 code=0x7ffc0000 [ 49.108729][ T29] audit: type=1326 audit(1748648894.861:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4fa2e969 code=0x7ffc0000 [ 49.132264][ T29] audit: type=1326 audit(1748648894.861:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4fa2e969 code=0x7ffc0000 [ 49.155758][ T29] audit: type=1326 audit(1748648894.861:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b4fa2e969 code=0x7ffc0000 [ 49.180103][ T29] audit: type=1326 audit(1748648894.861:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4fa2e969 code=0x7ffc0000 [ 49.204453][ T29] audit: type=1326 audit(1748648894.861:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4fa2e969 code=0x7ffc0000 [ 49.471064][ T4107] loop3: detected capacity change from 0 to 8192 [ 49.592647][ T4117] netlink: 'syz.2.218': attribute type 13 has an invalid length. [ 49.709295][ T4120] loop0: detected capacity change from 0 to 164 [ 49.744514][ T4120] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.759551][ T4120] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.769827][ T4120] Symlink component flag not implemented [ 49.775565][ T4120] Symlink component flag not implemented [ 49.781656][ T4120] Symlink component flag not implemented (7) [ 49.787721][ T4120] Symlink component flag not implemented (116) [ 49.917842][ T4122] wireguard0: entered promiscuous mode [ 49.925892][ T4122] wireguard0: entered allmulticast mode [ 50.221681][ T4140] xt_hashlimit: max too large, truncated to 1048576 [ 50.229185][ T4140] Cannot find add_set index 0 as target [ 50.263561][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.271099][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.278792][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.286462][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.293978][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.301548][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.308983][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.316530][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.323967][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.331543][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.339146][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.346903][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.354672][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.362156][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.369580][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.377017][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.384711][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.392437][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.399852][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.407360][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.414838][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.422384][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.430061][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.437510][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.444949][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.452481][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.459923][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.467611][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.475036][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.482543][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.489980][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.497429][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.504863][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.512521][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.519941][ T3392] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 50.530784][ T3392] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.02 Device [syz0] on syz1 [ 50.614160][ T4151] pim6reg1: entered promiscuous mode [ 50.619603][ T4151] pim6reg1: entered allmulticast mode [ 50.658666][ T4149] fido_id[4149]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.737517][ T4161] loop2: detected capacity change from 0 to 128 [ 50.749998][ T4160] SELinux: policydb magic number 0x72666c65 does not match expected magic number 0xf97cff8c [ 50.767836][ T4160] SELinux: failed to load policy [ 50.783727][ T4164] loop1: detected capacity change from 0 to 2048 [ 50.831582][ T3760] loop1: p1 < > p4 [ 50.837563][ T3760] loop1: p4 size 8388608 extends beyond EOD, truncated [ 50.849268][ T4164] loop1: p1 < > p4 [ 50.854080][ T4164] loop1: p4 size 8388608 extends beyond EOD, truncated [ 51.003067][ T4174] SELinux: failed to load policy [ 51.012148][ T4168] syz.2.235: attempt to access beyond end of device [ 51.012148][ T4168] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 51.080146][ T3670] kworker/u8:18: attempt to access beyond end of device [ 51.080146][ T3670] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 51.203789][ T4184] loop0: detected capacity change from 0 to 512 [ 51.218925][ T4184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.278680][ T4184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.331975][ T4184] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.439185][ T4200] pim6reg: entered allmulticast mode [ 51.470132][ T4200] pim6reg: left allmulticast mode [ 51.566590][ T4202] futex_wake_op: syz.3.252 tries to shift op by -1; fix this program [ 51.593446][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.613019][ T4202] smc: net device bond0 applied user defined pnetid SYZ2 [ 51.623074][ T4202] smc: net device bond0 erased user defined pnetid SYZ2 [ 51.720692][ T4213] loop4: detected capacity change from 0 to 2048 [ 51.793326][ T3760] loop4: p1 < > p4 [ 51.801538][ T3760] loop4: p4 size 8388608 extends beyond EOD, truncated [ 51.830881][ T4213] loop4: p1 < > p4 [ 51.836728][ T4213] loop4: p4 size 8388608 extends beyond EOD, truncated [ 51.957661][ T4223] loop0: detected capacity change from 0 to 1024 [ 51.992198][ T4223] EXT4-fs: inline encryption not supported [ 51.998103][ T4223] EXT4-fs: Ignoring removed orlov option [ 52.043896][ T4223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.118647][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.214761][ T4229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 52.443723][ T4244] futex_wake_op: syz.2.268 tries to shift op by -1; fix this program [ 52.471961][ T4244] smc: net device bond0 applied user defined pnetid SYZ2 [ 52.479637][ T4244] smc: net device bond0 erased user defined pnetid SYZ2 [ 52.596085][ T1039] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.625884][ T1039] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.667314][ T4264] Driver unsupported XDP return value 0 on prog (id 212) dev N/A, expect packet loss! [ 52.714247][ T4268] fido_id[4268]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 52.753505][ T4271] loop4: detected capacity change from 0 to 128 [ 52.894021][ T4286] IPVS: Error connecting to the multicast addr [ 52.927266][ T4288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.286'. [ 52.979290][ T4294] loop4: detected capacity change from 0 to 128 [ 52.999857][ T4294] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.028121][ T4295] veth3: entered promiscuous mode [ 53.043128][ T4294] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.076193][ T4295] bridge1: port 1(veth3) entered blocking state [ 53.082574][ T4295] bridge1: port 1(veth3) entered disabled state [ 53.089742][ T4295] veth3: entered allmulticast mode [ 53.134445][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 53.148392][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.182227][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 53.245910][ T4309] netlink: 132 bytes leftover after parsing attributes in process `syz.2.296'. [ 53.308183][ T4312] mmap: syz.1.295 (4312) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.312377][ T4311] loop4: detected capacity change from 0 to 2048 [ 53.331513][ T4311] EXT4-fs: Ignoring removed i_version option [ 53.367621][ T4311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.391994][ T4311] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.430976][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.628297][ T4332] netlink: 'syz.1.302': attribute type 13 has an invalid length. [ 53.673798][ T4335] loop0: detected capacity change from 0 to 1024 [ 53.732922][ T4335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.752791][ T4335] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.783685][ T4335] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.304: bg 0: block 393: padding at end of block bitmap is not set [ 53.813260][ T4335] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 53.826126][ T4335] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.826126][ T4335] [ 53.863257][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.894399][ T4347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 53.904289][ T4347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'. [ 54.449970][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 54.450037][ T29] audit: type=1326 audit(1748648900.281:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dc94e969 code=0x7ffc0000 [ 54.479621][ T29] audit: type=1326 audit(1748648900.281:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dc94e969 code=0x7ffc0000 [ 54.513698][ T29] audit: type=1326 audit(1748648900.341:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33dc94e969 code=0x7ffc0000 [ 54.537885][ T29] audit: type=1326 audit(1748648900.341:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dc94e969 code=0x7ffc0000 [ 54.561337][ T29] audit: type=1326 audit(1748648900.341:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33dc94e969 code=0x7ffc0000 [ 54.584679][ T29] audit: type=1326 audit(1748648900.351:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f33dc94e969 code=0x7ffc0000 [ 54.592984][ T4358] loop1: detected capacity change from 0 to 512 [ 54.608119][ T29] audit: type=1326 audit(1748648900.351:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f33dc94e9a3 code=0x7ffc0000 [ 54.705837][ T4358] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.729854][ T4360] SELinux: failed to load policy [ 54.763804][ T29] audit: type=1326 audit(1748648900.351:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f33dc94d41f code=0x7ffc0000 [ 54.787091][ T29] audit: type=1326 audit(1748648900.351:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f33dc94e9f7 code=0x7ffc0000 [ 54.810426][ T29] audit: type=1326 audit(1748648900.421:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33dc94d2d0 code=0x7ffc0000 [ 54.825186][ T4358] EXT4-fs (loop1): 1 truncate cleaned up [ 54.929888][ T4358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.932386][ T4372] IPVS: stopping master sync thread 4373 ... [ 55.006063][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x1 [ 55.013673][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.021109][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.028637][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.036088][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.043662][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.054159][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.073664][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.081114][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.088597][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.096080][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x2 [ 55.103660][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.111159][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.118730][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.126280][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.133950][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.141371][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.149260][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.156742][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.164212][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.171652][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.179134][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.186613][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.194105][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.201747][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.209269][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.216827][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.224406][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.232038][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.239501][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.247196][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.254825][ T3395] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 55.270680][ T3395] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.02 Device [syz0] on syz1 [ 55.384125][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 55.398207][ T4386] loop9: detected capacity change from 0 to 8 [ 55.411392][ T4384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.324'. [ 55.580018][ T4394] loop1: detected capacity change from 0 to 512 [ 55.626018][ T4396] loop4: detected capacity change from 0 to 1024 [ 55.644548][ T4394] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.656399][ T4396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.680441][ T4399] loop2: detected capacity change from 0 to 512 [ 55.700251][ T4394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.724616][ T4396] capability: warning: `syz.4.329' uses deprecated v2 capabilities in a way that may be insecure [ 55.763693][ T4399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.776630][ T4399] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.807976][ T4399] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.330: corrupted inode contents [ 55.837600][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.877234][ T4405] netlink: 'syz.0.332': attribute type 10 has an invalid length. [ 55.885076][ T4405] netlink: 2 bytes leftover after parsing attributes in process `syz.0.332'. [ 55.898219][ T4399] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.330: mark_inode_dirty error [ 55.910429][ T4399] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.330: corrupted inode contents [ 55.923925][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.938688][ T4399] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.330: mark_inode_dirty error [ 55.952608][ T4405] team0: entered promiscuous mode [ 55.959481][ T4405] team_slave_0: entered promiscuous mode [ 55.962183][ T4399] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.330: mark inode dirty (error -117) [ 55.965376][ T4405] team_slave_1: entered promiscuous mode [ 55.979525][ T4399] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 55.999942][ T4405] bridge0: port 3(team0) entered blocking state [ 56.006362][ T4405] bridge0: port 3(team0) entered disabled state [ 56.033640][ T4405] team0: entered allmulticast mode [ 56.050311][ T4405] team_slave_0: entered allmulticast mode [ 56.056242][ T4405] team_slave_1: entered allmulticast mode [ 56.065022][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.076051][ T4405] bridge0: port 3(team0) entered blocking state [ 56.082462][ T4405] bridge0: port 3(team0) entered forwarding state [ 56.198237][ T4416] loop3: detected capacity change from 0 to 1764 [ 56.216331][ T4424] loop1: detected capacity change from 0 to 512 [ 56.229086][ T4424] journal_path: Non-blockdev passed as './bus' [ 56.235376][ T4424] EXT4-fs: error: could not find journal device path [ 56.240895][ T4423] loop2: detected capacity change from 0 to 1024 [ 56.294574][ T4423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.323979][ T4423] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.369103][ T4423] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.338: bg 0: block 393: padding at end of block bitmap is not set [ 56.385454][ T4441] loop4: detected capacity change from 0 to 8192 [ 56.394462][ T4437] vhci_hcd: invalid port number 94 [ 56.399611][ T4437] vhci_hcd: default hub control req: 0017 v007f i005e l0 [ 56.422637][ T4423] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 56.435263][ T4423] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.435263][ T4423] [ 56.462233][ T4423] syz.2.338 (4423) used greatest stack depth: 9840 bytes left [ 56.501423][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.512433][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x1 [ 56.519917][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.527524][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.535255][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.542722][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.550162][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.561927][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.569374][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.576915][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.584431][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x2 [ 56.591899][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.599311][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.606986][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.614494][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.621956][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.629437][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.636966][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.644406][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.651913][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.659597][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.667183][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.668885][ T4450] syzkaller0: entered promiscuous mode [ 56.674603][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.680126][ T4450] syzkaller0: entered allmulticast mode [ 56.687528][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.700612][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.708067][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.715519][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.722989][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.730456][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.737984][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.745469][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.753026][ T3395] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 56.762588][ T3395] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.02 Device [syz0] on syz1 [ 56.801729][ T4452] fido_id[4452]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.853102][ T4460] loop4: detected capacity change from 0 to 1024 [ 56.862867][ T4460] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.880829][ T4460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.906840][ T4465] loop3: detected capacity change from 0 to 256 [ 57.003846][ T292] kworker/u8:5: attempt to access beyond end of device [ 57.003846][ T292] loop3: rw=1, sector=256, nr_sectors = 288 limit=256 [ 57.028101][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.065848][ T4465] syz.3.356: attempt to access beyond end of device [ 57.065848][ T4465] loop3: rw=2049, sector=616, nr_sectors = 312 limit=256 [ 57.112664][ T4465] syz.3.356: attempt to access beyond end of device [ 57.112664][ T4465] loop3: rw=2049, sector=960, nr_sectors = 64 limit=256 [ 57.136448][ T292] kworker/u8:5: attempt to access beyond end of device [ 57.136448][ T292] loop3: rw=1, sector=608, nr_sectors = 8 limit=256 [ 57.152029][ T4465] syz.3.356: attempt to access beyond end of device [ 57.152029][ T4465] loop3: rw=2049, sector=1056, nr_sectors = 8 limit=256 [ 57.166485][ T292] kworker/u8:5: attempt to access beyond end of device [ 57.166485][ T292] loop3: rw=1, sector=1064, nr_sectors = 920 limit=256 [ 57.182867][ T4465] syz.3.356: attempt to access beyond end of device [ 57.182867][ T4465] loop3: rw=2049, sector=1984, nr_sectors = 8 limit=256 [ 57.197275][ T292] kworker/u8:5: attempt to access beyond end of device [ 57.197275][ T292] loop3: rw=1, sector=1992, nr_sectors = 8 limit=256 [ 57.212680][ T292] kworker/u8:5: attempt to access beyond end of device [ 57.212680][ T292] loop3: rw=1, sector=2008, nr_sectors = 428 limit=256 [ 57.227229][ T4465] syz.3.356: attempt to access beyond end of device [ 57.227229][ T4465] loop3: rw=2049, sector=2000, nr_sectors = 8 limit=256 [ 57.227436][ T4477] SELinux: failed to load policy [ 57.398108][ T4488] loop3: detected capacity change from 0 to 8192 [ 57.472392][ T4497] syz.1.371: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 57.487276][ T4497] CPU: 0 UID: 0 PID: 4497 Comm: syz.1.371 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(voluntary) [ 57.487350][ T4497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.487363][ T4497] Call Trace: [ 57.487369][ T4497] [ 57.487376][ T4497] __dump_stack+0x1d/0x30 [ 57.487426][ T4497] dump_stack_lvl+0xe8/0x140 [ 57.487502][ T4497] dump_stack+0x15/0x1b [ 57.487519][ T4497] warn_alloc+0x12b/0x1a0 [ 57.487557][ T4497] ? audit_log_end+0x1d7/0x1f0 [ 57.487603][ T4497] ? audit_log_end+0x1d7/0x1f0 [ 57.487712][ T4497] __vmalloc_node_range_noprof+0x9c/0xe40 [ 57.487750][ T4497] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 57.487818][ T4497] ? update_load_avg+0x1da/0x820 [ 57.487855][ T4497] ? __list_add_valid_or_report+0x38/0xe0 [ 57.487886][ T4497] ? __set_next_task_fair+0x5b/0x150 [ 57.487957][ T4497] ? should_fail_ex+0x30/0x280 [ 57.488077][ T4497] ? xskq_create+0x36/0xe0 [ 57.488251][ T4497] vmalloc_user_noprof+0x7d/0xb0 [ 57.488331][ T4497] ? xskq_create+0x80/0xe0 [ 57.488385][ T4497] xskq_create+0x80/0xe0 [ 57.488477][ T4497] xsk_init_queue+0x95/0xf0 [ 57.488508][ T4497] xsk_setsockopt+0x3de/0x510 [ 57.488593][ T4497] ? __pfx_xsk_setsockopt+0x10/0x10 [ 57.488676][ T4497] __sys_setsockopt+0x184/0x200 [ 57.488720][ T4497] __x64_sys_setsockopt+0x64/0x80 [ 57.488754][ T4497] x64_sys_call+0x2bd5/0x2fb0 [ 57.488782][ T4497] do_syscall_64+0xd2/0x200 [ 57.488875][ T4497] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.488910][ T4497] ? clear_bhb_loop+0x40/0x90 [ 57.488940][ T4497] ? clear_bhb_loop+0x40/0x90 [ 57.488969][ T4497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.489019][ T4497] RIP: 0033:0x7f33dc94e969 [ 57.489049][ T4497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.489072][ T4497] RSP: 002b:00007f33dafb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 57.489120][ T4497] RAX: ffffffffffffffda RBX: 00007f33dcb75fa0 RCX: 00007f33dc94e969 [ 57.489133][ T4497] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 57.489167][ T4497] RBP: 00007f33dc9d0ab1 R08: 0000000000000004 R09: 0000000000000000 [ 57.489184][ T4497] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 57.489199][ T4497] R13: 0000000000000000 R14: 00007f33dcb75fa0 R15: 00007ffe67773ad8 [ 57.489277][ T4497] [ 57.489291][ T4497] Mem-Info: [ 57.556428][ T4501] 9pnet_fd: p9_fd_create_tcp (4501): problem creating socket [ 57.558867][ T4497] active_anon:6690 inactive_anon:1 isolated_anon:0 [ 57.558867][ T4497] active_file:5948 inactive_file:2199 isolated_file:0 [ 57.558867][ T4497] unevictable:0 dirty:35 writeback:29 [ 57.558867][ T4497] slab_reclaimable:2964 slab_unreclaimable:63014 [ 57.558867][ T4497] mapped:29139 shmem:157 pagetables:1034 [ 57.558867][ T4497] sec_pagetables:0 bounce:0 [ 57.558867][ T4497] kernel_misc_reclaimable:0 [ 57.558867][ T4497] free:1853828 free_pcp:3052 free_cma:0 [ 57.660575][ T4507] Failed to initialize the IGMP autojoin socket (err -2) [ 57.678159][ T4497] Node 0 active_anon:26816kB inactive_anon:4kB active_file:23792kB inactive_file:8688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116508kB dirty:308kB writeback:100kB shmem:632kB writeback_tmp:0kB kernel_stack:3888kB pagetables:4552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 57.761696][ T4509] netlink: 'syz.2.374': attribute type 13 has an invalid length. [ 57.786000][ T4497] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 57.856855][ T4497] lowmem_reserve[]: 0 2882 7861 7861 [ 57.862233][ T4497] Node 0 DMA32 free:2947944kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951472kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 57.890989][ T4497] lowmem_reserve[]: 0 0 4978 4978 [ 57.896236][ T4497] Node 0 Normal free:4453692kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:26932kB inactive_anon:4kB active_file:23792kB inactive_file:8688kB unevictable:0kB writepending:292kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:6468kB local_pcp:0kB free_cma:0kB [ 57.926178][ T4497] lowmem_reserve[]: 0 0 0 0 [ 57.930825][ T4497] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 57.943609][ T4497] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947944kB [ 57.960222][ T4497] Node 0 Normal: 191*4kB (UME) 261*8kB (UM) 199*16kB (UME) 192*32kB (UME) 240*64kB (UME) 172*128kB (UME) 108*256kB (UME) 70*512kB (UM) 21*1024kB (UME) 15*2048kB (UME) 1047*4096kB (UM) = 4453780kB [ 57.980299][ T4497] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 57.989660][ T4497] 8300 total pagecache pages [ 57.994335][ T4497] 1 pages in swap cache [ 57.998626][ T4497] Free swap = 124992kB [ 58.002897][ T4497] Total swap = 124996kB [ 58.007266][ T4497] 2097051 pages RAM [ 58.011162][ T4497] 0 pages HighMem/MovableOnly [ 58.015931][ T4497] 80785 pages reserved [ 58.069153][ T4515] loop0: detected capacity change from 0 to 512 [ 58.098886][ T4515] EXT4-fs (loop0): too many log groups per flexible block group [ 58.106664][ T4515] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 58.130112][ T4517] Failed to initialize the IGMP autojoin socket (err -2) [ 58.134365][ T4515] EXT4-fs (loop0): mount failed [ 58.173419][ T4525] __nla_validate_parse: 1 callbacks suppressed [ 58.173439][ T4525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 58.230298][ T4525] ip6gre1: entered allmulticast mode [ 58.264692][ T4533] loop3: detected capacity change from 0 to 512 [ 58.309520][ T4533] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 58.332230][ T4533] EXT4-fs (loop3): mount failed [ 58.437300][ T4551] loop2: detected capacity change from 0 to 512 [ 58.461172][ T4551] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 58.478983][ T4551] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002] [ 58.489684][ T4553] loop3: detected capacity change from 0 to 1024 [ 58.499034][ T4551] System zones: 1-12 [ 58.509461][ T4551] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.392: corrupted in-inode xattr: e_value size too large [ 58.524884][ T4560] loop4: detected capacity change from 0 to 1024 [ 58.531864][ T4560] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.539492][ T4551] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.392: couldn't read orphan inode 15 (err -117) [ 58.553383][ T4551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.567704][ T4553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.567754][ T4560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.625348][ T4553] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.629863][ T4561] pim6reg1: entered promiscuous mode [ 58.641418][ T4561] pim6reg1: entered allmulticast mode [ 58.653808][ T4553] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.393: bg 0: block 393: padding at end of block bitmap is not set [ 58.687174][ T4553] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 58.699873][ T4553] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.699873][ T4553] [ 58.736154][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.746230][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.861370][ T4579] loop1: detected capacity change from 0 to 1024 [ 58.878530][ T4576] pim6reg1: entered promiscuous mode [ 58.884008][ T4576] pim6reg1: entered allmulticast mode [ 58.893172][ T4579] EXT4-fs: Ignoring removed orlov option [ 58.924519][ T4579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.981129][ T4579] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.030282][ T4586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.405'. [ 59.156048][ T4590] pim6reg1: entered promiscuous mode [ 59.161610][ T4590] pim6reg1: entered allmulticast mode [ 59.356182][ T4601] syzkaller0: entered promiscuous mode [ 59.362022][ T4601] syzkaller0: entered allmulticast mode [ 59.392913][ T4604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.415960][ T4604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.552258][ T4613] Failed to initialize the IGMP autojoin socket (err -2) [ 59.628288][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 59.628330][ T29] audit: type=1400 audit(1748648905.461:741): avc: denied { create } for pid=4618 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 59.662200][ T4619] infiniband syz1: set down [ 59.664830][ T29] audit: type=1400 audit(1748648905.461:742): avc: denied { write } for pid=4618 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 59.666944][ T4619] infiniband syz1: added syz_tun [ 59.682399][ T4619] syz1: rxe_create_qp: returned err = -2 [ 59.687632][ T29] audit: type=1400 audit(1748648905.501:743): avc: denied { create } for pid=4616 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.692328][ T4619] infiniband syz1: Couldn't create ib_mad QP1 [ 59.708771][ T4619] infiniband syz1: Couldn't open port 1 [ 59.729841][ T29] audit: type=1400 audit(1748648905.531:744): avc: denied { execmem } for pid=4618 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 59.755712][ T4619] RDS/IB: syz1: added [ 59.762440][ T4619] smc: adding ib device syz1 with port count 1 [ 59.774322][ T4622] wireguard: wg2: Could not create IPv4 socket [ 59.780589][ T4622] wg2: entered promiscuous mode [ 59.785497][ T4622] wg2: entered allmulticast mode [ 59.807785][ T4619] smc: ib device syz1 port 1 has pnetid [ 59.818893][ T4627] loop0: detected capacity change from 0 to 1024 [ 59.826137][ T4627] EXT4-fs: Ignoring removed i_version option [ 59.839061][ T4627] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.853224][ T4627] EXT4-fs: Ignoring removed nobh option [ 59.859063][ T4627] EXT4-fs: Ignoring removed bh option [ 59.893144][ T29] audit: type=1400 audit(1748648905.721:745): avc: denied { bind } for pid=4628 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.913477][ T29] audit: type=1400 audit(1748648905.721:746): avc: denied { setopt } for pid=4628 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.991838][ T29] audit: type=1400 audit(1748648905.791:747): avc: denied { append } for pid=4626 comm="syz.0.423" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.093999][ T29] audit: type=1400 audit(1748648905.911:748): avc: denied { mount } for pid=4636 comm="syz.0.427" name="/" dev="ramfs" ino=7763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 60.133058][ T4644] Failed to initialize the IGMP autojoin socket (err -2) [ 60.158961][ T29] audit: type=1400 audit(1748648905.941:749): avc: denied { ioctl } for pid=4642 comm="syz.2.428" path="socket:[7066]" dev="sockfs" ino=7066 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.183931][ T29] audit: type=1400 audit(1748648905.961:750): avc: denied { create } for pid=4639 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.214341][ T4647] netlink: 'syz.1.429': attribute type 13 has an invalid length. [ 60.273261][ T4653] loop1: detected capacity change from 0 to 512 [ 60.280869][ T4653] EXT4-fs: Ignoring removed oldalloc option [ 60.300741][ T4653] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.326183][ T4653] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.434: invalid indirect mapped block 4294967295 (level 0) [ 60.359612][ T4660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.436'. [ 60.403907][ T4653] EXT4-fs (loop1): Remounting filesystem read-only [ 60.410864][ T4653] EXT4-fs (loop1): 1 orphan inode deleted [ 60.416706][ T4653] EXT4-fs (loop1): 1 truncate cleaned up [ 60.480470][ T4671] tipc: Started in network mode [ 60.485644][ T4671] tipc: Node identity ac14140f, cluster identity 4711 [ 60.499151][ T4671] tipc: Enabling of bearer rejected, failed to enable media [ 60.540296][ T4675] loop2: detected capacity change from 0 to 1024 [ 60.558145][ T4675] EXT4-fs: Ignoring removed orlov option [ 60.578348][ T4678] pim6reg1: entered promiscuous mode [ 60.583809][ T4678] pim6reg1: entered allmulticast mode [ 60.753177][ T4687] loop0: detected capacity change from 0 to 512 [ 60.834553][ T4687] EXT4-fs (loop0): too many log groups per flexible block group [ 60.842387][ T4687] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 60.857637][ T4687] EXT4-fs (loop0): mount failed [ 61.179982][ T4709] loop1: detected capacity change from 0 to 512 [ 61.234312][ T4717] loop0: detected capacity change from 0 to 1024 [ 61.292590][ T4717] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.460: Allocating blocks 497-513 which overlap fs metadata [ 61.312145][ T4709] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.353009][ T4724] Failed to initialize the IGMP autojoin socket (err -2) [ 61.408962][ T4731] netlink: 'syz.3.461': attribute type 13 has an invalid length. [ 61.421570][ T4725] EXT4-fs (loop0): pa ffff888106a37690: logic 16, phys. 145, len 23 [ 61.429771][ T4725] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 61.444292][ T4725] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 61.456636][ T4725] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.456636][ T4725] [ 61.466485][ T4725] EXT4-fs (loop0): Total free blocks count 0 [ 61.472586][ T4725] EXT4-fs (loop0): Free/Dirty block details [ 61.478508][ T4725] EXT4-fs (loop0): free_blocks=16 [ 61.483653][ T4725] EXT4-fs (loop0): dirty_blocks=0 [ 61.488699][ T4725] EXT4-fs (loop0): Block reservation details [ 61.494953][ T4725] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 61.504255][ T4725] syz.0.460 (4725) used greatest stack depth: 9576 bytes left [ 61.577500][ T4741] loop3: detected capacity change from 0 to 512 [ 61.609042][ T4744] Failed to initialize the IGMP autojoin socket (err -2) [ 61.610419][ T4742] tipc: Started in network mode [ 61.622029][ T4742] tipc: Node identity fec51c5624a9, cluster identity 4711 [ 61.629481][ T4742] tipc: Enabled bearer , priority 0 [ 61.638494][ T4741] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 61.653033][ T4741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002] [ 61.657028][ T4745] netlink: 'syz.2.477': attribute type 13 has an invalid length. [ 61.661822][ T4741] System zones: 1-12 [ 61.673094][ T4740] tipc: Resetting bearer [ 61.685414][ T4741] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.466: corrupted in-inode xattr: e_value size too large [ 61.700564][ T4740] tipc: Disabling bearer [ 61.706809][ T4741] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.466: couldn't read orphan inode 15 (err -117) [ 61.806120][ T4749] SELinux: failed to load policy [ 62.010035][ T4762] Failed to initialize the IGMP autojoin socket (err -2) [ 62.114812][ T4762] netlink: 'syz.2.474': attribute type 13 has an invalid length. [ 62.465364][ T4788] loop3: detected capacity change from 0 to 128 [ 62.483349][ T4790] loop4: detected capacity change from 0 to 512 [ 62.505329][ T4790] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.548726][ T4790] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 62.580586][ T4796] Unsupported ieee802154 address type: 0 [ 62.597399][ T4796] loop1: detected capacity change from 0 to 512 [ 62.627577][ T4796] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.658279][ T4802] Failed to initialize the IGMP autojoin socket (err -2) [ 62.660733][ T4796] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 62.676754][ T4796] System zones: 1-12 [ 62.692600][ T4796] EXT4-fs (loop1): 1 truncate cleaned up [ 62.714509][ T4805] netlink: 'syz.4.490': attribute type 13 has an invalid length. [ 62.738014][ T4796] EXT4-fs warning (device loop1): ext4_group_extend:1862: can't shrink FS - resize aborted [ 62.810135][ T4805] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.817447][ T4805] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.918687][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.930065][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.010275][ T4823] vhci_hcd: invalid port number 15 [ 63.015530][ T4823] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 63.024664][ T4805] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.033826][ T4805] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.043105][ T4805] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.052282][ T4805] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.107851][ T4809] tipc: Started in network mode [ 63.112877][ T4809] tipc: Node identity ac14140f, cluster identity 4711 [ 63.120116][ T4809] tipc: Enabling of bearer rejected, failed to enable media [ 63.190766][ T4828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.500'. [ 63.339743][ T4835] pim6reg1: entered promiscuous mode [ 63.345163][ T4835] pim6reg1: entered allmulticast mode [ 63.580975][ T4859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.515'. [ 63.658381][ T4862] netlink: 96 bytes leftover after parsing attributes in process `syz.3.516'. [ 63.733941][ T4867] random: crng reseeded on system resumption [ 63.882485][ T4877] tipc: Enabling of bearer rejected, failed to enable media [ 63.959148][ T4887] loop3: detected capacity change from 0 to 1024 [ 63.967278][ T4887] EXT4-fs: Ignoring removed i_version option [ 64.006821][ T4887] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.021644][ T4887] EXT4-fs: Ignoring removed nobh option [ 64.027327][ T4887] EXT4-fs: Ignoring removed bh option [ 64.088096][ T4888] Failed to initialize the IGMP autojoin socket (err -2) [ 64.318931][ T4907] ================================================================== [ 64.327081][ T4907] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 64.336136][ T4907] [ 64.338543][ T4907] write to 0xffff8881216d1420 of 4 bytes by task 4906 on cpu 0: [ 64.346487][ T4907] selinux_inode_permission+0x31b/0x620 [ 64.352057][ T4907] security_inode_permission+0x6d/0xb0 [ 64.357556][ T4907] inode_permission+0x106/0x310 [ 64.362609][ T4907] link_path_walk+0x162/0x900 [ 64.368388][ T4907] path_openat+0x1de/0x2170 [ 64.372950][ T4907] do_filp_open+0x109/0x230 [ 64.377481][ T4907] io_openat2+0x272/0x390 [ 64.381832][ T4907] io_openat+0x1b/0x30 [ 64.385926][ T4907] __io_issue_sqe+0xfe/0x2e0 [ 64.390544][ T4907] io_issue_sqe+0x53/0x970 [ 64.394992][ T4907] io_submit_sqes+0x667/0xfd0 [ 64.399705][ T4907] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 64.405295][ T4907] __x64_sys_io_uring_enter+0x78/0x90 [ 64.410694][ T4907] x64_sys_call+0x28c8/0x2fb0 [ 64.415401][ T4907] do_syscall_64+0xd2/0x200 [ 64.419936][ T4907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.425862][ T4907] [ 64.428196][ T4907] read to 0xffff8881216d1420 of 4 bytes by task 4907 on cpu 1: [ 64.435761][ T4907] selinux_inode_permission+0x2a7/0x620 [ 64.441425][ T4907] security_inode_permission+0x6d/0xb0 [ 64.446912][ T4907] inode_permission+0x106/0x310 [ 64.451791][ T4907] link_path_walk+0x162/0x900 [ 64.456494][ T4907] path_openat+0x1de/0x2170 [ 64.461032][ T4907] do_filp_open+0x109/0x230 [ 64.465565][ T4907] io_openat2+0x272/0x390 [ 64.469915][ T4907] io_openat+0x1b/0x30 [ 64.474021][ T4907] __io_issue_sqe+0xfe/0x2e0 [ 64.478643][ T4907] io_issue_sqe+0x53/0x970 [ 64.483095][ T4907] io_wq_submit_work+0x3f7/0x5f0 [ 64.488058][ T4907] io_worker_handle_work+0x44e/0x9b0 [ 64.493381][ T4907] io_wq_worker+0x22e/0x870 [ 64.497909][ T4907] ret_from_fork+0xda/0x150 [ 64.502429][ T4907] ret_from_fork_asm+0x1a/0x30 [ 64.507241][ T4907] [ 64.509587][ T4907] value changed: 0x00000000 -> 0x00000001 [ 64.515327][ T4907] [ 64.517678][ T4907] Reported by Kernel Concurrency Sanitizer on: [ 64.523852][ T4907] CPU: 1 UID: 0 PID: 4907 Comm: iou-wrk-4906 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(voluntary) [ 64.536246][ T4907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.546325][ T4907] ==================================================================