last executing test programs: 5.17585033s ago: executing program 3 (id=2122): syz_emit_ethernet(0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="0015fcf50000080000aaaaaaaaaa000015"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='f2fs_issue_reset_zone\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x205, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)=""/20, &(0x7f0000000240)=0x14) socket$can_j1939(0x1d, 0x2, 0x7) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xd]}, 0x8) r3 = syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xbbd2, 0x10100, 0x0, 0x242, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r2}) io_uring_enter(r3, 0x353, 0x0, 0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f00000013c0)=""/4089, 0xff9) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3386dd600000000014060000000000000000000000ffff00000000fe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYBLOB="54100000907800007062c27715d6f1463f383ee2ea5c35a36f1c4d1b960bcf6f519980b99933102c20a9a5fb5e0e0d1319127b6dae3e278992b368c9555db5eb9cefdf5e"], 0x0) 4.292399872s ago: executing program 3 (id=2138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) 3.271927855s ago: executing program 3 (id=2145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x200000100000011, 0x803, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) 2.253905379s ago: executing program 4 (id=2151): syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0xba01}, 0x0) 2.066425432s ago: executing program 3 (id=2154): r0 = inotify_init1(0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) inotify_add_watch(r0, &(0x7f00000004c0)='.\x00', 0x40000004) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffc}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file5\x00', 0x20c006, &(0x7f0000000580)={[{@dioread_nolock}, {@grpjquota}, {@quota}, {@errors_remount}, {@nobh}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") chdir(&(0x7f00000000c0)='./file0\x00') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) socket(0x400000000010, 0x3, 0x0) close(r0) 1.344392721s ago: executing program 3 (id=2156): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}}, 0x0) munmap(&(0x7f0000a8e000/0x2000)=nil, 0x2000) 1.328419222s ago: executing program 4 (id=2157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff, "a05c7b5d3cd1b0f200002000fdf700071400"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000d683b04200005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRESDEC=r4], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0xffffffffffffffa3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) close_range(r6, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004d4010000020a05"], 0x250}}, 0x0) 1.052320416s ago: executing program 4 (id=2161): prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x0, r3, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r3, 0x0, 0x4, 0x0) 974.892147ms ago: executing program 0 (id=2162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 897.734978ms ago: executing program 0 (id=2164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3}, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_set_self_attr(0x67, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 875.256028ms ago: executing program 2 (id=2165): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2108000000000000000000000000100000040000c5d76a5c8651008a61c85848ac34e056d63fb5e1fd5c921218e1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000000020000000000000000"], 0x50) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r3, 0x0, 0x7ffff000) fallocate(r2, 0x0, 0x0, 0x1001f0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r5, 0x0, 0x0) 658.757421ms ago: executing program 2 (id=2166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') 635.761541ms ago: executing program 0 (id=2167): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b6000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r4}, 0x18) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x2000000, @val=@netfilter={0x2, 0x0, 0x7, 0x1}}, 0x20) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="140100002e0001000000000000000000010100"], 0x129}], 0x1}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 536.170073ms ago: executing program 1 (id=2168): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 468.085614ms ago: executing program 1 (id=2169): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x6a040000) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x88580, 0x1b7) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7583990000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00'}, 0x10) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000000)={0x5730, 0x1, [{0xa, 0x1}]}) 466.938323ms ago: executing program 0 (id=2170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r2 = syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x2ef3, 0x80, 0x2, 0x2000088}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) 383.285025ms ago: executing program 3 (id=2171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) socket$kcm(0x2, 0xa, 0x2) r5 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) dup2(0xffffffffffffffff, r5) 367.324795ms ago: executing program 1 (id=2172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) wait4(0x0, 0x0, 0x8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mq_unlink(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) fcntl$setsig(r0, 0xa, 0xa) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x12002, 0x0, 0x0) io_setup(0x8, 0x0) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) 346.907125ms ago: executing program 0 (id=2173): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sysinfo(&(0x7f0000000000)=""/52) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000280), &(0x7f0000000840)=r2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fadvise64(r2, 0xcad8, 0x8, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="25a853f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 325.929115ms ago: executing program 2 (id=2174): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 239.685326ms ago: executing program 1 (id=2175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 185.003317ms ago: executing program 0 (id=2176): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) set_mempolicy(0x3, 0x0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 164.597748ms ago: executing program 4 (id=2177): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={&(0x7f0000000500), 0x4}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x7ff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) r3 = syz_io_uring_setup(0x5dc9, &(0x7f0000000000)={0x0, 0xaa31, 0x80, 0x1, 0x29}, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x3b62, &(0x7f0000000400)={0x0, 0x520a, 0x200, 0x3, 0xbd, 0x0, r3}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x25, 0x60041, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x9}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socket$igmp(0x2, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000580)='\x00\x00\x00\x00', &(0x7f0000000600)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 156.065298ms ago: executing program 1 (id=2178): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000380)=0x1, 0x71) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 112.229598ms ago: executing program 2 (id=2179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x89901) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xb8082) 111.473198ms ago: executing program 2 (id=2180): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) shutdown(r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa2, 0x8000}, 0x0, 0x0, 0x800000, 0x9, 0x1, 0x20005, 0xfffe, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setregid(0xee00, 0x0) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) 73.169059ms ago: executing program 4 (id=2181): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f0000000080)='nfs\x00', 0x0) sendmsg$tipc(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20000080) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/198, 0xc6}], 0x1, 0xfe, 0x8) 10.7224ms ago: executing program 1 (id=2182): set_mempolicy(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00'}, 0x18) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) 10.36ms ago: executing program 4 (id=2183): r0 = syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xe876, 0x40, 0x2, 0x2d4}, &(0x7f0000000280), &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000000)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) 0s ago: executing program 2 (id=2184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r2 = syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x2ef3, 0x80, 0x2, 0x2000088}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) kernel console output (not intermixed with test programs): ): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.077473][ T7545] loop2: detected capacity change from 0 to 128 [ 117.152646][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'. [ 117.198966][ T147] bio_check_eod: 22 callbacks suppressed [ 117.199034][ T147] kworker/u8:4: attempt to access beyond end of device [ 117.199034][ T147] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 117.224847][ T147] kworker/u8:4: attempt to access beyond end of device [ 117.224847][ T147] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 117.250624][ T147] kworker/u8:4: attempt to access beyond end of device [ 117.250624][ T147] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 117.265093][ T147] kworker/u8:4: attempt to access beyond end of device [ 117.265093][ T147] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 117.280547][ T147] kworker/u8:4: attempt to access beyond end of device [ 117.280547][ T147] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 117.316091][ T147] kworker/u8:4: attempt to access beyond end of device [ 117.316091][ T147] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 117.327516][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.363959][ T147] kworker/u8:4: attempt to access beyond end of device [ 117.363959][ T147] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 117.439190][ T147] kworker/u8:4: attempt to access beyond end of device [ 117.439190][ T147] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 117.473017][ T7558] loop4: detected capacity change from 0 to 2048 [ 117.482790][ T147] kworker/u8:4: attempt to access beyond end of device [ 117.482790][ T147] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 117.521556][ T147] kworker/u8:4: attempt to access beyond end of device [ 117.521556][ T147] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 117.522655][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.575124][ T7558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.613788][ T7570] loop3: detected capacity change from 0 to 1024 [ 117.629805][ T7570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.660147][ T7570] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 117.678736][ T7570] EXT4-fs (loop3): Remounting filesystem read-only [ 117.685905][ T7570] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 117.723836][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.750283][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.784443][ T7578] loop3: detected capacity change from 0 to 512 [ 117.894833][ T7578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.922795][ T7578] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.043493][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.080888][ T7576] Set syz1 is full, maxelem 65536 reached [ 118.200647][ T7595] program syz.0.1430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.364332][ T7604] lo speed is unknown, defaulting to 1000 [ 118.490835][ T7603] loop1: detected capacity change from 0 to 512 [ 118.606162][ T7603] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.1434: corrupted in-inode xattr: invalid ea_ino [ 118.678968][ T7611] syzkaller0: entered promiscuous mode [ 118.686281][ T7611] syzkaller0: entered allmulticast mode [ 118.697706][ T7603] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1434: couldn't read orphan inode 15 (err -117) [ 118.746759][ T7603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.801655][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.883930][ T7619] netlink: 'syz.1.1438': attribute type 4 has an invalid length. [ 118.896351][ T7619] netlink: 'syz.1.1438': attribute type 4 has an invalid length. [ 118.945964][ T7620] Falling back ldisc for ttyS3. [ 118.973858][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 118.973874][ T29] audit: type=1326 audit(1746688504.979:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 119.008121][ T29] audit: type=1326 audit(1746688504.979:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 119.034873][ T29] audit: type=1326 audit(1746688504.999:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 119.060934][ T29] audit: type=1326 audit(1746688504.999:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 119.088132][ T29] audit: type=1326 audit(1746688504.999:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 119.116373][ T29] audit: type=1326 audit(1746688504.999:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 119.144058][ T29] audit: type=1326 audit(1746688504.999:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 119.164111][ T7622] loop1: detected capacity change from 0 to 8192 [ 119.171928][ T29] audit: type=1326 audit(1746688504.999:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 119.171989][ T29] audit: type=1326 audit(1746688504.999:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 119.172046][ T29] audit: type=1326 audit(1746688504.999:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 119.553740][ T7644] loop2: detected capacity change from 0 to 128 [ 119.601835][ T7648] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1449'. [ 119.612813][ T7648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.772862][ T7650] loop2: detected capacity change from 0 to 1024 [ 119.783208][ T7650] EXT4-fs: dax option not supported [ 119.848574][ T7652] syzkaller0: entered promiscuous mode [ 119.855087][ T7652] syzkaller0: entered allmulticast mode [ 120.077601][ T7663] tipc: Started in network mode [ 120.084983][ T7663] tipc: Node identity 2679167b09df, cluster identity 4711 [ 120.095478][ T7663] tipc: Enabled bearer , priority 0 [ 120.108784][ T7661] tipc: Resetting bearer [ 120.125195][ T7661] tipc: Disabling bearer [ 120.184540][ T7671] netlink: 'syz.1.1459': attribute type 7 has an invalid length. [ 120.193509][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 120.429828][ T7683] netlink: 'syz.4.1464': attribute type 1 has an invalid length. [ 120.579550][ T7687] futex_wake_op: syz.1.1465 tries to shift op by -1; fix this program [ 120.857441][ T7694] lo speed is unknown, defaulting to 1000 [ 121.128382][ T7701] vhci_hcd: invalid port number 236 [ 121.169783][ T7701] block device autoloading is deprecated and will be removed. [ 121.319139][ T7706] loop2: detected capacity change from 0 to 512 [ 121.335386][ T7706] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 121.353128][ T7709] pim6reg1: entered promiscuous mode [ 121.362369][ T7709] pim6reg1: entered allmulticast mode [ 121.370460][ T7706] EXT4-fs (loop2): failed to open journal device unknown-block(7,45) -6 [ 121.444621][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.493051][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.581716][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 121.595380][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 121.622174][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 121.747822][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 121.762493][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 121.795998][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 121.850652][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 121.877186][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 121.941290][ T7730] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.1478'. [ 122.844427][ T7746] loop0: detected capacity change from 0 to 2048 [ 123.049763][ T7746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.174515][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.045552][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 124.045574][ T29] audit: type=1400 audit(1746688510.028:5802): avc: denied { write } for pid=7755 comm="syz.3.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.212041][ T29] audit: type=1400 audit(1746688510.238:5803): avc: denied { compute_member } for pid=7766 comm="syz.0.1490" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 124.240934][ T29] audit: type=1400 audit(1746688510.268:5804): avc: denied { read } for pid=7767 comm="syz.1.1491" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 124.267391][ T29] audit: type=1400 audit(1746688510.268:5805): avc: denied { open } for pid=7767 comm="syz.1.1491" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 124.294249][ T29] audit: type=1400 audit(1746688510.298:5806): avc: denied { ioctl } for pid=7767 comm="syz.1.1491" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 124.350861][ T7774] loop4: detected capacity change from 0 to 128 [ 124.358160][ T7774] EXT4-fs: Ignoring removed i_version option [ 124.383934][ T29] audit: type=1400 audit(1746688510.408:5807): avc: denied { read } for pid=7771 comm="syz.3.1493" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.408896][ T29] audit: type=1400 audit(1746688510.408:5808): avc: denied { open } for pid=7771 comm="syz.3.1493" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.433111][ T29] audit: type=1400 audit(1746688510.408:5809): avc: denied { firmware_load } for pid=147 comm="kworker/u8:4" path="/lib/firmware/regulatory.db.p7s" dev="sda1" ino=449 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 124.517773][ T29] audit: type=1400 audit(1746688510.518:5810): avc: denied { ioctl } for pid=7771 comm="syz.3.1493" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.544846][ T29] audit: type=1400 audit(1746688510.518:5811): avc: denied { nlmsg_write } for pid=7771 comm="syz.3.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.795726][ T7774] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.810938][ T7774] ext4 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.868664][ T7784] sit0: entered allmulticast mode [ 125.009817][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.052826][ T7790] bridge_slave_1: left allmulticast mode [ 125.058670][ T7790] bridge_slave_1: left promiscuous mode [ 125.064810][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.075935][ T7790] bridge_slave_0: left allmulticast mode [ 125.082127][ T7790] bridge_slave_0: left promiscuous mode [ 125.089414][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.226164][ T7796] tipc: Started in network mode [ 125.231198][ T7796] tipc: Node identity ac14140f, cluster identity 4711 [ 125.238229][ T7796] tipc: New replicast peer: 10.1.1.2 [ 125.243709][ T7796] tipc: Enabled bearer , priority 10 [ 125.462152][ T7808] 8021q: adding VLAN 0 to HW filter on device  [ 125.472359][ T7808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.475227][ T7810] loop2: detected capacity change from 0 to 2048 [ 125.512658][ T7810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.563138][ T7814] lo: entered promiscuous mode [ 125.709926][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.833726][ T7823] __nla_validate_parse: 3 callbacks suppressed [ 125.833816][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 125.873933][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 125.896601][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 125.951327][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 125.962411][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 125.990021][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 126.760203][ T4289] tipc: Node number set to 2886997007 [ 126.824214][ T7837] loop4: detected capacity change from 0 to 512 [ 126.875481][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1516'. [ 126.884918][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1516'. [ 126.917325][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1516'. [ 127.000287][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1516'. [ 127.016583][ T7837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.036485][ T7837] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.051485][ T4289] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 127.078054][ T4289] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.123561][ T7850] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 127.139944][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.273528][ T7852] hub 2-0:1.0: USB hub found [ 127.295275][ T7852] hub 2-0:1.0: 8 ports detected [ 127.692511][ T7868] loop3: detected capacity change from 0 to 512 [ 127.709416][ T7868] EXT4-fs: Ignoring removed nobh option [ 127.718775][ T7868] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.834519][ T7868] EXT4-fs (loop3): 1 truncate cleaned up [ 127.841910][ T7868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.895995][ T7868] EXT4-fs error (device loop3): ext4_read_inline_dir:1501: inode #12: block 7: comm syz.3.1526: path /301/file5/file0: bad entry in directory: inode out of bounds - offset=24, inode=16777215, rec_len=16, size=80 fake=0 [ 127.937703][ T7868] EXT4-fs (loop3): Remounting filesystem read-only [ 127.961711][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.020878][ T7880] loop2: detected capacity change from 0 to 512 [ 128.028240][ T7880] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.061546][ T7880] EXT4-fs (loop2): 1 truncate cleaned up [ 128.070608][ T7880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.200979][ T7889] batadv_slave_0: entered promiscuous mode [ 128.212170][ T7889] batadv_slave_0 (unregistering): left promiscuous mode [ 128.718839][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.934528][ T7913] lo speed is unknown, defaulting to 1000 [ 129.049989][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 129.050008][ T29] audit: type=1326 audit(1746688515.077:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7902 comm="syz.4.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd82b115927 code=0x7ffc0000 [ 129.103495][ T29] audit: type=1326 audit(1746688515.087:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9b34cf5927 code=0x7ffc0000 [ 129.128579][ T29] audit: type=1326 audit(1746688515.087:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9b34c9ab39 code=0x7ffc0000 [ 129.152591][ T29] audit: type=1326 audit(1746688515.087:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 129.177678][ T29] audit: type=1326 audit(1746688515.087:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9b34cf5927 code=0x7ffc0000 [ 129.203914][ T29] audit: type=1326 audit(1746688515.087:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9b34c9ab39 code=0x7ffc0000 [ 129.229493][ T29] audit: type=1326 audit(1746688515.087:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 129.256005][ T29] audit: type=1326 audit(1746688515.117:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7902 comm="syz.4.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd82b0bab39 code=0x7ffc0000 [ 129.280469][ T29] audit: type=1326 audit(1746688515.117:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7902 comm="syz.4.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd82b115927 code=0x7ffc0000 [ 129.304810][ T29] audit: type=1326 audit(1746688515.117:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7902 comm="syz.4.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd82b0bab39 code=0x7ffc0000 [ 129.597406][ T7923] loop2: detected capacity change from 0 to 164 [ 129.610976][ T7923] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 129.706879][ T7923] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 129.747571][ T7923] Symlink component flag not implemented [ 129.753862][ T7923] Symlink component flag not implemented [ 129.781414][ T7923] Symlink component flag not implemented (7) [ 129.787857][ T7923] Symlink component flag not implemented (116) [ 130.075349][ T7938] loop3: detected capacity change from 0 to 2048 [ 130.095468][ T7936] lo speed is unknown, defaulting to 1000 [ 130.112388][ T7935] loop2: detected capacity change from 0 to 164 [ 130.128234][ T7935] isofs_fill_super: root inode is not a directory. Corrupted media? [ 132.702077][ T7968] loop4: detected capacity change from 0 to 256 [ 132.737942][ T7968] FAT-fs (loop4): Directory bread(block 1285) failed [ 132.749351][ T7973] loop2: detected capacity change from 0 to 128 [ 132.769504][ T7968] FAT-fs (loop4): Directory bread(block 1285) failed [ 132.791889][ T7968] FAT-fs (loop4): Directory bread(block 1285) failed [ 132.812506][ T7980] tipc: New replicast peer: 255.255.255.83 [ 132.813439][ T7968] FAT-fs (loop4): Directory bread(block 1285) failed [ 132.819622][ T7980] tipc: Enabled bearer , priority 10 [ 132.826601][ T7982] __nla_validate_parse: 4 callbacks suppressed [ 132.826619][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1569'. [ 132.859723][ T7968] FAT-fs (loop4): Directory bread(block 1285) failed [ 132.873290][ T7968] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 132.961178][ T7987] hub 4-0:1.0: USB hub found [ 132.976241][ T7987] hub 4-0:1.0: 8 ports detected [ 133.237074][ T7996] atomic_op ffff88811a037528 conn xmit_atomic 0000000000000000 [ 133.292648][ T7998] loop4: detected capacity change from 0 to 512 [ 133.299637][ T7998] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.325683][ T7998] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.565722][ T7998] EXT4-fs (loop4): 1 truncate cleaned up [ 133.572430][ T7998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.621133][ T7998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.831265][ T8026] loop2: detected capacity change from 0 to 2048 [ 133.878284][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 133.883548][ T8029] lo speed is unknown, defaulting to 1000 [ 133.949980][ T8035] loop1: detected capacity change from 0 to 512 [ 134.004246][ T8035] EXT4-fs (loop1): 1 orphan inode deleted [ 134.020028][ T8035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.054581][ T3709] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:64: Failed to release dquot type 1 [ 134.080407][ T8037] loop2: detected capacity change from 0 to 8192 [ 134.089180][ T8035] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.102120][ T8037] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.118264][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 134.118280][ T29] audit: type=1400 audit(1746688520.147:6671): avc: denied { append } for pid=8034 comm="syz.1.1588" path="/309/file1/cgroup.controllers" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.179669][ T29] audit: type=1400 audit(1746688520.207:6672): avc: denied { ioctl } for pid=8034 comm="syz.1.1588" path="/309/file1/cgroup.controllers" dev="loop1" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.213837][ T29] audit: type=1400 audit(1746688520.247:6673): avc: denied { create } for pid=8045 comm="syz.3.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.239574][ T8046] smc: net device bond0 erased user defined pnetid SYZ2 [ 134.260152][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.287975][ T29] audit: type=1326 audit(1746688520.317:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660031e969 code=0x7ffc0000 [ 134.319952][ T8056] ip6gre1: entered allmulticast mode [ 134.347821][ T29] audit: type=1326 audit(1746688520.347:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f660031e969 code=0x7ffc0000 [ 134.371928][ T8059] loop2: detected capacity change from 0 to 512 [ 134.372978][ T29] audit: type=1326 audit(1746688520.347:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660031e969 code=0x7ffc0000 [ 134.392267][ T8059] EXT4-fs: inline encryption not supported [ 134.403967][ T29] audit: type=1326 audit(1746688520.347:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f660031e969 code=0x7ffc0000 [ 134.434217][ T29] audit: type=1326 audit(1746688520.347:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660031e969 code=0x7ffc0000 [ 134.445046][ T8059] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.463141][ T29] audit: type=1326 audit(1746688520.357:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660031e969 code=0x7ffc0000 [ 134.496694][ T29] audit: type=1326 audit(1746688520.357:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.3.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f660031e969 code=0x7ffc0000 [ 134.552974][ T8059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 134.572395][ T8059] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.604891][ T3393] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 134.612671][ T3393] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 134.620357][ T3393] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 134.635618][ T8059] xt_cgroup: invalid path, errno=-2 [ 134.645555][ T3393] hid-generic 0000:0004:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 134.660470][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 134.672865][ T8066] vhci_hcd: invalid port number 96 [ 134.678159][ T8066] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 134.696733][ T8072] netlink: 'syz.1.1600': attribute type 1 has an invalid length. [ 134.708503][ T8073] loop2: detected capacity change from 0 to 164 [ 134.716735][ T8073] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.726074][ T8073] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.726432][ T8073] rock: directory entry would overflow storage [ 134.726441][ T8073] rock: sig=0x4f50, size=4, remaining=3 [ 134.726509][ T8073] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 134.730591][ T8072] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 134.749709][ T8072] veth3: entered promiscuous mode [ 134.781274][ T8072] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 134.813294][ T8080] smc: net device bond0 applied user defined pnetid SYZ0 [ 135.010427][ T8103] loop3: detected capacity change from 0 to 2048 [ 135.026477][ T8108] xt_hashlimit: max too large, truncated to 1048576 [ 135.034982][ T8108] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 135.056816][ T8103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.145552][ T8103] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.168353][ T8103] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1162 with error 28 [ 135.185515][ T8103] EXT4-fs (loop3): This should not happen!! Data will be lost [ 135.185515][ T8103] [ 135.196984][ T8103] EXT4-fs (loop3): Total free blocks count 0 [ 135.204794][ T8103] EXT4-fs (loop3): Free/Dirty block details [ 135.222265][ T8103] EXT4-fs (loop3): free_blocks=2415919104 [ 135.229196][ T8103] EXT4-fs (loop3): dirty_blocks=1168 [ 135.235628][ T8103] EXT4-fs (loop3): Block reservation details [ 135.242692][ T8103] EXT4-fs (loop3): i_reserved_data_blocks=73 [ 135.368430][ T8132] loop2: detected capacity change from 0 to 1024 [ 135.432394][ T8124] loop1: detected capacity change from 0 to 8192 [ 135.454370][ T8132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.623263][ T8142] lo speed is unknown, defaulting to 1000 [ 135.740328][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.789347][ T8152] sit0: entered promiscuous mode [ 135.796921][ T8152] sit0: left allmulticast mode [ 135.804849][ T8152] netlink: 'syz.0.1627': attribute type 1 has an invalid length. [ 135.813577][ T8152] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1627'. [ 136.025340][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 136.218983][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.368132][ T8176] loop2: detected capacity change from 0 to 2048 [ 136.384546][ T8178] netlink: 'syz.0.1638': attribute type 21 has an invalid length. [ 136.413224][ T8176] Alternate GPT is invalid, using primary GPT. [ 136.422109][ T8176] loop2: p1 p2 p3 [ 136.577976][ T8181] vhci_hcd: invalid port number 96 [ 136.584238][ T8181] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 136.728224][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1641'. [ 136.783565][ T8191] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 136.826950][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1646'. [ 136.843528][ T8195] : (slave bond_slave_1): Releasing backup interface [ 136.939273][ T8203] loop4: detected capacity change from 0 to 2048 [ 136.969260][ T8203] EXT4-fs error (device loop4): __ext4_fill_super:5502: inode #2: comm GPL: iget: bad extended attribute block 281474976710655 [ 136.984272][ T8203] EXT4-fs (loop4): get root inode failed [ 136.992792][ T8203] EXT4-fs (loop4): mount failed [ 137.038548][ T8207] netlink: 'syz.4.1650': attribute type 4 has an invalid length. [ 137.063167][ T8209] loop2: detected capacity change from 0 to 1024 [ 137.071124][ T8209] EXT4-fs: dax option not supported [ 137.081087][ T3393] lo speed is unknown, defaulting to 1000 [ 137.086739][ T8207] netlink: 'syz.4.1650': attribute type 4 has an invalid length. [ 137.088358][ T3393] syz0: Port: 1 Link DOWN [ 137.105756][ T3393] lo speed is unknown, defaulting to 1000 [ 137.112461][ T3393] syz0: Port: 1 Link ACTIVE [ 137.119879][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.128624][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.213256][ T8216] loop4: detected capacity change from 0 to 512 [ 137.229935][ T8216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.245641][ T8216] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.259827][ T8214] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1651'. [ 137.281836][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.402146][ T8228] loop1: detected capacity change from 0 to 512 [ 137.410862][ T8228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.421719][ T8228] EXT4-fs (loop1): orphan cleanup on readonly fs [ 137.431215][ T8228] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1658: bg 0: block 248: padding at end of block bitmap is not set [ 137.449776][ T8228] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1658: Failed to acquire dquot type 1 [ 137.463593][ T8228] EXT4-fs (loop1): 1 truncate cleaned up [ 137.471400][ T8228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.603479][ T8237] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 137.610360][ T8237] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.619229][ T8237] vhci_hcd vhci_hcd.0: Device attached [ 137.752314][ T8238] vhci_hcd: connection closed [ 137.752474][ T3685] vhci_hcd: stop threads [ 137.762383][ T3685] vhci_hcd: release socket [ 137.768544][ T3685] vhci_hcd: disconnect device [ 137.808097][ T3393] vhci_hcd: vhci_device speed not set [ 138.191968][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.220410][ T8253] loop1: detected capacity change from 0 to 164 [ 138.227923][ T8253] ISOFS: unable to read i-node block [ 138.234182][ T8253] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 138.283587][ T8255] program syz.1.1666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.307964][ T8255] loop1: detected capacity change from 0 to 128 [ 138.317082][ T8257] veth1_to_team: entered promiscuous mode [ 138.324936][ T8257] veth1_to_team (unregistering): left promiscuous mode [ 138.326500][ T8255] bio_check_eod: 55 callbacks suppressed [ 138.326524][ T8255] syz.1.1666: attempt to access beyond end of device [ 138.326524][ T8255] loop1: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 138.354046][ T8255] buffer_io_error: 22 callbacks suppressed [ 138.354057][ T8255] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 138.370008][ T8255] syz.1.1666: attempt to access beyond end of device [ 138.370008][ T8255] loop1: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 138.384892][ T8255] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 138.396032][ T8255] syz.1.1666: attempt to access beyond end of device [ 138.396032][ T8255] loop1: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 138.411313][ T8255] Buffer I/O error on dev loop1, logical block 133, lost async page write [ 138.421348][ T8255] syz.1.1666: attempt to access beyond end of device [ 138.421348][ T8255] loop1: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 138.436047][ T8255] Buffer I/O error on dev loop1, logical block 134, lost async page write [ 138.444997][ T8255] syz.1.1666: attempt to access beyond end of device [ 138.444997][ T8255] loop1: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 138.459686][ T8255] Buffer I/O error on dev loop1, logical block 135, lost async page write [ 138.514220][ T8255] syz.1.1666: attempt to access beyond end of device [ 138.514220][ T8255] loop1: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 138.529468][ T8255] Buffer I/O error on dev loop1, logical block 136, lost async page write [ 138.546967][ T8261] loop3: detected capacity change from 0 to 512 [ 138.559103][ T8261] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.566685][ T8255] syz.1.1666: attempt to access beyond end of device [ 138.566685][ T8255] loop1: rw=2049, sector=137, nr_sectors = 64 limit=128 [ 138.585645][ T8261] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.598766][ T8255] syz.1.1666: attempt to access beyond end of device [ 138.598766][ T8255] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 138.617453][ T8255] syz.1.1666: attempt to access beyond end of device [ 138.617453][ T8255] loop1: rw=2049, sector=225, nr_sectors = 9 limit=128 [ 138.632018][ T8261] EXT4-fs (loop3): 1 truncate cleaned up [ 138.640192][ T8261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.678468][ T8266] SELinux: ebitmap: truncated map [ 138.684575][ T8266] SELinux: failed to load policy [ 138.973060][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.082902][ T8283] loop2: detected capacity change from 0 to 512 [ 139.140426][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 139.140441][ T29] audit: type=1400 audit(1746688525.176:7025): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 139.179216][ T8283] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1676: bg 0: block 131: padding at end of block bitmap is not set [ 139.197313][ T8283] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 139.209185][ T8283] EXT4-fs (loop2): 1 truncate cleaned up [ 139.215853][ T8283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.259518][ T29] audit: type=1400 audit(1746688525.296:7026): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file0" dev="tmpfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 139.304643][ T29] audit: type=1400 audit(1746688525.336:7027): avc: denied { create } for pid=8287 comm="syz.0.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.345596][ T8290] syzkaller0: entered allmulticast mode [ 139.510761][ T8295] loop3: detected capacity change from 0 to 512 [ 139.529986][ T8295] EXT4-fs (loop3): too many log groups per flexible block group [ 139.539971][ T8295] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 139.551956][ T8295] EXT4-fs (loop3): mount failed [ 139.579570][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.590610][ T29] audit: type=1400 audit(1746688525.616:7028): avc: denied { mount } for pid=8298 comm="syz.0.1682" name="/" dev="ramfs" ino=21419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 139.637917][ T29] audit: type=1400 audit(1746688525.656:7029): avc: denied { remount } for pid=8298 comm="syz.0.1682" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 139.638081][ T8301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.663831][ T29] audit: type=1400 audit(1746688525.666:7030): avc: denied { listen } for pid=8294 comm="syz.3.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.676610][ T8301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.694835][ T29] audit: type=1400 audit(1746688525.666:7031): avc: denied { write } for pid=8294 comm="syz.3.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.727189][ T29] audit: type=1400 audit(1746688525.666:7032): avc: denied { accept } for pid=8294 comm="syz.3.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.750431][ T29] audit: type=1400 audit(1746688525.666:7033): avc: denied { mount } for pid=8300 comm="syz.4.1684" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 139.769983][ T8307] 9pnet_fd: Insufficient options for proto=fd [ 139.779944][ T29] audit: type=1400 audit(1746688525.666:7034): avc: denied { read write } for pid=8300 comm="syz.4.1684" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.816489][ T8308] loop2: detected capacity change from 0 to 512 [ 139.825088][ T8308] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.837470][ T8308] EXT4-fs (loop2): 1 truncate cleaned up [ 139.846348][ T8308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.886441][ T8313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.897574][ T8313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.989549][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.069816][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 140.189389][ T8333] netlink: 'syz.2.1694': attribute type 1 has an invalid length. [ 140.225357][ T8333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.238810][ T8333] bond0: entered promiscuous mode [ 140.246031][ T8333] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 140.258308][ T8333] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 140.303773][ T8338] loop2: detected capacity change from 0 to 512 [ 140.349625][ T8340] loop2: detected capacity change from 0 to 2048 [ 140.379690][ T8340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.395634][ T8340] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.415660][ T8340] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.1697: path /358/bus: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 140.448526][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.464295][ T8346] netlink: 'syz.3.1698': attribute type 1 has an invalid length. [ 140.472853][ T8346] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1698'. [ 140.512286][ T8347] lo: left promiscuous mode [ 140.522294][ T8347] wg2: left promiscuous mode [ 141.176796][ T8362] xt_hashlimit: size too large, truncated to 1048576 [ 141.341585][ T8367] loop4: detected capacity change from 0 to 128 [ 141.359248][ T8367] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.421144][ T8369] xt_hashlimit: invalid interval [ 141.430152][ T8367] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.480312][ T8372] netlink: 460 bytes leftover after parsing attributes in process `syz.3.1703'. [ 141.583517][ T8374] loop4: detected capacity change from 0 to 1024 [ 141.610168][ T8374] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 141.622777][ T8374] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 141.656420][ T8374] JBD2: no valid journal superblock found [ 141.664358][ T8374] EXT4-fs (loop4): Could not load journal inode [ 142.134029][ T8374] 9pnet_fd: Insufficient options for proto=fd [ 142.520114][ T8379] loop4: detected capacity change from 0 to 1024 [ 142.531195][ T8379] EXT4-fs: Ignoring removed bh option [ 142.537918][ T8379] EXT4-fs: inline encryption not supported [ 142.604327][ T8379] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 142.621327][ T8379] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 142.654555][ T8379] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.1707: lblock 2 mapped to illegal pblock 2 (length 1) [ 142.679977][ T8379] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.1707: lblock 0 mapped to illegal pblock 48 (length 1) [ 142.699901][ T8379] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1707: Failed to acquire dquot type 0 [ 142.726816][ T8379] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 142.738781][ T8379] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.1707: mark_inode_dirty error [ 142.754519][ T8379] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 142.773577][ T8379] EXT4-fs (loop4): 1 orphan inode deleted [ 142.783645][ T8391] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 142.794087][ T3703] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 142.814788][ T8379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.828163][ T3703] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:59: Failed to release dquot type 0 [ 142.917682][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.927798][ T3314] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 142.937187][ T8393] lo speed is unknown, defaulting to 1000 [ 142.948621][ T3314] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 142.963641][ T3314] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 143.314672][ T8414] loop3: detected capacity change from 0 to 512 [ 143.336922][ T8414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.417326][ T8414] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.463700][ T8422] loop1: detected capacity change from 0 to 1024 [ 143.498228][ T8427] netlink: 'syz.0.1724': attribute type 4 has an invalid length. [ 143.517641][ T8427] netlink: 'syz.0.1724': attribute type 4 has an invalid length. [ 143.557387][ T8422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.575299][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.599039][ T8433] netlink: 'syz.0.1727': attribute type 7 has an invalid length. [ 143.608018][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'. [ 143.669785][ T8436] lo speed is unknown, defaulting to 1000 [ 143.680683][ T8439] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1722: bg 0: block 88: padding at end of block bitmap is not set [ 143.775858][ T8444] lo speed is unknown, defaulting to 1000 [ 143.864436][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.088065][ T8450] loop1: detected capacity change from 0 to 8192 [ 144.149232][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 144.149268][ T29] audit: type=1326 audit(1746688530.185:7445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 144.244041][ T8450] infiniband syz!: set down [ 144.249884][ T8450] infiniband syz!: added team_slave_0 [ 144.256709][ T29] audit: type=1326 audit(1746688530.215:7446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 144.287890][ T29] audit: type=1400 audit(1746688530.215:7447): avc: denied { write } for pid=8457 comm="syz.0.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 144.315832][ T29] audit: type=1326 audit(1746688530.215:7448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 144.344898][ T29] audit: type=1326 audit(1746688530.215:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 144.372613][ T29] audit: type=1326 audit(1746688530.215:7450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 144.402401][ T29] audit: type=1326 audit(1746688530.215:7451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 144.432106][ T29] audit: type=1326 audit(1746688530.215:7452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 144.463581][ T29] audit: type=1326 audit(1746688530.215:7453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 144.491481][ T29] audit: type=1326 audit(1746688530.215:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 144.533563][ T8450] RDS/IB: syz!: added [ 144.537881][ T8450] smc: adding ib device syz! with port count 1 [ 144.548036][ T8450] smc: ib device syz! port 1 has pnetid [ 144.803597][ T8479] loop4: detected capacity change from 0 to 512 [ 144.899852][ T8479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.941486][ T8479] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.967110][ T8481] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 144.979841][ T3393] IPVS: starting estimator thread 0... [ 145.069105][ T8487] IPVS: using max 2016 ests per chain, 100800 per kthread [ 145.170910][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.182811][ T8481] netlink: 'syz.3.1741': attribute type 13 has an invalid length. [ 145.281110][ T8481] bond0: left promiscuous mode [ 145.286465][ T8481] bond_slave_0: left promiscuous mode [ 145.293206][ T8481] bond_slave_1: left promiscuous mode [ 145.577524][ T8500] syzkaller0: entered promiscuous mode [ 145.583893][ T8500] syzkaller0: entered allmulticast mode [ 145.612302][ T8508] lo: entered allmulticast mode [ 145.617322][ T8508] tunl0: entered allmulticast mode [ 145.623467][ T8508] gre0: entered allmulticast mode [ 145.628658][ T8508] gretap0: entered allmulticast mode [ 145.635408][ T8508] erspan0: entered allmulticast mode [ 145.641765][ T8508] ip_vti0: entered allmulticast mode [ 145.647160][ T8508] ip6_vti0: entered allmulticast mode [ 145.652975][ T8508] ip6tnl0: entered allmulticast mode [ 145.658896][ T8508] ip6gre0: entered allmulticast mode [ 145.664543][ T8508] syz_tun: entered allmulticast mode [ 145.679104][ T8508] ip6gretap0: entered allmulticast mode [ 145.684772][ T8508] bridge0: left promiscuous mode [ 145.690118][ T8508] vcan0: entered allmulticast mode [ 145.696438][ T8508] bond0: entered allmulticast mode [ 145.702634][ T8508] bond_slave_0: entered allmulticast mode [ 145.709672][ T8508] bond_slave_1: entered allmulticast mode [ 145.715546][ T8508] team0: entered allmulticast mode [ 145.721519][ T8508] team_slave_1: entered allmulticast mode [ 145.754106][ T8507] loop1: detected capacity change from 0 to 1024 [ 145.761475][ T8508] dummy0: entered allmulticast mode [ 145.769687][ T8508] nlmon0: entered allmulticast mode [ 145.776711][ T8508] caif0: entered allmulticast mode [ 145.782567][ T8508] batadv0: entered allmulticast mode [ 145.788950][ T8508] vxcan0: entered allmulticast mode [ 145.792769][ T8507] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.794990][ T8508] vxcan1: entered allmulticast mode [ 145.811624][ T8508] veth0: entered allmulticast mode [ 145.819437][ T8508] wg0: entered allmulticast mode [ 145.824676][ T8508] wg1: entered allmulticast mode [ 145.830590][ T8508] wg2: left promiscuous mode [ 145.835455][ T8508] veth0_to_bridge: entered allmulticast mode [ 145.841955][ T8508] veth1_to_bridge: entered allmulticast mode [ 145.848503][ T8508] veth0_to_bond: entered allmulticast mode [ 145.852678][ T8507] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.854773][ T8508] veth1_to_bond: entered allmulticast mode [ 145.873768][ T8508] veth1_to_team: entered allmulticast mode [ 145.881043][ T8508] veth0_to_batadv: entered allmulticast mode [ 145.888051][ T8508] batadv_slave_0: entered allmulticast mode [ 145.895022][ T8508] veth1_to_batadv: entered allmulticast mode [ 145.901364][ T8508] batadv_slave_1: entered allmulticast mode [ 145.907550][ T8508] xfrm0: entered allmulticast mode [ 145.912944][ T8508] veth0_to_hsr: entered allmulticast mode [ 145.919967][ T8508] hsr_slave_0: entered allmulticast mode [ 145.926336][ T8508] veth1_to_hsr: entered allmulticast mode [ 145.933659][ T8508] hsr_slave_1: entered allmulticast mode [ 145.940050][ T8508] veth1_virt_wifi: entered allmulticast mode [ 145.946448][ T8508] veth0_virt_wifi: entered allmulticast mode [ 145.953352][ T8508] veth1_vlan: entered allmulticast mode [ 145.961222][ T8508] veth0_vlan: entered allmulticast mode [ 145.967264][ T8508] @: entered allmulticast mode [ 145.972461][ T8508] vlan1: entered allmulticast mode [ 145.979518][ T8508] macvlan0: entered allmulticast mode [ 145.986566][ T8508] macvlan1: entered allmulticast mode [ 145.993162][ T8508] ipvlan0: entered allmulticast mode [ 145.999581][ T8508] ipvlan1: entered allmulticast mode [ 146.005503][ T8508] veth1_macvtap: entered allmulticast mode [ 146.012315][ T8508] veth0_macvtap: entered allmulticast mode [ 146.018609][ T8508] macvtap0: entered allmulticast mode [ 146.025329][ T8508] geneve0: entered allmulticast mode [ 146.030861][ T8508] geneve1: entered allmulticast mode [ 146.036564][ T8508] ip6_vti1: entered allmulticast mode [ 146.043195][ T8508] syztnl2: entered allmulticast mode [ 146.050090][ T8508] bond1: entered allmulticast mode [ 146.055669][ T8508] macvlan2: entered allmulticast mode [ 146.062268][ T8508] ip6gre2: entered allmulticast mode [ 146.069701][ T8508] bridge2: entered allmulticast mode [ 146.077407][ T8508] bond2: entered allmulticast mode [ 146.084886][ T8508] veth2: entered allmulticast mode [ 146.092067][ T8508] veth3: entered allmulticast mode [ 146.098041][ T8508] sit1: entered allmulticast mode [ 146.104494][ T8507] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 146.104496][ T8508] ip6tnl1: entered allmulticast mode [ 146.105590][ T8507] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 2: comm +}[@: lblock 2 mapped to illegal pblock 2 (length 1) [ 146.139399][ T8508] netdevsim netdevsim3 eth0: entered allmulticast mode [ 146.146984][ T8508] netdevsim netdevsim3 eth1: entered allmulticast mode [ 146.148515][ T8507] EXT4-fs (loop1): Remounting filesystem read-only [ 146.155134][ T8508] netdevsim netdevsim3 eth2: entered allmulticast mode [ 146.171636][ T8508] netdevsim netdevsim3 eth3: entered allmulticast mode [ 146.177122][ T8507] EXT4-fs (loop1): 1 orphan inode deleted [ 146.180664][ T8508] veth4: entered allmulticast mode [ 146.180780][ T8508] veth5: entered allmulticast mode [ 146.241258][ T8507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.260022][ T8512] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1748'. [ 146.320938][ T8507] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.368133][ T8516] loop4: detected capacity change from 0 to 512 [ 146.386893][ T8507] loop1: detected capacity change from 0 to 512 [ 146.390486][ T8516] EXT4-fs: Ignoring removed orlov option [ 146.411758][ T8507] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 1 [ 146.426137][ T8507] EXT4-fs (loop1): 1 truncate cleaned up [ 146.433202][ T8507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.447551][ T8507] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.465480][ T8516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.483371][ T8516] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.501645][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1751'. [ 146.514478][ T8507] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.557062][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.558108][ T8527] smc: net device bond0 erased user defined pnetid SYZ0 [ 146.757022][ T8545] loop4: detected capacity change from 0 to 512 [ 146.782555][ T8545] EXT4-fs (loop4): 1 orphan inode deleted [ 146.790165][ T8545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.805024][ T8545] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.828928][ T3643] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 1 [ 146.861911][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.958230][ T8562] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1765'. [ 146.970715][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8562 comm=syz.3.1765 [ 146.983874][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8562 comm=syz.3.1765 [ 146.998290][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8562 comm=syz.3.1765 [ 147.012564][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8562 comm=syz.3.1765 [ 147.027211][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8562 comm=syz.3.1765 [ 147.040939][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8562 comm=syz.3.1765 [ 147.054583][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8562 comm=syz.3.1765 [ 147.073857][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8562 comm=syz.3.1765 [ 147.088287][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8562 comm=syz.3.1765 [ 147.105287][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8562 comm=syz.3.1765 [ 147.530110][ T8578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.540858][ T8574] program syz.2.1768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.552446][ T8578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.563621][ T8574] loop2: detected capacity change from 0 to 128 [ 147.578278][ T8576] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 147.586696][ T3393] IPVS: starting estimator thread 0... [ 147.606585][ T8574] syz.2.1768: attempt to access beyond end of device [ 147.606585][ T8574] loop2: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 147.624935][ T8574] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 147.636311][ T8574] syz.2.1768: attempt to access beyond end of device [ 147.636311][ T8574] loop2: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 147.652533][ T8574] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 147.663232][ T8574] syz.2.1768: attempt to access beyond end of device [ 147.663232][ T8574] loop2: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 147.677040][ T8574] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 147.686966][ T8574] syz.2.1768: attempt to access beyond end of device [ 147.686966][ T8574] loop2: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 147.688670][ T8580] IPVS: using max 2064 ests per chain, 103200 per kthread [ 147.700862][ T8574] Buffer I/O error on dev loop2, logical block 134, lost async page write [ 147.700946][ T8574] syz.2.1768: attempt to access beyond end of device [ 147.700946][ T8574] loop2: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 147.700973][ T8574] Buffer I/O error on dev loop2, logical block 135, lost async page write [ 147.700993][ T8574] syz.2.1768: attempt to access beyond end of device [ 147.700993][ T8574] loop2: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 147.701087][ T8574] Buffer I/O error on dev loop2, logical block 136, lost async page write [ 147.701175][ T8574] syz.2.1768: attempt to access beyond end of device [ 147.701175][ T8574] loop2: rw=2049, sector=137, nr_sectors = 64 limit=128 [ 147.701406][ T8574] syz.2.1768: attempt to access beyond end of device [ 147.701406][ T8574] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 147.701455][ T8574] syz.2.1768: attempt to access beyond end of device [ 147.701455][ T8574] loop2: rw=2049, sector=225, nr_sectors = 9 limit=128 [ 147.863374][ T8590] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 147.984264][ T8598] loop3: detected capacity change from 0 to 256 [ 148.046245][ T8602] netlink: '+}[@': attribute type 10 has an invalid length. [ 148.055075][ T8602] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 148.086793][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1777'. [ 148.111063][ T8602] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 148.138556][ T8598] batman_adv: batadv0: Removing interface: team0 [ 148.355940][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.385984][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.681134][ T8615] loop1: detected capacity change from 0 to 512 [ 148.690022][ T8615] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.703623][ T8617] netlink: 'syz.0.1782': attribute type 6 has an invalid length. [ 148.718147][ T8615] EXT4-fs (loop1): 1 truncate cleaned up [ 148.725032][ T8615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.320606][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 149.320665][ T29] audit: type=1326 audit(1746688535.355:7707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 149.371141][ T29] audit: type=1326 audit(1746688535.395:7708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 149.402904][ T29] audit: type=1326 audit(1746688535.395:7709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 149.435727][ T29] audit: type=1326 audit(1746688535.395:7710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 149.463329][ T29] audit: type=1326 audit(1746688535.395:7711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 149.488538][ T29] audit: type=1326 audit(1746688535.405:7712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 149.515138][ T29] audit: type=1326 audit(1746688535.405:7713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 149.540953][ T29] audit: type=1326 audit(1746688535.405:7714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 149.565398][ T29] audit: type=1326 audit(1746688535.405:7715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 149.591728][ T29] audit: type=1326 audit(1746688535.405:7716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 149.846928][ T8644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1794'. [ 149.856769][ T8644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1794'. [ 149.953929][ T8648] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 149.962638][ T8648] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1796'. [ 150.145987][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.268433][ T8660] loop1: detected capacity change from 0 to 164 [ 150.276403][ T8660] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 150.289373][ T8660] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 150.299701][ T8660] Symlink component flag not implemented [ 150.306121][ T8660] Symlink component flag not implemented [ 150.315210][ T8660] Symlink component flag not implemented (7) [ 150.321922][ T8660] Symlink component flag not implemented (116) [ 150.648496][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1801'. [ 151.549474][ T8720] loop3: detected capacity change from 0 to 512 [ 151.770597][ T8720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.832466][ T8720] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.848447][ T8768] loop2: detected capacity change from 0 to 1024 [ 151.893730][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.920672][ T8768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.020288][ T8781] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1808: bg 0: block 88: padding at end of block bitmap is not set [ 152.082799][ T8785] xt_hashlimit: max too large, truncated to 1048576 [ 152.102769][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.271421][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 152.410753][ T8799] selinux_netlink_send: 67 callbacks suppressed [ 152.410774][ T8799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=8799 comm=syz.1.1819 [ 154.007212][ T8828] vhci_hcd: invalid port number 96 [ 154.013211][ T8828] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 154.389301][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 154.401510][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 154.401527][ T29] audit: type=1400 audit(1746688540.434:8010): avc: denied { write } for pid=8830 comm="syz.4.1829" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 154.672993][ T29] audit: type=1400 audit(1746688540.554:8011): avc: denied { map_create } for pid=8834 comm="syz.1.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.692534][ T29] audit: type=1400 audit(1746688540.554:8012): avc: denied { bpf } for pid=8834 comm="syz.1.1828" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.714759][ T29] audit: type=1400 audit(1746688540.574:8013): avc: denied { prog_load } for pid=8834 comm="syz.1.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.734782][ T29] audit: type=1400 audit(1746688540.574:8014): avc: denied { perfmon } for pid=8834 comm="syz.1.1828" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.758812][ T29] audit: type=1400 audit(1746688540.654:8015): avc: denied { write } for pid=8830 comm="syz.4.1829" path="/dev/random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 154.786887][ T29] audit: type=1400 audit(1746688540.664:8016): avc: denied { create } for pid=8834 comm="syz.1.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.810407][ T29] audit: type=1400 audit(1746688540.664:8017): avc: denied { write } for pid=8834 comm="syz.1.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.831092][ T29] audit: type=1400 audit(1746688540.664:8018): avc: denied { read } for pid=8834 comm="syz.1.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.108223][ T8846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.182859][ T8849] loop4: detected capacity change from 0 to 1024 [ 155.190559][ T8849] EXT4-fs: Ignoring removed orlov option [ 155.201690][ T8849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.529498][ T8856] loop3: detected capacity change from 0 to 2048 [ 155.587825][ T8856] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1835'. [ 155.614627][ T8861] loop2: detected capacity change from 0 to 1024 [ 155.661839][ T8861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.701157][ T8861] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.734135][ T8874] loop3: detected capacity change from 0 to 1024 [ 155.756623][ T8874] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 155.780982][ T8874] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 155.799640][ T8874] System zones: 0-1, 3-36 [ 155.840538][ T8874] EXT4-fs (loop3): orphan cleanup on readonly fs [ 155.849074][ T8861] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 155.871161][ T8861] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 155.886178][ T8861] EXT4-fs (loop2): This should not happen!! Data will be lost [ 155.886178][ T8861] [ 155.946528][ T8874] EXT4-fs (loop3): 1 orphan inode deleted [ 156.043492][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.044052][ T8874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.114478][ T8893] netlink: 'syz.2.1849': attribute type 1 has an invalid length. [ 156.303157][ T8894] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 156.391562][ T8893] veth5: entered promiscuous mode [ 156.398765][ T8893] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 156.489015][ T8897] bond3: entered promiscuous mode [ 156.494445][ T8897] bond3: entered allmulticast mode [ 156.506135][ T8897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.522958][ T8897] bond3 (unregistering): Released all slaves [ 156.544603][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.598828][ T8902] loop2: detected capacity change from 0 to 2048 [ 156.685590][ T8902] loop2: p1 < > p4 [ 156.693654][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.703610][ T8902] loop2: p4 size 8388608 extends beyond EOD, truncated [ 156.723753][ T8902] futex_wake_op: syz.2.1853 tries to shift op by -1; fix this program [ 156.813615][ T8906] loop4: detected capacity change from 0 to 2048 [ 156.994430][ T8906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.408460][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.647155][ T8919] loop4: detected capacity change from 0 to 8192 [ 157.791083][ T8927] loop2: detected capacity change from 0 to 512 [ 157.820254][ T8927] EXT4-fs: Ignoring removed bh option [ 157.826196][ T8927] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.861076][ T8927] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 157.890707][ T8927] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 157.910850][ T8927] EXT4-fs (loop2): orphan cleanup on readonly fs [ 157.940033][ T8927] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1860: Failed to acquire dquot type 1 [ 157.960122][ T8927] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1860: Invalid block bitmap block 0 in block_group 0 [ 157.980913][ T8927] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1860: Invalid block bitmap block 0 in block_group 0 [ 157.995390][ T8927] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1860: Invalid block bitmap block 0 in block_group 0 [ 158.021309][ T8927] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1860: Failed to acquire dquot type 1 [ 158.040227][ T8927] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1860: Failed to acquire dquot type 1 [ 158.054024][ T8927] EXT4-fs (loop2): 1 orphan inode deleted [ 158.063806][ T8927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.339143][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.826989][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'. [ 158.868392][ T8964] loop3: detected capacity change from 0 to 512 [ 158.880716][ T8961] loop2: detected capacity change from 0 to 164 [ 158.961341][ T8964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.017330][ T8971] loop4: detected capacity change from 0 to 2048 [ 159.064939][ T8969] loop2: detected capacity change from 0 to 8192 [ 159.073218][ T8971] Alternate GPT is invalid, using primary GPT. [ 159.080472][ T8971] loop4: p1 p2 p3 [ 159.091566][ T8964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.127737][ T8964] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.173236][ T4286] hid-generic 0000:0004:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 159.204726][ T8982] SET target dimension over the limit! [ 159.212371][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.234474][ T8984] netlink: 'syz.0.1880': attribute type 4 has an invalid length. [ 159.287909][ T8989] netlink: 'syz.3.1891': attribute type 10 has an invalid length. [ 159.298617][ T8989] dummy0: left allmulticast mode [ 159.308356][ T8989] dummy0: entered allmulticast mode [ 159.316241][ T8989] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 159.332734][ T8990] netlink: 'syz.1.1881': attribute type 1 has an invalid length. [ 159.342111][ T8990] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1881'. [ 159.413197][ T29] kauditd_printk_skb: 705 callbacks suppressed [ 159.413218][ T29] audit: type=1326 audit(1746688545.444:8710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5abe15927 code=0x7ffc0000 [ 159.483493][ T29] audit: type=1326 audit(1746688545.444:8711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5abdbab39 code=0x7ffc0000 [ 159.507786][ T29] audit: type=1326 audit(1746688545.444:8712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa5abe1e969 code=0x7ffc0000 [ 159.532577][ T29] audit: type=1326 audit(1746688545.454:8713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5abe15927 code=0x7ffc0000 [ 159.557337][ T29] audit: type=1326 audit(1746688545.454:8714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5abdbab39 code=0x7ffc0000 [ 159.582023][ T29] audit: type=1326 audit(1746688545.454:8715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa5abe1e969 code=0x7ffc0000 [ 159.606677][ T29] audit: type=1326 audit(1746688545.464:8716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5abe15927 code=0x7ffc0000 [ 159.631318][ T29] audit: type=1326 audit(1746688545.464:8717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5abdbab39 code=0x7ffc0000 [ 159.657157][ T29] audit: type=1326 audit(1746688545.464:8718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa5abe1e969 code=0x7ffc0000 [ 159.682598][ T29] audit: type=1326 audit(1746688545.474:8719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.1.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5abe15927 code=0x7ffc0000 [ 159.877625][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1888'. [ 159.889114][ T9005] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1888'. [ 160.114895][ T9015] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1893'. [ 160.144997][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9015 comm=syz.4.1893 [ 160.235960][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9015 comm=syz.4.1893 [ 160.291337][ T9019] bond0: (slave dummy0): Releasing backup interface [ 160.321850][ T9020] 9pnet_fd: Insufficient options for proto=fd [ 160.341297][ T9019] dummy0: left allmulticast mode [ 160.363040][ T9019] bridge_slave_0: left promiscuous mode [ 160.369267][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.384095][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9015 comm=syz.4.1893 [ 160.431181][ T9019] bridge_slave_1: left promiscuous mode [ 160.437599][ T9019] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.448478][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9015 comm=syz.4.1893 [ 160.494312][ T9019] bond0: (slave bond_slave_0): Releasing backup interface [ 160.506999][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9015 comm=syz.4.1893 [ 160.543628][ T9019] bond0: (slave bond_slave_1): Releasing backup interface [ 160.545174][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9015 comm=syz.4.1893 [ 160.567872][ T9019] team0: Port device team_slave_1 removed [ 160.573074][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9015 comm=syz.4.1893 [ 160.588446][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9015 comm=syz.4.1893 [ 160.588550][ T9019] bond1: (slave macvlan2): Releasing backup interface [ 160.602587][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9015 comm=syz.4.1893 [ 160.624199][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9015 comm=syz.4.1893 [ 160.638146][ T9019] bond2: (slave veth3): Releasing active interface [ 160.686827][ T9022] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 160.704277][ T9022] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.727908][ T9022] bond2: (slave veth7): Enslaving as an active interface with a down link [ 160.749097][ T9022] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 160.768891][ T9022] vlan0: entered allmulticast mode [ 160.776477][ T9022] bond2: (slave vlan0): Opening slave failed [ 161.802749][ T9040] Set syz1 is full, maxelem 65536 reached [ 161.867996][ T9053] loop2: detected capacity change from 0 to 2048 [ 161.884678][ T9055] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1907'. [ 161.895221][ T9051] Falling back ldisc for ttyS3. [ 161.906720][ T9055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.949623][ T9057] xt_hashlimit: max too large, truncated to 1048576 [ 162.211867][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'. [ 162.233793][ T9048] x_tables: duplicate underflow at hook 1 [ 162.366285][ T9065] xt_hashlimit: invalid interval [ 162.435907][ T9072] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.1909'. [ 162.532599][ T9074] loop3: detected capacity change from 0 to 256 [ 162.579685][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1917'. [ 162.660084][ T9090] xt_hashlimit: max too large, truncated to 1048576 [ 162.669578][ T9090] Cannot find set identified by id 0 to match [ 162.672468][ T3392] hid-generic 0000:0004:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 163.054450][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 163.366146][ T9112] tipc: Enabling of bearer rejected, failed to enable media [ 163.457742][ T9120] openvswitch: netlink: Message has 6 unknown bytes. [ 163.499383][ T9123] loop2: detected capacity change from 0 to 512 [ 163.504804][ T9125] C: renamed from team_slave_0 [ 163.512815][ T9123] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.529906][ T9125] netlink: 'syz.4.1935': attribute type 1 has an invalid length. [ 163.534231][ T9123] EXT4-fs (loop2): 1 truncate cleaned up [ 163.540062][ T9125] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 163.548135][ T9123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.700051][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.919579][ T9146] bridge0: entered allmulticast mode [ 163.984064][ T9147] __nla_validate_parse: 6 callbacks suppressed [ 163.984084][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1940'. [ 164.062002][ T9135] loop4: detected capacity change from 0 to 256 [ 164.428454][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 164.428555][ T29] audit: type=1400 audit(1746688550.453:9208): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 164.530168][ T29] audit: type=1400 audit(1746688550.543:9209): avc: denied { create } for pid=9155 comm="syz.3.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.573691][ T9156] loop3: detected capacity change from 0 to 128 [ 164.594121][ T29] audit: type=1400 audit(1746688550.603:9210): avc: denied { setopt } for pid=9155 comm="syz.3.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.710281][ T29] audit: type=1400 audit(1746688550.733:9211): avc: denied { create } for pid=9161 comm="syz.2.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.741704][ T9163] syz.3.1944: attempt to access beyond end of device [ 164.741704][ T9163] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 164.768940][ T29] audit: type=1400 audit(1746688550.763:9212): avc: denied { bind } for pid=9161 comm="syz.2.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.781863][ T9163] syz.3.1944: attempt to access beyond end of device [ 164.781863][ T9163] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 164.792378][ T29] audit: type=1400 audit(1746688550.763:9213): avc: denied { write } for pid=9161 comm="syz.2.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.810345][ T9166] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 164.835004][ T9160] SELinux: failed to load policy [ 164.851383][ T29] audit: type=1400 audit(1746688550.863:9214): avc: denied { load_policy } for pid=9159 comm="syz.4.1945" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 164.936450][ T29] audit: type=1400 audit(1746688550.963:9215): avc: denied { ioctl } for pid=9169 comm="syz.4.1950" path="socket:[25877]" dev="sockfs" ino=25877 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.936981][ T9163] syz.3.1944: attempt to access beyond end of device [ 164.936981][ T9163] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 164.962531][ T29] audit: type=1400 audit(1746688550.963:9216): avc: denied { bind } for pid=9169 comm="syz.4.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.962569][ T29] audit: type=1400 audit(1746688550.963:9217): avc: denied { ioctl } for pid=9169 comm="syz.4.1950" path="socket:[25874]" dev="sockfs" ino=25874 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.028264][ T9163] syz.3.1944: attempt to access beyond end of device [ 165.028264][ T9163] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 165.051530][ T9163] syz.3.1944: attempt to access beyond end of device [ 165.051530][ T9163] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 165.077048][ T9163] syz.3.1944: attempt to access beyond end of device [ 165.077048][ T9163] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 165.092700][ T9163] syz.3.1944: attempt to access beyond end of device [ 165.092700][ T9163] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 165.109421][ T9163] syz.3.1944: attempt to access beyond end of device [ 165.109421][ T9163] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 165.123389][ T9163] syz.3.1944: attempt to access beyond end of device [ 165.123389][ T9163] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 165.138936][ T9163] syz.3.1944: attempt to access beyond end of device [ 165.138936][ T9163] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 165.199048][ T9178] xt_hashlimit: max too large, truncated to 1048576 [ 165.211890][ T9177] loop3: detected capacity change from 0 to 512 [ 165.229896][ T9181] loop2: detected capacity change from 0 to 512 [ 165.242639][ T9181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 165.263681][ T9187] loop4: detected capacity change from 0 to 1024 [ 165.279268][ T9177] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 165.291056][ T9187] EXT4-fs: Ignoring removed bh option [ 165.297170][ T9187] EXT4-fs: inline encryption not supported [ 165.395832][ T9181] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.483365][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1951'. [ 165.497171][ T9177] EXT4-fs (loop3): 1 truncate cleaned up [ 165.504352][ T9187] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.518894][ T9177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.539912][ T9181] program syz.2.1955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.550631][ T9181] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 165.637863][ T9181] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.1955: corrupted inode contents [ 165.654293][ T9181] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #19: comm syz.2.1955: mark_inode_dirty error [ 165.667014][ T9181] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.1955: corrupted inode contents [ 165.680573][ T9181] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.1955: mark_inode_dirty error [ 165.705820][ T9181] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.1955: mark inode dirty (error -117) [ 165.720039][ T9181] EXT4-fs warning (device loop2): ext4_evict_inode:279: xattr delete (err -117) [ 165.783121][ T9187] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 165.793753][ T9187] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.1954: lblock 2 mapped to illegal pblock 2 (length 1) [ 165.816421][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 165.829793][ T9187] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.1954: lblock 0 mapped to illegal pblock 48 (length 1) [ 165.848791][ T9187] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1954: Failed to acquire dquot type 0 [ 165.863570][ T9187] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 165.877178][ T9187] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.1954: mark_inode_dirty error [ 165.891619][ T9187] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 165.904958][ T9187] EXT4-fs (loop4): 1 orphan inode deleted [ 165.912889][ T9187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.928450][ T3685] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:44: lblock 1 mapped to illegal pblock 1 (length 1) [ 165.947916][ T3685] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:44: Failed to release dquot type 0 [ 165.964911][ T9187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.977826][ T9187] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz.4.1954: Invalid inode table block 1 in block_group 0 [ 165.992921][ T9187] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 166.044274][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.062557][ T9187] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz.4.1954: mark_inode_dirty error [ 166.106816][ T9199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1958'. [ 166.135183][ T9199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1958'. [ 166.159092][ T9201] loop2: detected capacity change from 0 to 2048 [ 166.192655][ T9201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.292510][ T9199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1958'. [ 166.302432][ T9199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1958'. [ 166.338321][ T9207] loop4: detected capacity change from 0 to 512 [ 166.346756][ T9207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.357681][ T9207] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1961: invalid block [ 166.372422][ T9207] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1961: invalid indirect mapped block 4294967295 (level 1) [ 166.388236][ T9207] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1961: invalid indirect mapped block 4294967295 (level 1) [ 166.405707][ T9207] EXT4-fs (loop4): 2 truncates cleaned up [ 166.412078][ T9207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.457824][ T9199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1958'. [ 166.501579][ T9199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1958'. [ 166.683976][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.013128][ T9226] vlan0: entered promiscuous mode [ 167.019310][ T9226] team0: entered promiscuous mode [ 167.064497][ T9231] xt_hashlimit: max too large, truncated to 1048576 [ 167.125051][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.242589][ T9239] @: renamed from veth0_vlan [ 167.683293][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 167.753844][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1974'. [ 168.331254][ T9256] loop2: detected capacity change from 0 to 1024 [ 168.392078][ T9256] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.413792][ T9254] loop4: detected capacity change from 0 to 8192 [ 168.421743][ T9256] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.592665][ T9256] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 168.624069][ T9256] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.1976: lblock 2 mapped to illegal pblock 2 (length 1) [ 168.641524][ T9256] EXT4-fs (loop2): Remounting filesystem read-only [ 168.648793][ T9256] EXT4-fs (loop2): 1 orphan inode deleted [ 168.796103][ T9256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.835818][ T9256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.218631][ T9267] netlink: 'syz.2.1979': attribute type 4 has an invalid length. [ 169.248209][ T9267] netlink: 'syz.2.1979': attribute type 4 has an invalid length. [ 169.284812][ T9267] loop2: detected capacity change from 0 to 1024 [ 169.292511][ T9267] EXT4-fs: Ignoring removed nobh option [ 169.372454][ T9267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.406157][ T9267] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 169.524136][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.618826][ T9274] selinux_netlink_send: 31 callbacks suppressed [ 169.618849][ T9274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9274 comm=syz.2.1980 [ 169.640653][ T9274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9274 comm=syz.2.1980 [ 169.642536][ T9273] __nla_validate_parse: 1 callbacks suppressed [ 169.642557][ T9273] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1980'. [ 169.681526][ T9274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9274 comm=syz.2.1980 [ 169.738574][ T9274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9274 comm=syz.2.1980 [ 169.791313][ T9274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9274 comm=syz.2.1980 [ 169.807490][ T9274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9274 comm=syz.2.1980 [ 169.834522][ T9274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9274 comm=syz.2.1980 [ 169.874971][ T9274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9274 comm=syz.2.1980 [ 169.890267][ T9274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9274 comm=syz.2.1980 [ 169.907550][ T9274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9274 comm=syz.2.1980 [ 170.120985][ T9278] netlink: 'syz.3.1982': attribute type 1 has an invalid length. [ 170.142927][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 170.142948][ T29] audit: type=1400 audit(1746688556.162:9336): avc: denied { read } for pid=9275 comm="syz.1.1981" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 170.180077][ T29] audit: type=1400 audit(1746688556.162:9337): avc: denied { open } for pid=9275 comm="syz.1.1981" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 170.209744][ T29] audit: type=1400 audit(1746688556.162:9338): avc: denied { ioctl } for pid=9275 comm="syz.1.1981" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 170.242067][ T29] audit: type=1400 audit(1746688556.162:9339): avc: denied { read } for pid=9275 comm="syz.1.1981" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 170.269991][ T29] audit: type=1400 audit(1746688556.162:9340): avc: denied { open } for pid=9275 comm="syz.1.1981" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 170.299673][ T29] audit: type=1400 audit(1746688556.162:9341): avc: denied { firmware_load } for pid=3664 comm="kworker/u8:29" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 170.328191][ T29] audit: type=1400 audit(1746688556.322:9342): avc: denied { write } for pid=9275 comm="syz.1.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.350076][ T29] audit: type=1400 audit(1746688556.322:9343): avc: denied { nlmsg_write } for pid=9275 comm="syz.1.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.390433][ T9280] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 170.401003][ T3664] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 170.415042][ T9282] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.447229][ T9285] loop2: detected capacity change from 0 to 256 [ 170.461655][ T9285] msdos: Unknown parameter '?H(B a"!5' [ 170.522016][ T3705] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 170.653671][ T9288] loop3: detected capacity change from 0 to 128 [ 170.726779][ T9291] bio_check_eod: 83 callbacks suppressed [ 170.726799][ T9291] syz.3.1994: attempt to access beyond end of device [ 170.726799][ T9291] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 170.753387][ T9290] loop4: detected capacity change from 0 to 256 [ 170.776712][ T9291] syz.3.1994: attempt to access beyond end of device [ 170.776712][ T9291] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 170.794711][ T9291] syz.3.1994: attempt to access beyond end of device [ 170.794711][ T9291] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 170.815761][ T9291] syz.3.1994: attempt to access beyond end of device [ 170.815761][ T9291] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 170.833054][ T9291] syz.3.1994: attempt to access beyond end of device [ 170.833054][ T9291] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 170.850611][ T9291] syz.3.1994: attempt to access beyond end of device [ 170.850611][ T9291] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 170.874444][ T9291] syz.3.1994: attempt to access beyond end of device [ 170.874444][ T9291] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 170.899320][ T29] audit: type=1400 audit(1746688556.922:9344): avc: denied { mounton } for pid=9292 comm="syz.4.1985" path="/406/file0" dev="tmpfs" ino=2183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.938612][ T9291] syz.3.1994: attempt to access beyond end of device [ 170.938612][ T9291] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 170.955422][ T9291] syz.3.1994: attempt to access beyond end of device [ 170.955422][ T9291] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 170.989612][ T9291] syz.3.1994: attempt to access beyond end of device [ 170.989612][ T9291] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 171.006677][ T29] audit: type=1400 audit(1746688557.012:9345): avc: denied { name_bind } for pid=9296 comm="+}[@" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 171.291354][ T9307] Invalid ELF header magic: != ELF [ 171.322413][ T9311] loop2: detected capacity change from 0 to 128 [ 171.340968][ T9311] FAT-fs (loop2): Directory bread(block 162) failed [ 171.361275][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1993'. [ 171.388798][ T9311] FAT-fs (loop2): Directory bread(block 163) failed [ 171.406108][ T9311] FAT-fs (loop2): Directory bread(block 164) failed [ 171.416032][ T9311] FAT-fs (loop2): Directory bread(block 165) failed [ 171.427979][ T9311] FAT-fs (loop2): Directory bread(block 166) failed [ 171.437781][ T9311] FAT-fs (loop2): Directory bread(block 167) failed [ 171.445431][ T9311] FAT-fs (loop2): Directory bread(block 168) failed [ 171.452894][ T9311] FAT-fs (loop2): Directory bread(block 169) failed [ 171.463255][ T9318] tipc: Started in network mode [ 171.468566][ T9318] tipc: Node identity 7f000001, cluster identity 4711 [ 171.479967][ T9318] tipc: Enabled bearer , priority 10 [ 171.558088][ T9324] loop2: detected capacity change from 0 to 2048 [ 171.569680][ T9326] loop3: detected capacity change from 0 to 2048 [ 171.579107][ T9324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.610667][ T9326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.104599][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 172.114927][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 172.127750][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 172.141064][ T9343] netlink: 'syz.1.2003': attribute type 13 has an invalid length. [ 172.295388][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.406247][ T9350] program syz.0.2006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.429701][ T9350] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 172.431471][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.660611][ T9357] loop3: detected capacity change from 0 to 128 [ 172.711124][ T9357] FAT-fs (loop3): Directory bread(block 162) failed [ 172.738270][ T9357] FAT-fs (loop3): Directory bread(block 163) failed [ 172.754706][ T9357] FAT-fs (loop3): Directory bread(block 164) failed [ 172.830974][ T9357] FAT-fs (loop3): Directory bread(block 165) failed [ 172.878499][ T9357] FAT-fs (loop3): Directory bread(block 166) failed [ 172.934002][ T9357] FAT-fs (loop3): Directory bread(block 167) failed [ 172.983804][ T9357] FAT-fs (loop3): Directory bread(block 168) failed [ 173.029152][ T9357] FAT-fs (loop3): Directory bread(block 169) failed [ 173.057528][ T4309] tipc: Node number set to 2130706433 [ 173.316222][ T9379] loop4: detected capacity change from 0 to 1024 [ 173.340139][ T9379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.365970][ T9379] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 173.392728][ T9379] EXT4-fs (loop4): Remounting filesystem read-only [ 173.400292][ T9379] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 173.443357][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.613931][ T9396] vhci_hcd: invalid port number 96 [ 173.619198][ T9396] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 173.709492][ T9399] loop4: detected capacity change from 0 to 512 [ 173.785020][ T9403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2022'. [ 173.795495][ T9403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2022'. [ 173.843958][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2026'. [ 173.858132][ T9411] macvtap1: entered promiscuous mode [ 173.864448][ T9411] : entered promiscuous mode [ 173.869637][ T9411] bond_slave_0: entered promiscuous mode [ 173.876962][ T9411] macvtap1: entered allmulticast mode [ 173.882520][ T9411] : entered allmulticast mode [ 173.887571][ T9411] bond_slave_0: entered allmulticast mode [ 173.894376][ T9411] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 173.905061][ T9414] : left allmulticast mode [ 173.906148][ T9415] netlink: 'syz.1.2025': attribute type 10 has an invalid length. [ 173.910589][ T9414] bond_slave_0: left allmulticast mode [ 173.910618][ T9414] : left promiscuous mode [ 173.931302][ T9414] bond_slave_0: left promiscuous mode [ 174.137168][ T9427] TCP: out of memory -- consider tuning tcp_mem [ 174.179186][ T9430] loop3: detected capacity change from 0 to 128 [ 174.219235][ T9430] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 174.235385][ T9430] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.353391][ T9443] netlink: 'syz.1.2039': attribute type 10 has an invalid length. [ 174.362536][ T9443] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2039'. [ 174.377310][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2040'. [ 174.396972][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.407365][ T9441] bond2: (slave veth0_to_bond): Releasing active interface [ 174.426671][ T9441] $H: (slave bond_slave_0): Releasing backup interface [ 174.437916][ T9441] bond_slave_0: left promiscuous mode [ 174.447677][ T9441] $H: (slave bond_slave_1): Releasing backup interface [ 174.456353][ T9441] bond_slave_1: left promiscuous mode [ 174.466070][ T9441] bond0: (slave veth5): Releasing active interface [ 174.484845][ T9441] bond2: (slave veth7): Releasing active interface [ 174.503925][ T9443] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 174.562358][ T9456] loop3: detected capacity change from 0 to 512 [ 174.582640][ T9456] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 174.609666][ T9458] netlink: 'syz.0.2044': attribute type 1 has an invalid length. [ 174.655463][ T9458] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.663899][ T9456] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2043: Failed to acquire dquot type 0 [ 174.678865][ T9458] veth9: entered promiscuous mode [ 174.687629][ T9458] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 174.707927][ T9456] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 174.726181][ T9456] EXT4-fs (loop3): 1 truncate cleaned up [ 174.733091][ T9456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.908982][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.210341][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 175.210361][ T29] audit: type=1400 audit(1746688561.232:9486): avc: denied { create } for pid=9473 comm="syz.2.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 175.255310][ T29] audit: type=1400 audit(1746688561.282:9487): avc: denied { create } for pid=9477 comm="syz.4.2049" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 175.279241][ T29] audit: type=1400 audit(1746688561.282:9488): avc: denied { mounton } for pid=9477 comm="syz.4.2049" path="/420/file0" dev="tmpfs" ino=2258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 175.308504][ T29] audit: type=1400 audit(1746688561.282:9489): avc: denied { mount } for pid=9477 comm="syz.4.2049" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 175.334360][ T29] audit: type=1400 audit(1746688561.282:9490): avc: denied { setattr } for pid=9477 comm="syz.4.2049" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.361287][ T29] audit: type=1400 audit(1746688561.332:9491): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 175.443499][ T29] audit: type=1400 audit(1746688561.472:9492): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=2258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 175.481293][ T29] audit: type=1400 audit(1746688561.502:9493): avc: denied { read } for pid=9482 comm="syz.4.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.699695][ T9492] IPVS: Error connecting to the multicast addr [ 175.833903][ T29] audit: type=1400 audit(1746688561.862:9494): avc: denied { ioctl } for pid=9496 comm="syz.0.2056" path="socket:[26840]" dev="sockfs" ino=26840 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.904147][ T9502] __nla_validate_parse: 1 callbacks suppressed [ 175.904168][ T9502] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2057'. [ 175.940802][ T9502] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2057'. [ 175.990199][ T9502] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2057'. [ 176.002383][ T9502] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2057'. [ 176.050152][ T9502] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2057'. [ 176.071039][ T9502] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2057'. [ 176.148848][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'. [ 176.158089][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'. [ 176.168106][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'. [ 176.205418][ T9513] tipc: Enabled bearer , priority 10 [ 176.215347][ T9508] netlink: 'syz.0.2058': attribute type 13 has an invalid length. [ 176.323874][ T29] audit: type=1400 audit(1746688562.352:9495): avc: denied { bind } for pid=9515 comm="syz.0.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.607470][ T9528] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2064'. [ 177.332981][ T3393] tipc: Node number set to 14573336 [ 177.384213][ T9535] bridge0: port 1(geneve0) entered blocking state [ 177.391227][ T9535] bridge0: port 1(geneve0) entered disabled state [ 177.422030][ T9535] geneve0: entered promiscuous mode [ 178.142860][ T9560] C: renamed from team_slave_0 [ 178.154680][ T9560] netlink: 'syz.1.2074': attribute type 1 has an invalid length. [ 178.164164][ T9560] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 178.274056][ T9562] loop3: detected capacity change from 0 to 512 [ 178.284724][ T9562] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 178.319395][ T9562] EXT4-fs (loop3): 1 truncate cleaned up [ 178.326633][ T9562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.382532][ T9569] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 178.412348][ T9569] SELinux: failed to load policy [ 178.981456][ T9578] loop4: detected capacity change from 0 to 512 [ 178.991072][ T9578] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 179.006488][ T9578] EXT4-fs (loop4): 1 truncate cleaned up [ 179.013656][ T9578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.164218][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.784316][ T9585] loop3: detected capacity change from 0 to 8192 [ 180.530466][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.638909][ T9598] loop4: detected capacity change from 0 to 128 [ 180.657447][ T9598] EXT4-fs: Ignoring removed nobh option [ 180.683989][ T9598] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.715044][ T9598] ext4 filesystem being mounted at /426/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.919894][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.954706][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 180.954727][ T29] audit: type=1400 audit(1746688566.981:9499): avc: denied { name_bind } for pid=9610 comm="syz.4.2089" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 181.138626][ T29] audit: type=1400 audit(1746688567.161:9500): avc: denied { write } for pid=9602 comm="syz.0.2087" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 181.422317][ T29] audit: type=1400 audit(1746688567.441:9501): avc: denied { read write } for pid=9623 comm="syz.1.2093" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.453911][ T29] audit: type=1400 audit(1746688567.441:9502): avc: denied { open } for pid=9623 comm="syz.1.2093" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.669406][ T29] audit: type=1326 audit(1746688567.561:9503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5abe1e969 code=0x7ffc0000 [ 181.697243][ T29] audit: type=1326 audit(1746688567.561:9504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5abe1e969 code=0x7ffc0000 [ 181.725753][ T29] audit: type=1326 audit(1746688567.571:9505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fa5abe1e969 code=0x7ffc0000 [ 181.749703][ T29] audit: type=1326 audit(1746688567.571:9506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5abe1e969 code=0x7ffc0000 [ 181.775557][ T29] audit: type=1326 audit(1746688567.571:9507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5abe1e969 code=0x7ffc0000 [ 181.801192][ T29] audit: type=1326 audit(1746688567.571:9508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa5abe1e969 code=0x7ffc0000 [ 182.065118][ T9643] loop3: detected capacity change from 0 to 1024 [ 182.102749][ T9643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.145197][ T9643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2098: bg 0: block 88: padding at end of block bitmap is not set [ 182.198530][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.367887][ T9661] __nla_validate_parse: 12 callbacks suppressed [ 182.367906][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2105'. [ 182.416026][ T9661] hsr_slave_0 (unregistering): left promiscuous mode [ 182.438666][ T9662] bridge0: port 1(geneve0) entered blocking state [ 182.446861][ T9662] bridge0: port 1(geneve0) entered disabled state [ 182.454209][ T9662] geneve0: entered allmulticast mode [ 182.461573][ T9662] geneve0: entered promiscuous mode [ 182.589859][ T9672] 9pnet_fd: p9_fd_create_tcp (9672): problem connecting socket to 127.0.0.1 [ 183.678021][ T9683] loop3: detected capacity change from 0 to 512 [ 183.687660][ T9683] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 183.796598][ T9683] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 183.825948][ T9683] System zones: 1-12 [ 183.834139][ T9683] EXT4-fs (loop3): 1 truncate cleaned up [ 183.841174][ T9683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.992326][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.131828][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2123'. [ 184.462287][ T9732] No such timeout policy "syz1" [ 184.491849][ T9734] loop4: detected capacity change from 0 to 128 [ 184.501108][ T9734] FAT-fs (loop4): Directory bread(block 162) failed [ 184.508557][ T9734] FAT-fs (loop4): Directory bread(block 163) failed [ 184.516372][ T9734] FAT-fs (loop4): Directory bread(block 164) failed [ 184.524243][ T9734] FAT-fs (loop4): Directory bread(block 165) failed [ 184.531890][ T9734] FAT-fs (loop4): Directory bread(block 166) failed [ 184.539820][ T9734] FAT-fs (loop4): Directory bread(block 167) failed [ 184.547276][ T9734] FAT-fs (loop4): Directory bread(block 168) failed [ 184.554752][ T9734] FAT-fs (loop4): Directory bread(block 169) failed [ 185.010221][ T9756] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 186.488035][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 186.573403][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 186.573423][ T29] audit: type=1400 audit(1746688572.490:9847): avc: denied { setopt } for pid=9771 comm="syz.3.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 186.611964][ T29] audit: type=1400 audit(1746688572.630:9848): avc: denied { setopt } for pid=9779 comm="syz.0.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.801105][ T29] audit: type=1400 audit(1746688572.660:9849): avc: denied { write } for pid=9779 comm="syz.0.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.823184][ T29] audit: type=1326 audit(1746688572.660:9850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.0.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 186.850059][ T29] audit: type=1326 audit(1746688572.660:9851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.0.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 186.875240][ T29] audit: type=1400 audit(1746688572.730:9852): avc: denied { create } for pid=9782 comm="syz.1.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 186.897055][ T29] audit: type=1326 audit(1746688572.920:9853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.0.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 186.922926][ T29] audit: type=1326 audit(1746688572.920:9854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.0.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b34cfe969 code=0x7ffc0000 [ 186.952317][ T29] audit: type=1400 audit(1746688572.950:9855): avc: denied { write } for pid=9789 comm="syz.4.2151" name="tcp" dev="proc" ino=4026532420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 187.132090][ T9801] loop3: detected capacity change from 0 to 512 [ 187.140824][ T9801] EXT4-fs: Ignoring removed nobh option [ 187.147955][ T29] audit: type=1400 audit(1746688573.150:9856): avc: denied { watch } for pid=9800 comm="syz.3.2154" path="/418" dev="tmpfs" ino=2237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 187.173009][ T9801] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.235101][ T9801] EXT4-fs (loop3): 1 truncate cleaned up [ 187.657210][ T9803] vlan2: entered allmulticast mode [ 187.662627][ T9803] vlan1: entered allmulticast mode [ 187.668736][ T9803] veth0_vlan: entered allmulticast mode [ 187.677343][ T9801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.712745][ T9801] EXT4-fs error (device loop3): ext4_read_inline_dir:1501: inode #12: block 7: comm syz.3.2154: path /418/file5/file0: bad entry in directory: inode out of bounds - offset=24, inode=16777215, rec_len=16, size=80 fake=0 [ 187.738081][ T9801] EXT4-fs (loop3): Remounting filesystem read-only [ 187.837199][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.077021][ T9822] netlink: 'syz.4.2157': attribute type 11 has an invalid length. [ 188.085293][ T9822] netlink: 448 bytes leftover after parsing attributes in process `syz.4.2157'. [ 188.220903][ T9831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2162'. [ 188.326369][ T9838] xt_TCPMSS: Only works on TCP SYN packets [ 188.558835][ T9842] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2167'. [ 188.623216][ T9843] bridge0: port 1(geneve0) entered blocking state [ 188.630233][ T9843] bridge0: port 1(geneve0) entered disabled state [ 188.645304][ T9843] geneve0: entered allmulticast mode [ 188.652541][ T9843] geneve0: entered promiscuous mode [ 188.817736][ T9853] loop3: detected capacity change from 0 to 512 [ 188.836662][ T9853] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 188.856482][ T9855] netlink: 'syz.0.2173': attribute type 4 has an invalid length. [ 188.865579][ T9855] netlink: 'syz.0.2173': attribute type 4 has an invalid length. [ 188.893920][ T9858] syzkaller0: entered promiscuous mode [ 188.899965][ T9858] syzkaller0: entered allmulticast mode [ 188.907218][ T9853] EXT4-fs (loop3): 1 truncate cleaned up [ 188.914894][ T9853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.997294][ T9863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2175'. [ 189.214548][ T9853] ================================================================== [ 189.223131][ T9853] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 189.230373][ T9853] [ 189.232766][ T9853] write to 0xffff88810731cb84 of 4 bytes by task 9870 on cpu 1: [ 189.240963][ T9853] xas_set_mark+0x12b/0x140 [ 189.245617][ T9853] __folio_start_writeback+0x1dd/0x430 [ 189.251293][ T9853] ext4_bio_write_folio+0x590/0x9d0 [ 189.256524][ T9853] mpage_process_page_bufs+0x46c/0x5b0 [ 189.262033][ T9853] mpage_prepare_extent_to_map+0x775/0xb80 [ 189.268164][ T9853] ext4_do_writepages+0xa25/0x2270 [ 189.273542][ T9853] ext4_writepages+0x176/0x300 [ 189.278462][ T9853] do_writepages+0x1d2/0x480 [ 189.283114][ T9853] file_write_and_wait_range+0x156/0x2c0 [ 189.289052][ T9853] generic_buffers_fsync_noflush+0x45/0x120 [ 189.295146][ T9853] ext4_sync_file+0x1ab/0x690 [ 189.299923][ T9853] vfs_fsync_range+0x10a/0x130 [ 189.305720][ T9853] ext4_buffered_write_iter+0x34f/0x3c0 [ 189.311760][ T9853] ext4_file_write_iter+0x383/0xf00 [ 189.317190][ T9853] iter_file_splice_write+0x5ef/0x970 [ 189.322834][ T9853] direct_splice_actor+0x153/0x2a0 [ 189.327988][ T9853] splice_direct_to_actor+0x30f/0x680 [ 189.333406][ T9853] do_splice_direct+0xda/0x150 [ 189.338294][ T9853] do_sendfile+0x380/0x640 [ 189.342865][ T9853] __x64_sys_sendfile64+0x105/0x150 [ 189.348718][ T9853] x64_sys_call+0xb39/0x2fb0 [ 189.353791][ T9853] do_syscall_64+0xd0/0x1a0 [ 189.358430][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.365446][ T9853] [ 189.367836][ T9853] read to 0xffff88810731cb84 of 4 bytes by task 9853 on cpu 0: [ 189.375407][ T9853] xas_find_marked+0x5dc/0x620 [ 189.380389][ T9853] find_get_entry+0x5d/0x380 [ 189.385546][ T9853] filemap_get_folios_tag+0x92/0x210 [ 189.391579][ T9853] mpage_prepare_extent_to_map+0x330/0xb80 [ 189.397982][ T9853] ext4_do_writepages+0x6eb/0x2270 [ 189.403529][ T9853] ext4_writepages+0x176/0x300 [ 189.408466][ T9853] do_writepages+0x1d2/0x480 [ 189.413098][ T9853] file_write_and_wait_range+0x156/0x2c0 [ 189.419229][ T9853] generic_buffers_fsync_noflush+0x45/0x120 [ 189.425249][ T9853] ext4_sync_file+0x1ab/0x690 [ 189.430086][ T9853] vfs_fsync_range+0x10a/0x130 [ 189.435242][ T9853] ext4_buffered_write_iter+0x34f/0x3c0 [ 189.441097][ T9853] ext4_file_write_iter+0x383/0xf00 [ 189.446337][ T9853] iter_file_splice_write+0x5ef/0x970 [ 189.452348][ T9853] direct_splice_actor+0x153/0x2a0 [ 189.457489][ T9853] splice_direct_to_actor+0x30f/0x680 [ 189.464235][ T9853] do_splice_direct+0xda/0x150 [ 189.469551][ T9853] do_sendfile+0x380/0x640 [ 189.474413][ T9853] __x64_sys_sendfile64+0x105/0x150 [ 189.480019][ T9853] x64_sys_call+0xb39/0x2fb0 [ 189.484731][ T9853] do_syscall_64+0xd0/0x1a0 [ 189.489271][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.496333][ T9853] [ 189.499202][ T9853] value changed: 0x0a000021 -> 0x04000021 [ 189.505588][ T9853] [ 189.508127][ T9853] Reported by Kernel Concurrency Sanitizer on: [ 189.514308][ T9853] CPU: 0 UID: 0 PID: 9853 Comm: syz.3.2171 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 189.527654][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 189.538611][ T9853] ================================================================== [ 189.618504][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.