last executing test programs: 2m12.411966135s ago: executing program 0 (id=2618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xf69f907d751fe1c2}, 0x0) 2m12.344334875s ago: executing program 0 (id=2622): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x14, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 2m12.279964775s ago: executing program 0 (id=2625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001a00)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) dup3(0xffffffffffffffff, r0, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r2, 0x1) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r3 = creat(&(0x7f0000000000)='./bus\x00', 0x26) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x86001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x1c001, 0x0, 0x2, 0x5, 0x2, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) openat$cgroup_int(r4, &(0x7f0000000040)='io.bfq.weight\x00', 0x2, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd4) close(r6) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000fc0)={r5, 0x58, &(0x7f0000000f40)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x1a, 0xc, &(0x7f0000001000)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="3d6bd44bb829c06ec9b22b2785a7b9adb73704b2f059feeb875f45ee2f0fa46e54db36afcdccc1cbaa92686f6a9a47c0b3bd8251002dab3c75adbf9c66c07234ed554d7f91f3ed19e54ba9d1931962d160fdb8444f9afd6dfb5b5d25631b8962436efdf4cd119ad6b259da232f8d4531e359361b479f851582fbc9327765b0d861ae9ea55a23a85432b661ccfd05a968faf1ee18d79b1bede9d7a06dd87e97faf69a8aae6c25814fec9ce644dd0a6501c7784a285ed8edf31519c052ba6dea9e630e234b497a4cc3a44dffa9dc37ea1ff6afd482c2f195", @ANYRESOCT=r3, @ANYRESHEX], &(0x7f00000019c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 2m11.368832361s ago: executing program 0 (id=2652): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='ext4\x00', 0x800, 0x0) 2m11.00726306s ago: executing program 0 (id=2666): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") mkdir(&(0x7f0000000000)='./file\x00', 0x0) 2m10.383229957s ago: executing program 0 (id=2679): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0xb, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x1, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m10.363131837s ago: executing program 32 (id=2679): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0xb, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x1, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m39.610126331s ago: executing program 4 (id=3718): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00') preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/142, 0x8e}], 0x1, 0x9e2, 0x0, 0x0) 1m39.609724281s ago: executing program 4 (id=3719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m39.56256457s ago: executing program 4 (id=3720): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002380)=@mangle={'mangle\x00', 0x64, 0x6, 0x528, 0x300, 0x300, 0x2c8, 0x300, 0x1a0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) 1m39.48727311s ago: executing program 4 (id=3723): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x20800, 0x0) read$rfkill(r0, 0x0, 0x0) 1m39.48369144s ago: executing program 4 (id=3725): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b4b, &(0x7f0000000080)) 1m39.46249774s ago: executing program 4 (id=3727): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) 1m24.279626997s ago: executing program 33 (id=3727): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) 56.898896294s ago: executing program 2 (id=5049): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 56.871333034s ago: executing program 2 (id=5050): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000000c0), 0x4) 56.843233594s ago: executing program 2 (id=5053): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2d, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x4}]}}}]}, 0x40}}, 0x0) 56.786279974s ago: executing program 2 (id=5057): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3804402, &(0x7f00000002c0)={[{@user_xattr}, {@noload}, {@resuid}, {@data_err_abort}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x8}}, {@noinit_itable}, {@nomblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@nogrpid}]}, 0x1, 0x54f, &(0x7f0000000680)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0) mount$9p_xen(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 56.622592603s ago: executing program 2 (id=5063): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) 55.95495944s ago: executing program 2 (id=5079): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 55.92317114s ago: executing program 34 (id=5079): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.043410165s ago: executing program 3 (id=7346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x18, 0x1f, 0x4, "09fde5f067ebc42f7b16efa2e681616e7dce97a7"}]}}}}}}}}, 0x0) 999.768124ms ago: executing program 3 (id=7350): syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8080) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$cont(0x20, r0, 0x0, 0x0) 949.172104ms ago: executing program 3 (id=7352): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) 936.494054ms ago: executing program 6 (id=7353): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r0}, 0x10) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 872.184824ms ago: executing program 3 (id=7356): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xfe, 0x46c, &(0x7f0000001380)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) 724.554383ms ago: executing program 6 (id=7364): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) 684.598463ms ago: executing program 3 (id=7367): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@init_itable}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTdP96nQdjKE+SGGgk7l0bf0xwYf5KDoc6PsM7V0ZTZfRpGOtA7cH9+KLDEHEgfjkk+8+Dv8B/4qBDoaMog++VG5602Zr0mZdtmbm84HbnnPPTc89Ofd7em5OQgIYWGPZj0LEyxHxTRJxqKWsGHnh2NpxKw+uTWdbEqurn/6VRJLvax6f5L9H8sxLEfHbVxEnCpvrrS0tz5UrlXQhz4/X5y+P15aWT16cL8+ms+mlyamp029PTb737js9a+sb5/75/pM7H57++tjKd7/cO3wriTNxMC9rbccTuN6aGYux/DkZjjOPHDjRg8r6SbLbJ8CODOVxPhzZGHAohvKoB/7/voyIVWBAJeIfBlRzHtC8t+/RffBz4/4HazdAG+3/OS8prr02Evsa90YHVpKH7oyy+93RHtSf1fHrn7dvZVv07nUIgG1dvxERp4rFzeN/ko9/O3eqi2MercP4B8/OnWz+82a7+V9hff4TbeY/I21idye2j//CvR5U01E2/3u/7fx3fdFqdCjPvdCY8w0nFy5W0mxsezEijsfw3iy/1XrO6ZW7q53KWud/2ZbV35wL5udxr7j34cfMlOvlJ2lzq/s3Il4ptmt/st7/SZv+z56Pc13WcTS9/Wqnsu3b/3St/hTxetv+31jRSrZenxxvXA/jzatis79vHv29U/273f6s/w9s3f7RpHW9tvb4dfy479+0U9lOr/89yWeN9J5839Vyvb4wEbEn+Xjz/smNxzbzzeOz9h8/tvX41+763x8Rn3fZ/ptHbnY8tB/6f+ax+v/xE3c/+uKHTvV31/9vNVLH8z3djH/dnuCTPHcAAAAAAADQbwoRcTCSQmk9XSiUSmvv7zgSBwqVaq1+4kJ18dJMND4rOxrDheZK90jL+yEm8vfDNvOTj+SnIuJwRHw7tL+RL01XKzO73XgAAAAAAAAAAAAAAAAAAADoEyMdPv+f+WNot88OeOp85TcMrm3jvxff9AT0Jf//YXCJfxhc4h8Gl/iHwSX+YXCJfxhc4h8Gl/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2ra48uDad5WeuLC3OVa+cnElrc6X5xenSdHXhcmm2Wp2tpKXp6vx2f69SrV6emIzFq+P1tFYfry0tn5+vLl6qn784X55Nz6fDz6RVAAAAAAAAAAAAAAAAAAAA8HypLS3PlSuVdEHiuUi8FhF9cBotiWJ/nIZEjxO7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIb/AgAA//84SzbQ") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x800, 0x102) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae65ddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff402000000000000006ee6afaaf755a3f6a00400", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400", [0x8000000000]}) write$selinux_create(r0, &(0x7f00000008c0)=@objname={'system_u:object_r:auditd_var_run_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x80, 0x20, './file3\x00'}, 0x53) 603.554892ms ago: executing program 6 (id=7368): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 603.246112ms ago: executing program 7 (id=7369): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601"], 0x1c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 580.176742ms ago: executing program 7 (id=7371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) 515.236232ms ago: executing program 1 (id=7373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) 515.039122ms ago: executing program 6 (id=7374): socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000006000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_free\x00', r1, 0x0, 0xe6}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 500.147402ms ago: executing program 7 (id=7375): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x140, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x43}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1000}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf8, 0x3, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xee, 0x1, "6960bee7a7f3e3fb20ffaa6a202e95b0eefcbf9f514966c6f032395b558f45ad831bf2491365eb200c827831726bac45250f51939de4e6ca20fe7a06960f998d3a36d57ec4970bd21b08a767fe0818d7bc6ab0104115df9346367d9b0c00665cf79b64a19b6120c4491ef264fbddf280dfdda5b8a06b2a06225903c8ec97bf73111813eb44080e3fef060db6d9cee3477cb4341b7d6f83786688d2cfa766cb9543a69f0902c4e2cdc50344e7df739f84169a9858681474445697f1a9c5583b9a97eff0749e6246994672f0204c359c9d2ce278ede11ab52611b2305cc1e5e92a7e8b2cd84034971562a7"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}]}, 0x140}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008080) 358.941911ms ago: executing program 1 (id=7381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 358.793971ms ago: executing program 6 (id=7382): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x558}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 358.701221ms ago: executing program 6 (id=7383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 318.354321ms ago: executing program 1 (id=7385): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fdatasync(0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x1, 0xea044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4357, 0x5}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80a, &(0x7f00000003c0), 0x1, 0x796, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 304.575351ms ago: executing program 7 (id=7386): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000024010000", @ANYRES32, @ANYBLOB="000000000000000000ebff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28, @ANYRES16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x96ef}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 230.836881ms ago: executing program 5 (id=7389): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x578, 0x0, 0x2e8, 0x3d8, 0x2e8, 0x1f0, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, &(0x7f0000000380), {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xff000000, 0xff000000, 0xffffff00], 'veth0_to_bridge\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0xfe, 0x4, 0x78}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x9}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x39}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0x0, 0xffffff00], 'ip_vti0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x16, 0x9, 0x0, 0x40}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x3, 0x100, 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3f}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xffffffff], [0xff, 0xa73f37e41864441c, 0xff, 0xffffff00], 'syz_tun\x00', 'veth1\x00', {}, {}, 0x2b, 0x6, 0x5, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@remote, 0x3f, 0x37, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) 222.573091ms ago: executing program 7 (id=7390): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x80, 0x0, 0x7ffc0002}]}) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x0, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r8, &(0x7f0000000740)=""/384, 0x200008c0) write(r6, &(0x7f0000000200)='~', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000e4ff0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0af8fa00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)="7a2327e3fe2872fa0c123c6edcdc7c7b8bf391ff38e15202", 0x18}, {&(0x7f0000000400)="2c5e2f1e", 0x4}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x39d5}, 0x18) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x681, 0x5, 0x90, 0x1}]}) r10 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$xdp(r11, &(0x7f0000000680)={&(0x7f0000000380)={0x2c, 0xd, r12, 0x3}, 0x10, &(0x7f0000000640)=[{&(0x7f00000003c0)="f9a3f37785ee8b7e9ffce52380f494b7a718fcafba0dd87e6cd2faadad421fbc3c8b0ed3c047a4", 0x27}, {0x0}, {&(0x7f0000000500)="f4ba01", 0x3}], 0x3, 0x0, 0x0, 0x885}, 0x48000) r13 = dup3(r9, r10, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f00000006c0)={0x43, 0x2, 0x3}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r13, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r10, 0x10f, 0x88) 177.262511ms ago: executing program 5 (id=7391): unshare(0x28020480) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x14, 0x0, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@void, @void}}}, 0x14}}, 0x0) 80.44728ms ago: executing program 5 (id=7392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 80.29314ms ago: executing program 1 (id=7393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff20"], 0x28}}, 0x0) 80.03812ms ago: executing program 5 (id=7394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x1, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}}}]}, 0x88}}, 0x0) 56.63301ms ago: executing program 5 (id=7395): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, r1, 0x1, 0x2, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 41.34691ms ago: executing program 1 (id=7396): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) 497.31µs ago: executing program 1 (id=7397): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) sysinfo(&(0x7f0000000280)=""/142) 0s ago: executing program 5 (id=7398): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) kernel console output (not intermixed with test programs): d of block bitmap is not set [ 321.775432][T19521] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.797565][T19535] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.5240: Failed to acquire dquot type 1 [ 321.824326][T19535] EXT4-fs (loop5): 1 truncate cleaned up [ 321.830839][T19535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.859142][T12975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.985104][T19560] __nla_validate_parse: 8 callbacks suppressed [ 321.985121][T19560] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5250'. [ 322.044401][T19563] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5251'. [ 322.116398][T19568] loop5: detected capacity change from 0 to 1024 [ 322.123435][T19568] EXT4-fs: Ignoring removed nobh option [ 322.129032][T19568] EXT4-fs: Ignoring removed mblk_io_submit option [ 322.145555][T19568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.206186][T12975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.300484][T19581] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 322.300484][T19581] program syz.5.5258 not setting count and/or reply_len properly [ 322.364652][T19585] loop6: detected capacity change from 0 to 256 [ 322.490394][T19106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.520739][T19597] loop5: detected capacity change from 0 to 8192 [ 322.565369][T19604] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5268'. [ 322.590970][T19606] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5269'. [ 322.632802][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 322.662359][T19612] loop5: detected capacity change from 0 to 512 [ 322.669668][T19612] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 322.681041][T19612] netlink: 208 bytes leftover after parsing attributes in process `syz.5.5272'. [ 322.808111][T19633] SELinux: policydb version 0 does not match my version range 15-33 [ 322.816239][T19624] loop7: detected capacity change from 0 to 2048 [ 322.822946][T19633] SELinux: failed to load policy [ 322.834676][T19624] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.967095][T19645] loop5: detected capacity change from 0 to 512 [ 322.975265][T19645] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 322.986677][T19645] netlink: 208 bytes leftover after parsing attributes in process `syz.5.5286'. [ 323.044253][T19648] loop5: detected capacity change from 0 to 256 [ 323.135220][T19654] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5290'. [ 323.229674][T19661] netlink: 'syz.5.5293': attribute type 3 has an invalid length. [ 323.337170][T19671] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 323.426894][T19678] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5301'. [ 323.650712][T19106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.672849][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 323.712707][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5310'. [ 323.721758][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5310'. [ 324.076797][T19721] loop5: detected capacity change from 0 to 2048 [ 324.095534][T19721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.277970][T19750] random: crng reseeded on system resumption [ 324.381402][T19756] loop6: detected capacity change from 0 to 512 [ 324.389427][T19756] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 324.589960][T19763] loop6: detected capacity change from 0 to 512 [ 324.597055][T19763] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 324.712837][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 324.826976][ T29] kauditd_printk_skb: 928 callbacks suppressed [ 324.826993][ T29] audit: type=1400 audit(1734643938.557:31259): avc: denied { write } for pid=19773 comm="syz.6.5342" name="fdinfo" dev="proc" ino=55688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 324.861711][T12975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.875545][ T29] audit: type=1400 audit(1734643938.567:31260): avc: denied { add_name } for pid=19773 comm="syz.6.5342" name="blkio.bfq.io_merged" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 324.897252][ T29] audit: type=1400 audit(1734643938.567:31261): avc: denied { create } for pid=19773 comm="syz.6.5342" name="blkio.bfq.io_merged" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 324.918748][ T29] audit: type=1400 audit(1734643938.567:31262): avc: denied { associate } for pid=19773 comm="syz.6.5342" name="blkio.bfq.io_merged" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 324.941446][ T29] audit: type=1400 audit(1734643938.607:31263): avc: denied { read write } for pid=19777 comm="syz.3.5345" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 324.965293][ T29] audit: type=1400 audit(1734643938.607:31264): avc: denied { open } for pid=19777 comm="syz.3.5345" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 324.976076][T19785] loop6: detected capacity change from 0 to 512 [ 325.004517][T19785] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 325.043882][T19792] loop3: detected capacity change from 0 to 512 [ 325.050798][T19792] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 325.082393][ T29] audit: type=1400 audit(1734643938.807:31265): avc: denied { create } for pid=19796 comm="syz.3.5351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 325.105160][ T29] audit: type=1400 audit(1734643938.817:31266): avc: denied { write } for pid=19796 comm="syz.3.5351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 325.129895][ T29] audit: type=1400 audit(1734643938.857:31267): avc: denied { relabelfrom } for pid=19793 comm="syz.5.5350" name="" dev="pipefs" ino=54691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 325.201428][ T29] audit: type=1400 audit(1734643938.927:31268): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 325.309263][T19820] loop7: detected capacity change from 0 to 512 [ 325.325213][T19820] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 325.350104][T19821] loop5: detected capacity change from 0 to 2048 [ 325.363893][T19825] blktrace: Concurrent blktraces are not allowed on sg0 [ 325.399004][T19821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.416168][T19821] EXT4-fs (loop5): shut down requested (1) [ 325.440768][T12975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.475864][T19845] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19845 comm=syz.5.5371 [ 325.529460][T19842] lo speed is unknown, defaulting to 1000 [ 325.582286][T19851] loop5: detected capacity change from 0 to 2048 [ 325.618363][T19851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.626974][T19842] lo speed is unknown, defaulting to 1000 [ 325.714056][T19869] bond1: entered promiscuous mode [ 325.719244][T19869] bond1: entered allmulticast mode [ 325.725081][T19869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.740024][T19869] bond1 (unregistering): Released all slaves [ 325.752825][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 326.325603][T19916] loop7: detected capacity change from 0 to 512 [ 326.366388][T19918] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 326.401510][T12975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.444775][T19927] sch_tbf: burst 19869 is lower than device lo mtu (39799) ! [ 326.498842][T19940] syz.6.5412[19940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.498952][T19940] syz.6.5412[19940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.510664][T19940] syz.6.5412[19940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.576148][T19945] bond1: entered promiscuous mode [ 326.592722][T19945] bond1: entered allmulticast mode [ 326.599963][T19945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.600254][T19948] netlink: 'syz.7.5415': attribute type 1 has an invalid length. [ 326.616934][T19945] bond1 (unregistering): Released all slaves [ 326.787711][T19970] loop7: detected capacity change from 0 to 512 [ 326.794072][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 326.808389][T19970] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 326.845199][T19970] ref_ctr increment failed for inode: 0x167 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888133c65a40 [ 326.863341][T19969] uprobe: syz.7.5426:19969 failed to unregister, leaking uprobe [ 327.070144][T20001] __nla_validate_parse: 10 callbacks suppressed [ 327.070164][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5438'. [ 327.079067][T19999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.085649][T20001] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5438'. [ 327.128490][T20003] netlink: 'syz.7.5439': attribute type 13 has an invalid length. [ 327.136449][T20003] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5439'. [ 327.137855][T19997] loop3: detected capacity change from 0 to 8192 [ 327.146100][T20003] syz_tun: refused to change device tx_queue_len [ 327.155214][T19999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.158338][T20003] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 327.173718][T20005] loop6: detected capacity change from 0 to 512 [ 327.189844][T20005] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 327.200125][T20005] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 327.214217][T19999] xt_TCPMSS: Only works on TCP SYN packets [ 327.220924][T19997] loop3: p1 p2 < > p3 p4 < p5 > [ 327.227586][T19997] loop3: p1 size 108986237 extends beyond EOD, truncated [ 327.240788][T19997] loop3: p3 size 131072 extends beyond EOD, truncated [ 327.249130][T19997] loop3: p5 size 108986237 extends beyond EOD, truncated [ 327.336868][T20017] loop7: detected capacity change from 0 to 512 [ 327.343804][T20017] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 327.356978][T20017] netlink: 208 bytes leftover after parsing attributes in process `syz.7.5444'. [ 327.374857][T20017] ref_ctr increment failed for inode: 0x183 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888133c664c0 [ 327.388589][T20016] uprobe: syz.7.5444:20016 failed to unregister, leaking uprobe [ 327.409525][T20021] loop3: detected capacity change from 0 to 512 [ 327.416649][T20021] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 327.427667][T20021] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5445'. [ 327.453846][T20021] ref_ctr increment failed for inode: 0x1690 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b60c000 [ 327.468023][T20020] uprobe: syz.3.5445:20020 failed to unregister, leaking uprobe [ 327.488836][T20024] loop7: detected capacity change from 0 to 512 [ 327.495968][T20024] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 327.507193][T20024] netlink: 208 bytes leftover after parsing attributes in process `syz.7.5446'. [ 327.534043][T20024] ref_ctr increment failed for inode: 0x18a offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b60e4c0 [ 327.549261][T20023] uprobe: syz.7.5446:20023 failed to unregister, leaking uprobe [ 327.709871][T20048] loop7: detected capacity change from 0 to 512 [ 327.718838][T20048] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 327.730451][T20048] netlink: 208 bytes leftover after parsing attributes in process `syz.7.5457'. [ 327.777468][T20048] ref_ctr increment failed for inode: 0x19b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b60e4c0 [ 327.791320][T20047] uprobe: syz.7.5457:20047 failed to unregister, leaking uprobe [ 327.832818][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 327.855920][T20055] loop3: detected capacity change from 0 to 2048 [ 327.887234][T20055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.914830][T20075] ip6tnl2: entered promiscuous mode [ 327.920107][T20075] ip6tnl2: entered allmulticast mode [ 328.079010][T20089] lo speed is unknown, defaulting to 1000 [ 328.128935][T20096] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5477'. [ 328.164271][T20096] ref_ctr increment failed for inode: 0x190d offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888133c65500 [ 328.172562][T20089] lo speed is unknown, defaulting to 1000 [ 328.198483][T20095] uprobe: syz.1.5477:20095 failed to unregister, leaking uprobe [ 328.426031][T20128] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5491'. [ 328.453539][T20128] ref_ctr increment failed for inode: 0x191d offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888133c65500 [ 328.479480][T20127] uprobe: syz.1.5491:20127 failed to unregister, leaking uprobe [ 328.527076][T20134] netlink: 'syz.6.5493': attribute type 1 has an invalid length. [ 328.557216][T20137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.565804][T20137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.582202][T20139] SELinux: syz.1.5495 (20139) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 328.630203][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.715793][T20145] loop3: detected capacity change from 0 to 2048 [ 328.734518][T20145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.872793][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 329.169234][T20159] loop6: detected capacity change from 0 to 512 [ 329.177087][T20159] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 329.190076][T20159] netlink: 208 bytes leftover after parsing attributes in process `syz.6.5503'. [ 329.207677][T20159] ref_ctr increment failed for inode: 0x539 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888133c66f40 [ 329.219931][T20158] uprobe: syz.6.5503:20158 failed to unregister, leaking uprobe [ 329.529405][T20187] syz.5.5516[20187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.529479][T20187] syz.5.5516[20187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.534397][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.542860][T20187] syz.5.5516[20187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.719245][T20217] vlan2: entered allmulticast mode [ 329.840417][ T29] kauditd_printk_skb: 921 callbacks suppressed [ 329.840435][ T29] audit: type=1400 audit(1734643943.567:32190): avc: denied { read } for pid=20236 comm="syz.5.5540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 329.895185][ T29] audit: type=1400 audit(1734643943.627:32191): avc: denied { write } for pid=20243 comm="syz.3.5543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 329.914763][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 329.941051][T20252] sd 0:0:1:0: device reset [ 329.960263][ T29] audit: type=1400 audit(1734643943.687:32192): avc: denied { create } for pid=20253 comm="syz.1.5549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 330.014023][ T29] audit: type=1326 audit(1734643943.737:32193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20259 comm="syz.3.5552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51f5bb5d29 code=0x0 [ 330.068924][T20267] loop5: detected capacity change from 0 to 512 [ 330.078414][T20267] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 330.108956][ T29] audit: type=1326 audit(1734643943.837:32194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20271 comm="syz.1.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 330.134161][ T29] audit: type=1326 audit(1734643943.837:32195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20271 comm="syz.1.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 330.157974][ T29] audit: type=1326 audit(1734643943.837:32196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20271 comm="syz.1.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 330.181602][ T29] audit: type=1326 audit(1734643943.837:32197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20271 comm="syz.1.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 330.205468][ T29] audit: type=1326 audit(1734643943.837:32198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20271 comm="syz.1.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 330.230993][ T29] audit: type=1400 audit(1734643943.867:32199): avc: denied { connect } for pid=20274 comm="syz.1.5558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 330.239016][T20281] loop6: detected capacity change from 0 to 1024 [ 330.257626][T20281] EXT4-fs: Ignoring removed mblk_io_submit option [ 330.264102][T20281] EXT4-fs: Ignoring removed orlov option [ 330.269760][T20281] EXT4-fs: Ignoring removed nomblk_io_submit option [ 330.284843][T20281] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.314484][T16728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.354488][T20291] netlink: 'syz.5.5563': attribute type 1 has an invalid length. [ 330.373993][T20293] syz.6.5564[20293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.374179][T20293] syz.6.5564[20293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.386003][T20293] syz.6.5564[20293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.424176][ T6553] IPVS: starting estimator thread 0... [ 330.512039][T20314] loop5: detected capacity change from 0 to 512 [ 330.520680][T20314] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 330.535024][T20300] IPVS: using max 2016 ests per chain, 100800 per kthread [ 330.564278][T20314] ref_ctr increment failed for inode: 0xc6d offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888133c67480 [ 330.579619][T20313] uprobe: syz.5.5574:20313 failed to unregister, leaking uprobe [ 330.837409][T20360] loop5: detected capacity change from 0 to 512 [ 330.855754][T20360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.866020][T20367] loop3: detected capacity change from 0 to 512 [ 330.868449][T20360] ext4 filesystem being mounted at /606/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.887164][T20367] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 330.905314][T12975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.928661][T20370] loop5: detected capacity change from 0 to 512 [ 330.935902][T20370] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 330.952819][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 330.975783][T20370] ref_ctr increment failed for inode: 0xc93 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b60ea00 [ 330.991362][T20369] uprobe: syz.5.5597:20369 failed to unregister, leaking uprobe [ 331.026975][T20382] syz.3.5602[20382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.233013][T20400] loop3: detected capacity change from 0 to 2048 [ 331.250793][T20410] loop6: detected capacity change from 0 to 2048 [ 331.265916][T20400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.292144][T20410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.416878][T20420] loop5: detected capacity change from 0 to 128 [ 331.424283][T20420] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 331.455685][ T5068] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 331.852992][T20446] blktrace: Concurrent blktraces are not allowed on sg0 [ 331.992809][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 332.048494][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.072470][T16728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.219109][T20479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.227951][T20479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.766619][T20507] blktrace: Concurrent blktraces are not allowed on sg0 [ 332.791767][T20509] SELinux: syz.7.5658 (20509) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 332.833648][T20515] __nla_validate_parse: 8 callbacks suppressed [ 332.833664][T20515] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5661'. [ 332.871322][T20515] ref_ctr increment failed for inode: 0x19ea offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b60c540 [ 332.883595][T20512] uprobe: syz.1.5661:20512 failed to unregister, leaking uprobe [ 333.032809][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 333.105265][T20553] loop6: detected capacity change from 0 to 512 [ 333.114593][T20557] loop7: detected capacity change from 0 to 512 [ 333.144269][T20561] loop3: detected capacity change from 0 to 512 [ 333.155443][T20561] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 333.166903][T20561] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5675'. [ 333.185046][T20557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.197983][T20557] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.223748][T20566] ebtables: ebtables: counters copy to user failed while replacing table [ 333.276411][T19106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.294346][T20578] loop6: detected capacity change from 0 to 512 [ 333.309928][T20578] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 333.331345][T20578] netlink: 208 bytes leftover after parsing attributes in process `syz.6.5679'. [ 333.359324][T20588] bond1: entered promiscuous mode [ 333.364452][T20588] bond1: entered allmulticast mode [ 333.373558][T20578] ref_ctr increment failed for inode: 0x62c offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88813b401f80 [ 333.385486][T20575] uprobe: syz.6.5679:20575 failed to unregister, leaking uprobe [ 333.393527][T20588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.403312][T20588] batman_adv: batadv1: Adding interface: bond1 [ 333.409517][T20588] batman_adv: batadv1: The MTU of interface bond1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.435159][T20588] batman_adv: batadv1: Interface activated: bond1 [ 333.474141][T20598] loop7: detected capacity change from 0 to 512 [ 333.488565][T20598] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 333.500029][T20598] netlink: 208 bytes leftover after parsing attributes in process `syz.7.5689'. [ 333.595979][T20615] loop5: detected capacity change from 0 to 512 [ 333.605115][T20616] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 333.611681][T20616] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 333.618288][T20615] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 333.619110][T20616] vhci_hcd vhci_hcd.0: Device attached [ 333.643213][T20617] vhci_hcd: connection closed [ 333.649688][ T28] vhci_hcd: stop threads [ 333.658729][ T28] vhci_hcd: release socket [ 333.663285][ T28] vhci_hcd: disconnect device [ 333.677967][T20615] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 333.821238][T20638] loop5: detected capacity change from 0 to 512 [ 333.921960][T20652] netlink: 'syz.5.5713': attribute type 4 has an invalid length. [ 333.994272][T20661] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 334.000877][T20661] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 334.008477][T20661] vhci_hcd vhci_hcd.0: Device attached [ 334.020892][T20663] vhci_hcd: connection closed [ 334.021048][ T6921] vhci_hcd: stop threads [ 334.030100][ T6921] vhci_hcd: release socket [ 334.034544][ T6921] vhci_hcd: disconnect device [ 334.072800][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.246538][T20677] binfmt_misc: register: failed to install interpreter file ./file0 [ 334.271593][T20679] bpf_get_probe_write_proto: 2 callbacks suppressed [ 334.271614][T20679] syz.3.5724[20679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.283578][T20679] syz.3.5724[20679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.299666][T20679] syz.3.5724[20679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.464201][T20696] loop3: detected capacity change from 0 to 1024 [ 334.484557][T20696] EXT4-fs: Ignoring removed orlov option [ 334.490246][T20696] EXT4-fs: Ignoring removed orlov option [ 334.496630][T20696] EXT4-fs: Ignoring removed bh option [ 334.514529][T20696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.804439][T20724] loop7: detected capacity change from 0 to 512 [ 334.814898][T20724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.828946][T20724] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.848072][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 334.848088][ T29] audit: type=1326 audit(1734643948.577:32780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20694 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28701fcce7 code=0x7ffc0000 [ 334.877784][ T29] audit: type=1326 audit(1734643948.587:32781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20694 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28701a1f29 code=0x7ffc0000 [ 334.900946][ T29] audit: type=1326 audit(1734643948.587:32782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20694 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 334.907039][T19106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.924167][ T29] audit: type=1326 audit(1734643948.617:32783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20694 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28701fcce7 code=0x7ffc0000 [ 334.956316][ T29] audit: type=1326 audit(1734643948.617:32784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20694 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28701a1f29 code=0x7ffc0000 [ 334.979300][ T29] audit: type=1326 audit(1734643948.617:32785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20694 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 335.002814][ T29] audit: type=1326 audit(1734643948.667:32786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20694 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28701fcce7 code=0x7ffc0000 [ 335.025906][ T29] audit: type=1326 audit(1734643948.667:32787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20694 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28701a1f29 code=0x7ffc0000 [ 335.048992][ T29] audit: type=1326 audit(1734643948.667:32788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20694 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 335.072101][ T29] audit: type=1326 audit(1734643948.697:32789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20694 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28701fcce7 code=0x7ffc0000 [ 335.112814][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 335.166180][T20746] loop7: detected capacity change from 0 to 2048 [ 335.185595][T20746] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.291249][T20758] loop3: detected capacity change from 0 to 512 [ 335.307611][T20758] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 335.319947][T20758] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5753'. [ 335.388142][T20765] loop3: detected capacity change from 0 to 512 [ 335.407378][T20765] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 335.429657][T20765] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5756'. [ 335.459179][T20765] ref_ctr increment failed for inode: 0x177b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888133c679c0 [ 335.469762][T20776] loop6: detected capacity change from 0 to 512 [ 335.479241][T20763] uprobe: syz.3.5756:20763 failed to unregister, leaking uprobe [ 335.495296][T20776] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.5760: iget: bad extended attribute block 1 [ 335.512423][T20776] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.5760: couldn't read orphan inode 15 (err -117) [ 335.532057][T20776] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #2: block 13: comm syz.6.5760: lblock 0 mapped to illegal pblock 13 (length 1) [ 335.554915][T20776] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz.6.5760: error -117 reading directory block [ 335.628959][T20787] sctp: [Deprecated]: syz.6.5764 (pid 20787) Use of int in maxseg socket option. [ 335.628959][T20787] Use struct sctp_assoc_value instead [ 335.667792][T20790] loop5: detected capacity change from 0 to 1024 [ 335.674797][T20790] EXT4-fs: Ignoring removed orlov option [ 335.680492][T20790] EXT4-fs: Ignoring removed orlov option [ 335.686327][T20790] EXT4-fs: Ignoring removed bh option [ 335.686630][T20792] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5766'. [ 335.700763][T20792] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5766'. [ 335.915533][T20816] loop6: detected capacity change from 0 to 512 [ 335.923138][T20816] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 335.935228][T20816] netlink: 208 bytes leftover after parsing attributes in process `syz.6.5778'. [ 335.988812][T20825] loop7: detected capacity change from 0 to 2048 [ 335.997958][T20829] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 336.152807][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 336.209648][T20845] netlink: 'syz.6.5788': attribute type 1 has an invalid length. [ 336.217494][T20845] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5788'. [ 336.491575][T20860] loop5: detected capacity change from 0 to 2048 [ 336.498492][T20860] EXT4-fs: Ignoring removed mblk_io_submit option [ 336.521416][T20866] SELinux: Context system_u:object_r:event_device_t:s0 is not valid (left unmapped). [ 336.524515][T20860] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5795: bg 0: block 234: padding at end of block bitmap is not set [ 336.546685][T20860] EXT4-fs (loop5): Remounting filesystem read-only [ 336.618427][T20876] pim6reg: entered allmulticast mode [ 336.625821][T20876] pim6reg: left allmulticast mode [ 336.697785][T20881] loop5: detected capacity change from 0 to 1024 [ 336.705919][T20881] EXT4-fs: Ignoring removed orlov option [ 336.711581][T20881] EXT4-fs: Ignoring removed orlov option [ 336.717765][T20881] EXT4-fs: Ignoring removed bh option [ 336.877211][T20895] loop7: detected capacity change from 0 to 2048 [ 337.192809][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 337.491183][T20915] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 337.605756][T20920] loop5: detected capacity change from 0 to 2048 [ 337.851853][T20945] loop6: detected capacity change from 0 to 512 [ 337.877950][T20948] loop7: detected capacity change from 0 to 1024 [ 337.885269][T20945] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.5830: couldn't read orphan inode 26 (err -116) [ 337.898877][T20948] EXT4-fs: Ignoring removed orlov option [ 337.904515][T20945] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.915084][T20948] EXT4-fs: Ignoring removed orlov option [ 337.923076][T20948] EXT4-fs: Ignoring removed bh option [ 338.159977][T20971] loop3: detected capacity change from 0 to 512 [ 338.175251][T20971] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 338.187688][T20971] __nla_validate_parse: 1 callbacks suppressed [ 338.187705][T20971] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5838'. [ 338.232800][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 338.244857][T20971] ref_ctr increment failed for inode: 0x17d7 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b60e4c0 [ 338.276761][T20970] uprobe: syz.3.5838:20970 failed to unregister, leaking uprobe [ 338.440730][T20978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.450839][T20978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.514233][T20984] syz.3.5844[20984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.514359][T20984] syz.3.5844[20984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.526108][T20984] syz.3.5844[20984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.558236][T20986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5845'. [ 338.798975][T21007] loop7: detected capacity change from 0 to 1024 [ 338.805969][T21007] EXT4-fs: Ignoring removed orlov option [ 338.828127][T21007] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c119, mo2=0002] [ 338.899272][T21018] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 338.919563][T21019] sd 0:0:1:0: device reset [ 338.938490][T21018] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 339.023045][T21023] loop7: detected capacity change from 0 to 2048 [ 339.161808][T21045] loop6: detected capacity change from 0 to 2048 [ 339.272810][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.157639][T21062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5877'. [ 340.186967][T21062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5877'. [ 340.196685][T21061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5876'. [ 340.255507][T21065] rdma_op ffff88813128b980 conn xmit_rdma 0000000000000000 [ 340.312821][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.324882][ T29] kauditd_printk_skb: 727 callbacks suppressed [ 340.324897][ T29] audit: type=1326 audit(1734643954.057:33517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21075 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5bb5d29 code=0x7ffc0000 [ 340.363389][ T29] audit: type=1326 audit(1734643954.057:33518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21075 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5bb5d29 code=0x7ffc0000 [ 340.398561][ T29] audit: type=1326 audit(1734643954.127:33519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21075 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51f5bb5d29 code=0x7ffc0000 [ 340.422136][ T29] audit: type=1326 audit(1734643954.127:33520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21075 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5bb5d29 code=0x7ffc0000 [ 340.445767][ T29] audit: type=1326 audit(1734643954.127:33521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21075 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5bb5d29 code=0x7ffc0000 [ 340.469415][ T29] audit: type=1326 audit(1734643954.127:33522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21075 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51f5bb5d29 code=0x7ffc0000 [ 340.492990][ T29] audit: type=1326 audit(1734643954.127:33523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21075 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5bb5d29 code=0x7ffc0000 [ 340.516564][ T29] audit: type=1326 audit(1734643954.127:33524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21075 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5bb5d29 code=0x7ffc0000 [ 340.540194][ T29] audit: type=1326 audit(1734643954.127:33525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21075 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f51f5bb5d29 code=0x7ffc0000 [ 340.563784][ T29] audit: type=1326 audit(1734643954.127:33526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21075 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f5bb5d29 code=0x7ffc0000 [ 340.632953][T21088] sctp: [Deprecated]: syz.3.5888 (pid 21088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.632953][T21088] Use struct sctp_sack_info instead [ 340.700900][T21097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.712712][T21097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.844655][T21128] syz.7.5908[21128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.844752][T21128] syz.7.5908[21128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.848756][T21124] loop3: detected capacity change from 0 to 4096 [ 340.857623][T21128] syz.7.5908[21128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.867921][T21124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 340.901834][T21124] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #15: comm syz.3.5905: corrupted inode contents [ 340.914055][T21124] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #15: comm syz.3.5905: mark_inode_dirty error [ 340.925595][T21124] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #15: comm syz.3.5905: corrupted inode contents [ 340.937750][T21124] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.5905: mark_inode_dirty error [ 340.949237][T21124] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #15: comm syz.3.5905: corrupted inode contents [ 340.961344][T21124] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.5905: mark_inode_dirty error [ 340.972848][T21124] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #15: comm syz.3.5905: corrupted inode contents [ 340.985031][T21124] EXT4-fs error (device loop3): ext4_truncate:4240: inode #15: comm syz.3.5905: mark_inode_dirty error [ 340.997604][T21124] EXT4-fs error (device loop3) in ext4_setattr:5568: Corrupt filesystem [ 341.007789][T21131] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #15: comm syz.3.5905: corrupted inode contents [ 341.036621][ T3300] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 341.141765][T21150] loop3: detected capacity change from 0 to 512 [ 341.154279][T21150] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 341.162341][T21150] EXT4-fs (loop3): orphan cleanup on readonly fs [ 341.169075][T21150] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 341.184257][T21150] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 341.191535][T21150] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5917: bg 0: block 40: padding at end of block bitmap is not set [ 341.206229][T21150] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 341.215400][T21150] EXT4-fs (loop3): 1 truncate cleaned up [ 341.263333][T21162] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 341.275248][T21164] netlink: 'syz.3.5922': attribute type 21 has an invalid length. [ 341.283507][T21164] netlink: 'syz.3.5922': attribute type 1 has an invalid length. [ 341.291250][T21164] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5922'. [ 341.301149][T21166] random: crng reseeded on system resumption [ 341.326717][T21168] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21168 comm=syz.3.5924 [ 341.352818][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.399857][T21175] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5927'. [ 341.408901][T21175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5927'. [ 341.452073][T21166] Restarting kernel threads ... done. [ 341.592457][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5932'. [ 341.606052][T21189] blktrace: Concurrent blktraces are not allowed on sg0 [ 341.831560][T21217] loop6: detected capacity change from 0 to 512 [ 341.851023][T21217] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 341.861004][T21219] 9pnet: Could not find request transport: fdfd [ 341.867334][T21223] bridge0: port 3(vlan2) entered blocking state [ 341.873744][T21223] bridge0: port 3(vlan2) entered disabled state [ 341.881207][T21223] vlan2: entered allmulticast mode [ 341.886591][T21217] netlink: 208 bytes leftover after parsing attributes in process `syz.6.5946'. [ 341.895924][T21223] vlan2: left allmulticast mode [ 341.908997][T21224] loop3: detected capacity change from 0 to 128 [ 341.917016][T21217] ref_ctr increment failed for inode: 0x791 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811b60c000 [ 341.918529][T21224] EXT4-fs: Ignoring removed oldalloc option [ 341.935183][T21224] journal_path: Non-blockdev passed as './file0' [ 341.941542][T21224] EXT4-fs: error: could not find journal device path [ 341.941879][T21216] uprobe: syz.6.5946:21216 failed to unregister, leaking uprobe [ 342.052447][T21245] loop6: detected capacity change from 0 to 128 [ 342.074966][T21245] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 342.083219][T21245] FAT-fs (loop6): Filesystem has been set read-only [ 342.090389][T21250] IPv6: NLM_F_CREATE should be specified when creating new route [ 342.093989][T21245] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 342.140434][T21257] syz.5.5964[21257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.140561][T21257] syz.5.5964[21257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.151229][T21259] syz.6.5965[21259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.153821][T21257] syz.5.5964[21257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.163782][T21259] syz.6.5965[21259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.192798][T21259] syz.6.5965[21259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.213805][T21262] syz.1.5966[21262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.346888][T21279] loop6: detected capacity change from 0 to 1024 [ 342.364919][T21279] EXT4-fs: Ignoring removed orlov option [ 342.370561][T21279] EXT4-fs: Ignoring removed orlov option [ 342.376277][T21279] EXT4-fs: Ignoring removed bh option [ 342.384443][T21279] EXT4-fs mount: 30 callbacks suppressed [ 342.384454][T21279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.402217][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.087924][T21292] loop3: detected capacity change from 0 to 2048 [ 343.114835][T21292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.157648][T16728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.409939][T21332] loop6: detected capacity change from 0 to 1024 [ 343.417172][T21332] EXT4-fs: Ignoring removed orlov option [ 343.422960][T21332] EXT4-fs: Ignoring removed orlov option [ 343.428819][T21332] EXT4-fs: Ignoring removed bh option [ 343.432889][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.445716][T21332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.597399][T21350] bridge0: port 3(vlan0) entered blocking state [ 343.603893][T21350] bridge0: port 3(vlan0) entered disabled state [ 343.610504][T21350] vlan0: entered allmulticast mode [ 343.616432][T21350] vlan0: left allmulticast mode [ 343.891701][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.939365][T21375] netlink: 'syz.7.6013': attribute type 3 has an invalid length. [ 344.168774][T21392] netlink: 'syz.7.6021': attribute type 10 has an invalid length. [ 344.181862][T21392] team0: Device hsr_slave_0 failed to register rx_handler [ 344.232027][T21394] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.6022'. [ 344.245006][T16728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.339628][T21411] program syz.7.6030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.394691][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6033'. [ 344.442923][T21426] netlink: 'syz.5.6037': attribute type 15 has an invalid length. [ 344.472830][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 344.482131][T21401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.492116][T21401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.500141][T21436] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 344.610799][T21441] lo speed is unknown, defaulting to 1000 [ 344.675405][T21441] lo speed is unknown, defaulting to 1000 [ 344.742707][T21444] loop7: detected capacity change from 0 to 1024 [ 344.750732][T21444] EXT4-fs: Ignoring removed orlov option [ 344.756445][T21444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 344.765359][T21446] IPv6: NLM_F_CREATE should be specified when creating new route [ 344.795935][T21444] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.824706][T19106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.882228][T21462] loop3: detected capacity change from 0 to 512 [ 344.889182][T21462] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 344.901028][T21465] loop7: detected capacity change from 0 to 512 [ 344.907902][T21465] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 344.909745][T21462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.931627][T21465] EXT4-fs (loop7): 1 truncate cleaned up [ 344.937836][T21465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.939340][T21462] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.6052: corrupted inode contents [ 344.962545][T21462] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.6052: mark_inode_dirty error [ 344.974056][T21462] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.6052: corrupted inode contents [ 344.974942][T19106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.021610][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.037277][T21474] loop7: detected capacity change from 0 to 1024 [ 345.056011][T21474] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.073332][T21480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6058'. [ 345.075575][T21474] EXT4-fs (loop7): Online defrag not supported with bigalloc [ 345.116186][T19106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.127249][T21485] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6062'. [ 345.137442][T21485] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6062'. [ 345.178842][T21492] blktrace: Concurrent blktraces are not allowed on loop7 [ 345.242222][T21499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6067'. [ 345.315677][T21511] netlink: 'syz.7.6073': attribute type 15 has an invalid length. [ 345.326543][T21505] loop3: detected capacity change from 0 to 512 [ 345.339189][T21505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 345.348262][ T29] kauditd_printk_skb: 1129 callbacks suppressed [ 345.348276][ T29] audit: type=1326 audit(1734643959.077:34655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21437 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f57ce60cce7 code=0x7ffc0000 [ 345.377816][ T29] audit: type=1326 audit(1734643959.077:34656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21437 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57ce5b1f29 code=0x7ffc0000 [ 345.400837][ T29] audit: type=1326 audit(1734643959.077:34657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21437 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f57ce615d29 code=0x7ffc0000 [ 345.447514][ T29] audit: type=1326 audit(1734643959.107:34658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21437 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f57ce60cce7 code=0x7ffc0000 [ 345.470619][ T29] audit: type=1326 audit(1734643959.107:34659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21437 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57ce5b1f29 code=0x7ffc0000 [ 345.493784][ T29] audit: type=1326 audit(1734643959.107:34660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21437 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f57ce615d29 code=0x7ffc0000 [ 345.516924][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.523853][ T29] audit: type=1326 audit(1734643959.127:34661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21437 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f57ce60cce7 code=0x7ffc0000 [ 345.547029][ T29] audit: type=1326 audit(1734643959.137:34662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21437 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57ce5b1f29 code=0x7ffc0000 [ 345.570050][ T29] audit: type=1326 audit(1734643959.137:34663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21437 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f57ce615d29 code=0x7ffc0000 [ 345.593260][ T29] audit: type=1326 audit(1734643959.137:34664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21437 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f57ce60cce7 code=0x7ffc0000 [ 345.643682][T21505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.656638][T21505] ext4 filesystem being mounted at /1191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.725541][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.736720][T21543] netlink: 'syz.1.6089': attribute type 1 has an invalid length. [ 345.754551][T21535] can0: slcan on ttyS3. [ 345.776654][T21549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6091'. [ 345.803016][T21534] can0 (unregistered): slcan off ttyS3. [ 345.912619][T21568] syzkaller1: entered promiscuous mode [ 345.918274][T21568] syzkaller1: entered allmulticast mode [ 346.023852][T21589] loop6: detected capacity change from 0 to 512 [ 346.054261][T21589] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.068858][T21589] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.096162][T21603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6116'. [ 346.109659][T16728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.117199][T21605] loop3: detected capacity change from 0 to 512 [ 346.147303][T21605] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.6117: corrupted in-inode xattr: invalid ea_ino [ 346.160892][T21605] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.6117: couldn't read orphan inode 15 (err -117) [ 346.184438][T21605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.187087][T21611] SELinux: syz.6.6118 (21611) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 346.264878][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.269543][T21625] ieee802154 phy0 wpan0: encryption failed: -22 [ 346.366809][T21641] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 346.376940][T21641] SELinux: failed to load policy [ 346.505278][ T28] tipc: Subscription rejected, illegal request [ 346.552787][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 346.796497][T21718] loop3: detected capacity change from 0 to 1024 [ 346.804018][T21718] EXT4-fs: Ignoring removed orlov option [ 346.809733][T21718] EXT4-fs: Ignoring removed orlov option [ 346.815663][T21718] EXT4-fs: Ignoring removed bh option [ 346.835294][T21718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.903081][T21734] syzkaller1: entered promiscuous mode [ 346.908683][T21734] syzkaller1: entered allmulticast mode [ 347.207571][T21757] netlink: 'syz.1.6184': attribute type 10 has an invalid length. [ 347.246696][T21761] bpf_get_probe_write_proto: 11 callbacks suppressed [ 347.246835][T21761] syz.1.6186[21761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.253817][T21761] syz.1.6186[21761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.265556][T21761] syz.1.6186[21761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.326355][T21765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6188'. [ 347.553216][T21781] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6194'. [ 347.581004][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.592797][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 347.762669][T21815] loop6: detected capacity change from 0 to 1024 [ 347.769860][T21815] EXT4-fs: Ignoring removed orlov option [ 347.775585][T21815] EXT4-fs: Ignoring removed orlov option [ 347.782614][T21815] EXT4-fs: Ignoring removed bh option [ 347.797558][T21815] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.884635][T21827] 9pnet_fd: Insufficient options for proto=fd [ 348.178331][T21855] devtmpfs: Bad value for 'nr_inodes' [ 348.201875][T21857] sd 0:0:1:0: device reset [ 348.244921][T21866] netlink: 'syz.5.6230': attribute type 3 has an invalid length. [ 348.291473][T21875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21875 comm=syz.1.6244 [ 348.409466][T21893] syz.7.6242[21893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.409544][T21893] syz.7.6242[21893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.421182][T21893] syz.7.6242[21893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.569084][T16728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.632781][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 348.755594][T21940] atomic_op ffff8881579ffd28 conn xmit_atomic 0000000000000000 [ 348.810334][T21947] loop6: detected capacity change from 0 to 1024 [ 348.826036][T21947] EXT4-fs: Ignoring removed oldalloc option [ 348.835082][T21950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.836368][T21947] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 348.856431][T21950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.866763][T21947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.949550][T16728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.971687][T21963] xt_hashlimit: max too large, truncated to 1048576 [ 349.408963][T21969] netlink: 'syz.3.6274': attribute type 29 has an invalid length. [ 349.419012][T21969] netlink: 'syz.3.6274': attribute type 29 has an invalid length. [ 349.427359][T21969] __nla_validate_parse: 1 callbacks suppressed [ 349.427371][T21969] netlink: 500 bytes leftover after parsing attributes in process `syz.3.6274'. [ 349.516114][T21984] loop6: detected capacity change from 0 to 1024 [ 349.534293][T21984] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.560422][T16728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.634592][T21997] Cannot find del_set index 0 as target [ 349.634919][T21999] loop6: detected capacity change from 0 to 128 [ 349.672790][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.858855][T22037] SELinux: failed to load policy [ 349.902490][T22046] netlink: 'syz.7.6309': attribute type 13 has an invalid length. [ 349.910446][T22046] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6309'. [ 349.920193][T22046] syz_tun: refused to change device tx_queue_len [ 349.926656][T22046] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 349.970330][T22056] loop7: detected capacity change from 0 to 1024 [ 349.985065][T22056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.000045][T22056] EXT4-fs (loop7): shut down requested (0) [ 350.018596][T19106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.026448][T22062] netlink: 703 bytes leftover after parsing attributes in process `syz.5.6317'. [ 350.053628][T22067] syz.5.6318[22067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.053685][T22067] syz.5.6318[22067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.065282][T22067] syz.5.6318[22067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.123183][T22076] loop6: detected capacity change from 0 to 512 [ 350.141804][T22076] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 350.154705][T22076] EXT4-fs (loop6): 1 truncate cleaned up [ 350.161704][T22076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.200958][T16728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.275536][T22096] netlink: 256 bytes leftover after parsing attributes in process `+}[@'. [ 350.338099][T22105] hub 9-0:1.0: USB hub found [ 350.343004][T22105] hub 9-0:1.0: 8 ports detected [ 350.355961][ T29] kauditd_printk_skb: 1209 callbacks suppressed [ 350.355973][ T29] audit: type=1326 audit(1734643964.087:35874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28701fcce7 code=0x7ffc0000 [ 350.395553][ T29] audit: type=1326 audit(1734643964.117:35875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28701a1f29 code=0x7ffc0000 [ 350.418660][ T29] audit: type=1326 audit(1734643964.117:35876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28701fcce7 code=0x7ffc0000 [ 350.419548][T22114] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 350.441602][ T29] audit: type=1326 audit(1734643964.117:35877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28701a1f29 code=0x7ffc0000 [ 350.441638][ T29] audit: type=1326 audit(1734643964.117:35878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 350.497024][ T29] audit: type=1326 audit(1734643964.147:35879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22106 comm="syz.6.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f91c5be5d29 code=0x7ffc0000 [ 350.520504][ T29] audit: type=1326 audit(1734643964.207:35880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28701fcce7 code=0x7ffc0000 [ 350.543562][ T29] audit: type=1326 audit(1734643964.207:35881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28701a1f29 code=0x7ffc0000 [ 350.566706][ T29] audit: type=1326 audit(1734643964.207:35882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 350.589777][ T29] audit: type=1326 audit(1734643964.217:35883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28701fcce7 code=0x7ffc0000 [ 350.656995][T22125] netlink: 268 bytes leftover after parsing attributes in process `syz.3.6342'. [ 350.691095][T22131] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6345'. [ 350.700941][T22131] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6345'. [ 350.712781][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 350.769228][T22141] hub 9-0:1.0: USB hub found [ 350.774041][T22141] hub 9-0:1.0: 8 ports detected [ 350.853780][T22153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6356'. [ 350.929381][T22164] loop3: detected capacity change from 0 to 2048 [ 350.963164][T22164] loop3: p1 < > p3 p4 < > [ 350.968787][T22164] loop3: p3 start 4284289 is beyond EOD, truncated [ 351.313235][T22203] syz.6.6379[22203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.455008][T22219] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6387'. [ 351.576768][T22231] loop6: detected capacity change from 0 to 1764 [ 351.732789][T22252] lo speed is unknown, defaulting to 1000 [ 351.752893][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 351.814696][T22252] lo speed is unknown, defaulting to 1000 [ 351.907642][T22267] loop5: detected capacity change from 0 to 1024 [ 351.925701][T22267] EXT4-fs: Ignoring removed orlov option [ 351.931559][T22267] EXT4-fs: Ignoring removed orlov option [ 351.944261][T22267] EXT4-fs: Ignoring removed bh option [ 351.977305][T22267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.073416][T22290] vhci_hcd: invalid port number 157 [ 352.078806][T22290] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 352.196175][T22317] loop6: detected capacity change from 0 to 512 [ 352.223282][T22317] EXT4-fs (loop6): orphan cleanup on readonly fs [ 352.229648][T22317] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 352.239263][T22317] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 352.261551][T22317] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.6430: attempt to clear invalid blocks 2 len 1 [ 352.274936][T22317] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6430: invalid indirect mapped block 1819239214 (level 0) [ 352.289635][T22317] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6430: invalid indirect mapped block 1819239214 (level 1) [ 352.305859][T22317] EXT4-fs (loop6): 1 truncate cleaned up [ 352.307647][T22328] netlink: 'syz.7.6436': attribute type 7 has an invalid length. [ 352.312060][T22317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.319393][T22328] netlink: 'syz.7.6436': attribute type 8 has an invalid length. [ 352.342489][T22328] gretap0: entered promiscuous mode [ 352.349316][T22328] batadv_slave_1: entered promiscuous mode [ 352.349825][T22317] EXT4-fs error (device loop6): ext4_lookup:1810: inode #2: comm syz.6.6430: 'file1' linked to parent dir [ 352.367113][T22328] gretap0: left promiscuous mode [ 352.367144][T22317] EXT4-fs error (device loop6): ext4_lookup:1810: inode #2: comm syz.6.6430: 'file1' linked to parent dir [ 352.383667][T22328] batadv_slave_1: left promiscuous mode [ 352.389409][T22317] EXT4-fs error (device loop6): __ext4_remount:6749: comm syz.6.6430: Abort forced by user [ 352.399625][T22317] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 352.420084][T16728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.499869][T22337] bpf_get_probe_write_proto: 2 callbacks suppressed [ 352.499887][T22337] syz.7.6440[22337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.506781][T22337] syz.7.6440[22337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.518676][T22337] syz.7.6440[22337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.676945][T12975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.720388][T22362] syz.7.6450[22362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.720469][T22362] syz.7.6450[22362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.732500][T22362] syz.7.6450[22362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.747348][T22362] atomic_op ffff88815e651128 conn xmit_atomic 0000000000000000 [ 352.792785][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 352.963091][T22379] loop3: detected capacity change from 0 to 512 [ 352.974508][T22379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 352.988566][T22379] ext4 filesystem being mounted at /1242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.018499][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 353.182561][T22404] IPVS: Error joining to the multicast group [ 353.276717][T22414] batadv1: entered promiscuous mode [ 353.282065][T22414] batadv1: entered allmulticast mode [ 353.471201][T22442] SELinux: policydb version 0 does not match my version range 15-33 [ 353.472834][ T35] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 353.480009][T22442] SELinux: failed to load policy [ 353.487006][ T35] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 353.488331][ T35] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x3 [ 353.527817][ T35] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 353.590026][T22457] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22457 comm=syz.3.6490 [ 353.832812][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.335103][T22513] vxcan1: tx address claim with different name [ 354.455030][T22529] syz.7.6526[22529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.455110][T22529] syz.7.6526[22529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.474246][T22529] syz.7.6526[22529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.622349][T22558] syz.1.6540[22558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.667635][T22566] sd 0:0:1:0: device reset [ 354.773430][T22586] __nla_validate_parse: 9 callbacks suppressed [ 354.773446][T22586] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6553'. [ 354.872785][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.976192][T22614] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6565'. [ 355.028011][ T6553] kernel write not supported for file bpf-prog (pid: 6553 comm: kworker/0:15) [ 355.276903][T22665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6588'. [ 355.285833][T22665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6588'. [ 355.294927][T22665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6588'. [ 355.365529][ T29] kauditd_printk_skb: 2103 callbacks suppressed [ 355.365549][ T29] audit: type=1326 audit(1734643969.097:37987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22550 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91c5bdcce7 code=0x7ffc0000 [ 355.397729][ T29] audit: type=1326 audit(1734643969.127:37988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22550 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91c5b81f29 code=0x7ffc0000 [ 355.420813][ T29] audit: type=1326 audit(1734643969.127:37989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22550 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91c5bdcce7 code=0x7ffc0000 [ 355.443907][ T29] audit: type=1326 audit(1734643969.127:37990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22550 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91c5b81f29 code=0x7ffc0000 [ 355.467013][ T29] audit: type=1326 audit(1734643969.127:37991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22550 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f91c5be5d29 code=0x7ffc0000 [ 355.490075][ T29] audit: type=1326 audit(1734643969.127:37992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22550 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91c5bdcce7 code=0x7ffc0000 [ 355.513105][ T29] audit: type=1326 audit(1734643969.127:37993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22550 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91c5b81f29 code=0x7ffc0000 [ 355.536182][ T29] audit: type=1326 audit(1734643969.127:37994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22550 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f91c5be5d29 code=0x7ffc0000 [ 355.598490][ T29] audit: type=1326 audit(1734643969.217:37995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22550 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91c5bdcce7 code=0x7ffc0000 [ 355.621585][ T29] audit: type=1326 audit(1734643969.217:37996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22550 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91c5b81f29 code=0x7ffc0000 [ 355.661339][T22677] netlink: 'syz.7.6593': attribute type 34 has an invalid length. [ 355.722934][T22681] Falling back ldisc for ttyS3. [ 355.734321][T22687] lo speed is unknown, defaulting to 1000 [ 355.799563][T22687] lo speed is unknown, defaulting to 1000 [ 355.848531][T22702] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6602'. [ 355.912776][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 356.067635][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6617'. [ 356.280010][T22769] lo speed is unknown, defaulting to 1000 [ 356.350294][T22779] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 356.358206][T22769] lo speed is unknown, defaulting to 1000 [ 356.381711][T22781] netlink: 'syz.7.6637': attribute type 13 has an invalid length. [ 356.389598][T22781] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6637'. [ 356.407509][T22781] syz_tun: refused to change device tx_queue_len [ 356.413931][T22781] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 356.710826][T22814] loop3: detected capacity change from 0 to 1024 [ 356.726534][T22814] EXT4-fs: Ignoring removed orlov option [ 356.732407][T22814] EXT4-fs: Ignoring removed orlov option [ 356.749334][T22814] EXT4-fs: Ignoring removed bh option [ 356.766162][T22814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.809574][T22821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6654'. [ 356.818570][T22821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6654'. [ 356.952805][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 357.065091][T22831] syz.5.6658: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 357.079748][T22831] CPU: 0 UID: 0 PID: 22831 Comm: syz.5.6658 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0 [ 357.090637][T22831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 357.100723][T22831] Call Trace: [ 357.104011][T22831] [ 357.106940][T22831] dump_stack_lvl+0xf2/0x150 [ 357.111735][T22831] dump_stack+0x15/0x1a [ 357.115909][T22831] warn_alloc+0x145/0x1b0 [ 357.120363][T22831] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 357.126316][T22831] ? common_lsm_audit+0x920/0x1010 [ 357.131438][T22831] __vmalloc_node_range_noprof+0xaa/0xe80 [ 357.137222][T22831] ? avc_denied+0xf1/0x110 [ 357.141674][T22831] ? slow_avc_audit+0xf9/0x140 [ 357.146468][T22831] ? should_fail_ex+0x31/0x230 [ 357.151242][T22831] ? xskq_create+0x36/0xd0 [ 357.155716][T22831] ? should_failslab+0x8f/0xb0 [ 357.160487][T22831] vmalloc_user_noprof+0x59/0x70 [ 357.165436][T22831] ? xskq_create+0x79/0xd0 [ 357.169852][T22831] xskq_create+0x79/0xd0 [ 357.174202][T22831] xsk_init_queue+0x82/0xd0 [ 357.178703][T22831] xsk_setsockopt+0x388/0x520 [ 357.183452][T22831] ? __pfx_xsk_setsockopt+0x10/0x10 [ 357.188707][T22831] __sys_setsockopt+0x187/0x200 [ 357.193626][T22831] __x64_sys_setsockopt+0x66/0x80 [ 357.198669][T22831] x64_sys_call+0x282e/0x2dc0 [ 357.203356][T22831] do_syscall_64+0xc9/0x1c0 [ 357.207869][T22831] ? clear_bhb_loop+0x55/0xb0 [ 357.212548][T22831] ? clear_bhb_loop+0x55/0xb0 [ 357.217228][T22831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.223226][T22831] RIP: 0033:0x7f57ce615d29 [ 357.227655][T22831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.247365][T22831] RSP: 002b:00007f57ccc87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 357.255831][T22831] RAX: ffffffffffffffda RBX: 00007f57ce805fa0 RCX: 00007f57ce615d29 [ 357.263804][T22831] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 357.271902][T22831] RBP: 00007f57ce691aa8 R08: 0000000000000004 R09: 0000000000000000 [ 357.279877][T22831] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.287896][T22831] R13: 0000000000000000 R14: 00007f57ce805fa0 R15: 00007ffe36593b98 [ 357.295991][T22831] [ 357.299266][T22831] Mem-Info: [ 357.302433][T22831] active_anon:28154 inactive_anon:8 isolated_anon:0 [ 357.302433][T22831] active_file:20458 inactive_file:2649 isolated_file:0 [ 357.302433][T22831] unevictable:0 dirty:114 writeback:0 [ 357.302433][T22831] slab_reclaimable:3487 slab_unreclaimable:29912 [ 357.302433][T22831] mapped:33747 shmem:18703 pagetables:4011 [ 357.302433][T22831] sec_pagetables:0 bounce:0 [ 357.302433][T22831] kernel_misc_reclaimable:0 [ 357.302433][T22831] free:1810686 free_pcp:4131 free_cma:0 [ 357.347685][T22831] Node 0 active_anon:105656kB inactive_anon:32kB active_file:81832kB inactive_file:10596kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134988kB dirty:456kB writeback:0kB shmem:68084kB writeback_tmp:0kB kernel_stack:6432kB pagetables:16044kB sec_pagetables:0kB all_unreclaimable? no [ 357.375951][T22831] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.402905][T22831] lowmem_reserve[]: 0 2866 7844 0 [ 357.407986][T22831] Node 0 DMA32 free:2950380kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953912kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 357.436806][T22831] lowmem_reserve[]: 0 0 4978 0 [ 357.441631][T22831] Node 0 Normal free:4276860kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:82340kB inactive_anon:32kB active_file:81832kB inactive_file:10596kB unevictable:0kB writepending:456kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:43396kB local_pcp:11832kB free_cma:0kB [ 357.472086][T22831] lowmem_reserve[]: 0 0 0 0 [ 357.476651][T22831] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 357.489501][T22831] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 4*16kB (M) 6*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950380kB [ 357.505651][T22831] Node 0 Normal: 198*4kB (UE) 216*8kB (UM) 122*16kB (UM) 906*32kB (UM) 1083*64kB (UME) 699*128kB (UME) 227*256kB (UME) 266*512kB (UME) 241*1024kB (UME) 101*2048kB (UM) 839*4096kB (UM) = 4276728kB [ 357.525223][T22831] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 357.534583][T22831] 26824 total pagecache pages [ 357.539261][T22831] 19 pages in swap cache [ 357.543534][T22831] Free swap = 121408kB [ 357.547759][T22831] Total swap = 124996kB [ 357.551918][T22831] 2097051 pages RAM [ 357.555741][T22831] 0 pages HighMem/MovableOnly [ 357.560457][T22831] 80181 pages reserved [ 357.593407][T22837] netlink: 'syz.7.6661': attribute type 1 has an invalid length. [ 357.622850][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.720309][T22859] loop5: detected capacity change from 0 to 1024 [ 357.763992][T22859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.800651][T22859] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 357.816982][T22859] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 357.829408][T22859] EXT4-fs (loop5): This should not happen!! Data will be lost [ 357.829408][T22859] [ 357.839167][T22859] EXT4-fs (loop5): Total free blocks count 0 [ 357.845300][T22859] EXT4-fs (loop5): Free/Dirty block details [ 357.851256][T22859] EXT4-fs (loop5): free_blocks=68451041280 [ 357.857168][T22859] EXT4-fs (loop5): dirty_blocks=80 [ 357.862501][T22859] EXT4-fs (loop5): Block reservation details [ 357.868602][T22859] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 357.876363][T22878] bpf_get_probe_write_proto: 11 callbacks suppressed [ 357.876378][T22878] syz.1.6679[22878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.883639][T22878] syz.1.6679[22878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.895620][T22878] syz.1.6679[22878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.909572][T22881] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 357.947407][T22878] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22878 comm=syz.1.6679 [ 357.960058][T22878] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22878 comm=syz.1.6679 [ 357.992795][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 358.050737][T22900] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 358.094533][T22909] batadv_slave_1: entered promiscuous mode [ 358.101131][T22908] batadv_slave_1: left promiscuous mode [ 358.106233][T22911] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 358.282040][T22941] syz.3.6709: attempt to access beyond end of device [ 358.282040][T22941] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 358.405169][T22962] syz.5.6718[22962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.405229][T22962] syz.5.6718[22962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.416878][T22962] syz.5.6718[22962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.540510][T22982] loop3: detected capacity change from 0 to 1024 [ 358.565439][T22985] 9p: Unknown access argument v: -22 [ 358.594374][T22982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.608724][T22982] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm +}[@: missing EA_INODE flag [ 358.621470][T22982] EXT4-fs (loop3): Remounting filesystem read-only [ 358.641177][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.883294][T23017] loop3: detected capacity change from 0 to 512 [ 358.897267][T23020] loop6: detected capacity change from 0 to 1024 [ 358.900749][T23017] EXT4-fs: Ignoring removed oldalloc option [ 358.914212][T23020] EXT4-fs: Ignoring removed orlov option [ 358.920012][T23020] EXT4-fs: Ignoring removed orlov option [ 358.925906][T23025] syz.5.6743[23025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.925962][T23025] syz.5.6743[23025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.937638][T23025] syz.5.6743[23025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.939182][T23020] EXT4-fs: Ignoring removed bh option [ 358.962075][T23017] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.6741: Parent and EA inode have the same ino 15 [ 358.978891][T23017] EXT4-fs (loop3): Remounting filesystem read-only [ 358.985594][T23017] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 358.995782][T23017] EXT4-fs (loop3): 1 orphan inode deleted [ 359.002040][T23017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.014343][T23017] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 359.022190][T23020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.023234][T23017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.034322][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 359.117957][T23037] SET target dimension over the limit! [ 359.156281][T23047] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 359.163979][T23047] SELinux: failed to load policy [ 359.221718][T23055] loop3: detected capacity change from 0 to 512 [ 359.228462][T23055] EXT4-fs: Ignoring removed nobh option [ 359.234183][T23055] EXT4-fs: Ignoring removed mblk_io_submit option [ 359.254458][T23055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.278834][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.653251][T16728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.778008][T23126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.786821][T23126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.881227][T23133] loop7: detected capacity change from 0 to 1024 [ 359.888115][T23133] EXT4-fs: Ignoring removed orlov option [ 359.893838][T23133] EXT4-fs: Ignoring removed orlov option [ 359.899576][T23133] EXT4-fs: Ignoring removed bh option [ 359.934921][T23133] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.072784][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.266415][T23169] __nla_validate_parse: 5 callbacks suppressed [ 360.266432][T23169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6805'. [ 360.281616][T23169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6805'. [ 360.291975][T23169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6805'. [ 360.362430][T23185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6814'. [ 360.385878][T23187] x_tables: duplicate underflow at hook 1 [ 360.390078][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 360.390094][ T29] audit: type=1400 audit(360.428:38559): avc: denied { name_bind } for pid=23188 comm="syz.3.6816" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 360.419256][ T29] audit: type=1400 audit(360.428:38560): avc: denied { node_bind } for pid=23188 comm="syz.3.6816" saddr=fec0:ffff::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 360.465159][T23195] hub 9-0:1.0: USB hub found [ 360.470093][T23195] hub 9-0:1.0: 8 ports detected [ 360.642702][ T29] audit: type=1400 audit(360.678:38561): avc: denied { connect } for pid=23222 comm="syz.1.6832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 360.674551][T19106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.713218][ T29] audit: type=1400 audit(360.748:38562): avc: denied { name_bind } for pid=23228 comm="syz.1.6836" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 360.756439][ T29] audit: type=1326 audit(360.758:38563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 360.779982][ T29] audit: type=1326 audit(360.758:38564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 360.803311][ T29] audit: type=1326 audit(360.758:38565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 360.806483][T23237] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23237 comm=syz.1.6839 [ 360.826321][ T29] audit: type=1326 audit(360.758:38566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 360.826375][ T29] audit: type=1326 audit(360.758:38567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 360.826402][ T29] audit: type=1326 audit(360.758:38568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 360.838958][T23237] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23237 comm=syz.1.6839 [ 361.013605][T23255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6847'. [ 361.095865][T23269] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6853'. [ 361.112778][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 361.221256][T23288] loop7: detected capacity change from 0 to 512 [ 361.244704][T23288] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.270456][T19106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.321147][T23296] IPv6: Can't replace route, no match found [ 361.325392][T23298] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 361.438030][T23314] netlink: 'syz.5.6875': attribute type 9 has an invalid length. [ 361.445947][T23314] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.6875'. [ 361.466530][T23317] netlink: 'syz.1.6876': attribute type 4 has an invalid length. [ 361.474485][T23317] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.6876'. [ 361.540100][T23324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23324 comm=syz.1.6880 [ 361.541017][T23312] loop3: detected capacity change from 0 to 8192 [ 361.603037][T23330] syz.3.6882[23330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.603810][T23330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6882'. [ 361.608937][T23333] lo: entered allmulticast mode [ 361.629371][T23330] IPVS: Error joining to the multicast group [ 361.636883][T23333] lo: left allmulticast mode [ 361.790909][T23362] loop7: detected capacity change from 0 to 2048 [ 361.805077][T23362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.891493][T23378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6902'. [ 362.152811][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 362.186223][ T6921] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 362.202955][ T6921] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 362.215339][ T6921] EXT4-fs (loop7): This should not happen!! Data will be lost [ 362.215339][ T6921] [ 362.225172][ T6921] EXT4-fs (loop7): Total free blocks count 0 [ 362.231234][ T6921] EXT4-fs (loop7): Free/Dirty block details [ 362.237240][ T6921] EXT4-fs (loop7): free_blocks=2415919104 [ 362.243089][ T6921] EXT4-fs (loop7): dirty_blocks=8224 [ 362.248439][ T6921] EXT4-fs (loop7): Block reservation details [ 362.254476][ T6921] EXT4-fs (loop7): i_reserved_data_blocks=514 [ 362.265174][ T6921] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 362.330532][T23427] netlink: 'syz.6.6926': attribute type 10 has an invalid length. [ 362.342252][T23427] team0: Device hsr_slave_0 failed to register rx_handler [ 362.589291][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x1 [ 362.596848][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.604376][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.611835][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.619284][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.626929][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.634364][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.641754][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.649661][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.657247][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x4 [ 362.664875][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.672503][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.673332][T23474] loop5: detected capacity change from 0 to 512 [ 362.679951][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x2 [ 362.688437][T23475] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 362.693587][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.709097][T23474] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.6949: Parent and EA inode have the same ino 15 [ 362.709378][T23474] EXT4-fs (loop5): 1 orphan inode deleted [ 362.721529][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.730787][T23474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.734585][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.748954][T23474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.753893][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.770395][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.777816][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.785250][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.792769][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.800233][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.807670][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.815110][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.822515][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.830017][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.837608][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.845199][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.852601][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.860035][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.867483][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.874941][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.882421][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.889837][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.897315][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.904772][ T35] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 362.921661][ T35] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.03 Device [syz0] on syz0 [ 362.949808][T23484] loop5: detected capacity change from 0 to 4096 [ 362.956761][T23484] EXT4-fs: Ignoring removed nobh option [ 362.967478][T23484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.982614][T23484] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.6951: Failed to acquire dquot type 1 [ 363.008967][T12975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.166233][T23513] loop5: detected capacity change from 0 to 1024 [ 363.186141][T23513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.198271][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 363.215266][T23513] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 363.240584][T23513] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 363.252948][T23513] EXT4-fs (loop5): This should not happen!! Data will be lost [ 363.252948][T23513] [ 363.262646][T23513] EXT4-fs (loop5): Total free blocks count 0 [ 363.268694][T23513] EXT4-fs (loop5): Free/Dirty block details [ 363.274736][T23513] EXT4-fs (loop5): free_blocks=68451041280 [ 363.280620][T23513] EXT4-fs (loop5): dirty_blocks=32 [ 363.285797][T23513] EXT4-fs (loop5): Block reservation details [ 363.291801][T23513] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 363.328941][T23527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 363.412430][T23534] loop6: detected capacity change from 0 to 128 [ 363.425189][T23534] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.429171][T23536] loop7: detected capacity change from 0 to 512 [ 363.445650][T23536] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 363.457588][T23534] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 1803188595 (only 1 groups) [ 363.485304][T16728] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.537746][T23536] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.553320][T23549] bridge0: port 1(bond0) entered blocking state [ 363.559722][T23549] bridge0: port 1(bond0) entered disabled state [ 363.570841][T23549] bond0: entered allmulticast mode [ 363.585416][T23549] bond0: entered promiscuous mode [ 363.624568][ T5068] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 363.654156][T23552] loop7: detected capacity change from 0 to 8192 [ 363.663623][T23552] syz.7.6978: attempt to access beyond end of device [ 363.663623][T23552] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 363.678956][T23552] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 363.686828][T23552] FAT-fs (loop7): Filesystem has been set read-only [ 363.693865][T23552] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 363.702205][T23552] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 363.763594][T23561] loop7: detected capacity change from 0 to 128 [ 363.774269][T23564] bpf_get_probe_write_proto: 2 callbacks suppressed [ 363.774281][T23564] syz.5.6979[23564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.781125][T23564] syz.5.6979[23564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.802847][T23564] syz.5.6979[23564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.832641][T23566] loop3: detected capacity change from 0 to 1024 [ 363.876825][T23564] ebtables: ebtables: counters copy to user failed while replacing table [ 363.904200][T23579] syz.5.6989[23579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.904344][T23579] syz.5.6989[23579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.916053][T23579] syz.5.6989[23579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.932592][T23579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.952627][T23579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.992534][T23588] syz.1.6994[23588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.992628][T23588] syz.1.6994[23588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.006213][T23588] syz.1.6994[23588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.046892][T23595] loop3: detected capacity change from 0 to 512 [ 364.079522][T23599] loop7: detected capacity change from 0 to 1024 [ 364.086647][T23599] EXT4-fs: Ignoring removed orlov option [ 364.092414][T23599] EXT4-fs: Ignoring removed orlov option [ 364.098448][T23599] EXT4-fs: Ignoring removed bh option [ 364.221483][T23620] loop3: detected capacity change from 0 to 512 [ 364.232795][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 364.236169][T23620] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.7006: Parent and EA inode have the same ino 15 [ 364.252452][T23620] EXT4-fs (loop3): 1 orphan inode deleted [ 364.287652][T23627] loop3: detected capacity change from 0 to 128 [ 364.311199][T23631] netlink: 'syz.1.7011': attribute type 10 has an invalid length. [ 364.328275][T23633] loop3: detected capacity change from 0 to 128 [ 364.370505][T23640] loop3: detected capacity change from 0 to 128 [ 364.488037][T23655] vlan0: entered promiscuous mode [ 364.488960][T23663] syz.5.7025[23663] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.641706][T23686] loop3: detected capacity change from 0 to 1024 [ 364.692187][T23693] loop6: detected capacity change from 0 to 1024 [ 364.699094][T23693] EXT4-fs: Ignoring removed nobh option [ 364.704822][T23693] EXT4-fs: Ignoring removed bh option [ 364.838130][T23719] loop3: detected capacity change from 0 to 1024 [ 365.006077][T23734] loop5: detected capacity change from 0 to 128 [ 365.120881][T23749] netlink: 'syz.1.7061': attribute type 1 has an invalid length. [ 365.176125][T23753] loop5: detected capacity change from 0 to 1024 [ 365.199532][ T1042] kernel write not supported for file /checkreqprot (pid: 1042 comm: kworker/0:2) [ 365.272807][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.326358][T23770] Cannot find del_set index 0 as target [ 365.349131][T23774] __nla_validate_parse: 11 callbacks suppressed [ 365.349145][T23774] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7073'. [ 365.402855][ T29] kauditd_printk_skb: 611 callbacks suppressed [ 365.402874][ T29] audit: type=1326 audit(365.438:39178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f040685cce7 code=0x7ffc0000 [ 365.431516][ T29] audit: type=1326 audit(365.438:39179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0406801f29 code=0x7ffc0000 [ 365.431544][ T29] audit: type=1326 audit(365.438:39180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0406865d29 code=0x7ffc0000 [ 365.452845][ T29] audit: type=1326 audit(365.448:39181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f040685cce7 code=0x7ffc0000 [ 365.498987][ T29] audit: type=1326 audit(365.448:39182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0406801f29 code=0x7ffc0000 [ 365.499017][ T29] audit: type=1326 audit(365.448:39183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0406865d29 code=0x7ffc0000 [ 365.499082][ T29] audit: type=1326 audit(365.448:39184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f040685cce7 code=0x7ffc0000 [ 365.499113][ T29] audit: type=1326 audit(365.448:39185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0406801f29 code=0x7ffc0000 [ 365.582008][T23787] blktrace: Concurrent blktraces are not allowed on loop7 [ 365.588810][ T29] audit: type=1326 audit(365.448:39186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0406865d29 code=0x7ffc0000 [ 365.588852][ T29] audit: type=1326 audit(365.448:39187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f040685cce7 code=0x7ffc0000 [ 365.680390][T23792] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7081'. [ 365.944738][T23829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7098'. [ 365.979997][T23832] binfmt_misc: register: failed to install interpreter file ./file0 [ 366.047536][T23838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7103'. [ 366.056617][T23838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7103'. [ 366.091534][T23844] blktrace: Concurrent blktraces are not allowed on loop3 [ 366.182320][T23856] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 366.198536][T23859] loop3: detected capacity change from 0 to 128 [ 366.228511][T23859] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 366.271725][T23859] FAT-fs (loop3): FAT read failed (blocknr 128) [ 366.293479][T23866] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7115'. [ 366.312777][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.476633][T23890] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7126'. [ 366.595283][T23902] IPVS: Error connecting to the multicast addr [ 366.640851][T23912] loop6: detected capacity change from 0 to 128 [ 366.681370][T23921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7137'. [ 366.762194][T23932] loop6: detected capacity change from 0 to 512 [ 366.770490][T23932] EXT4-fs: Ignoring removed bh option [ 366.776536][T23932] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 366.793227][T23932] EXT4-fs (loop6): 1 truncate cleaned up [ 366.837024][T23947] loop3: detected capacity change from 0 to 1024 [ 366.844900][T23947] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 366.865858][ T1042] kernel write not supported for file bpf-prog (pid: 1042 comm: kworker/0:2) [ 366.879525][T23947] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.3.7150: corrupted in-inode xattr: bad magic number in in-inode xattr [ 367.061353][T23974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7161'. [ 367.079040][T23975] loop5: detected capacity change from 0 to 1024 [ 367.085822][T23975] EXT4-fs: Ignoring removed orlov option [ 367.085852][T23975] EXT4-fs: Ignoring removed orlov option [ 367.085912][T23975] EXT4-fs: Ignoring removed bh option [ 367.197057][T23988] loop3: detected capacity change from 0 to 164 [ 367.215904][T23988] Unable to read rock-ridge attributes [ 367.236479][T23990] loop5: detected capacity change from 0 to 512 [ 367.243907][T23990] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.7165: iget: bad extended attribute block 1 [ 367.244030][T23990] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.7165: couldn't read orphan inode 15 (err -117) [ 367.246840][T23990] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 367.315249][T23988] Unable to read rock-ridge attributes [ 367.343720][T23988] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 367.352787][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 367.657449][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657474][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657497][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657516][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657535][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657554][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657575][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657673][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657698][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657722][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657742][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657761][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657806][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657829][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657921][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657944][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.657967][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.658007][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.658024][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.658042][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.658061][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.813892][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.821347][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.828761][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.836283][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.843724][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.851179][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.858580][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.866110][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.873532][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.881006][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.888412][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 367.896263][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 367.972200][T24038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.981308][T24038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.994471][T24048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7193'. [ 368.118582][T24074] SELinux: Context system_u:object_r:user_cron_spool_t:s0 is not valid (left unmapped). [ 368.166699][T24081] loop6: detected capacity change from 0 to 164 [ 368.195091][T24081] Unable to read rock-ridge attributes [ 368.229779][T24081] Unable to read rock-ridge attributes [ 368.238019][T24081] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 368.269953][T24090] devtmpfs: Unknown parameter 'di¼CÆ5F\LÑž' [ 368.392807][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 368.507060][T24113] netlink: 'syz.1.7222': attribute type 1 has an invalid length. [ 368.590919][T24119] loop6: detected capacity change from 0 to 2048 [ 368.656075][T24123] tipc: Started in network mode [ 368.661077][T24123] tipc: Node identity , cluster identity 4711 [ 368.667278][T24123] tipc: Failed to obtain node identity [ 368.672810][T24123] tipc: Enabling of bearer rejected, failed to enable media [ 368.683320][T24119] loop6: p1 < > p4 [ 368.687936][T24119] loop6: p4 size 8388608 extends beyond EOD, truncated [ 368.760339][T24129] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 368.800920][T24136] nfs4: Bad value for 'source' [ 368.810649][T24137] loop6: detected capacity change from 0 to 512 [ 368.826989][T24137] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.7233: invalid indirect mapped block 256 (level 2) [ 368.853532][T24137] EXT4-fs (loop6): 2 truncates cleaned up [ 368.865116][T24137] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #2: block 13: comm syz.6.7233: lblock 0 mapped to illegal pblock 13 (length 1) [ 368.870849][T24144] loop7: detected capacity change from 0 to 2048 [ 368.910061][T24144] EXT4-fs (loop7): shut down requested (0) [ 369.257580][T24092] syz.3.7212 (24092) used greatest stack depth: 6232 bytes left [ 369.315339][T24179] loop5: detected capacity change from 0 to 512 [ 369.323088][T24179] EXT4-fs: Ignoring removed nomblk_io_submit option [ 369.329728][T24179] EXT4-fs: Ignoring removed i_version option [ 369.344882][T24179] journal_path: Non-blockdev passed as './file2' [ 369.351402][T24179] EXT4-fs: error: could not find journal device path [ 369.413560][T24191] bpf_get_probe_write_proto: 11 callbacks suppressed [ 369.413576][T24191] syz.5.7257[24191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.432794][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.453449][T24191] syz.5.7257[24191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.453524][T24191] syz.5.7257[24191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.499849][T24193] loop3: detected capacity change from 0 to 512 [ 369.519407][T24193] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 369.530653][T24193] EXT4-fs (loop3): 1 truncate cleaned up [ 369.632503][T24205] loop5: detected capacity change from 0 to 512 [ 369.641636][T24205] EXT4-fs: Ignoring removed orlov option [ 369.647811][T24205] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 369.660562][T24205] EXT4-fs (loop5): 1 orphan inode deleted [ 369.666416][T24205] EXT4-fs (loop5): 1 truncate cleaned up [ 369.676287][T24205] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 369.941819][T24217] ebtables: ebtables: counters copy to user failed while replacing table [ 370.125814][T24237] xt_hashlimit: max too large, truncated to 1048576 [ 370.135249][T24243] syz.5.7276[24243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.135332][T24243] syz.5.7276[24243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.148162][T24243] syz.5.7276[24243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.165182][T24243] loop5: detected capacity change from 0 to 764 [ 370.187987][T24246] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 370.209253][T24243] Symlink component flag not implemented [ 370.215493][T24243] Symlink component flag not implemented (129) [ 370.225295][T24243] rock: directory entry would overflow storage [ 370.231498][T24243] rock: sig=0x4f50, size=4, remaining=3 [ 370.237122][T24243] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 370.276004][ T3962] kernel write not supported for file /snd/seq (pid: 3962 comm: kworker/1:4) [ 370.406925][T24286] loop7: detected capacity change from 0 to 128 [ 370.413992][T24286] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 370.437892][ T6900] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 370.472804][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 370.481090][T24296] __nla_validate_parse: 1 callbacks suppressed [ 370.481175][T24296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7300'. [ 370.500377][T24298] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 370.574832][ T29] kauditd_printk_skb: 564 callbacks suppressed [ 370.574920][ T29] audit: type=1326 audit(370.618:39752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24308 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 370.624724][ T29] audit: type=1326 audit(370.618:39753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24308 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 370.647781][ T29] audit: type=1326 audit(370.618:39754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24308 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 370.670784][ T29] audit: type=1326 audit(370.618:39755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24308 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2870205d63 code=0x7ffc0000 [ 370.690757][T24311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7307'. [ 370.693824][ T29] audit: type=1326 audit(370.618:39756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24308 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f28702047df code=0x7ffc0000 [ 370.725524][ T29] audit: type=1326 audit(370.618:39757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24308 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2870205db7 code=0x7ffc0000 [ 370.748684][ T29] audit: type=1326 audit(370.618:39758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24308 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2870204690 code=0x7ffc0000 [ 370.771721][ T29] audit: type=1326 audit(370.618:39759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24308 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f287020498a code=0x7ffc0000 [ 370.794644][ T29] audit: type=1326 audit(370.618:39760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24308 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 370.817826][ T29] audit: type=1326 audit(370.618:39761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24308 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f2870205d29 code=0x7ffc0000 [ 370.855038][T24325] loop3: detected capacity change from 0 to 1024 [ 370.868904][T24325] EXT4-fs: Ignoring removed orlov option [ 370.874770][T24325] EXT4-fs: Ignoring removed orlov option [ 370.884151][T24325] EXT4-fs: Ignoring removed bh option [ 371.250723][T24362] loop6: detected capacity change from 0 to 128 [ 371.410237][T24387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7339'. [ 371.438110][T24389] syz.1.7340[24389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.438231][T24389] syz.1.7340[24389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.449938][T24389] syz.1.7340[24389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.512798][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 371.621466][T24411] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 371.638251][T24413] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 371.646545][T24413] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 371.707816][T24423] loop3: detected capacity change from 0 to 512 [ 371.714902][T24423] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 371.779492][T24423] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 371.790780][T24423] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.7356: corrupted in-inode xattr: e_value size too large [ 371.820796][T24423] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.7356: couldn't read orphan inode 15 (err -117) [ 371.901198][T24440] team0: No ports can be present during mode change [ 371.934426][T24444] loop7: detected capacity change from 0 to 512 [ 371.938319][T24446] loop3: detected capacity change from 0 to 1024 [ 371.947570][T24444] EXT4-fs: Ignoring removed mblk_io_submit option [ 371.957962][T24444] journal_path: Lookup failure for './file0/file0' [ 371.964592][T24444] EXT4-fs: error: could not find journal device path [ 372.022847][T24446] loop3: detected capacity change from 1024 to 64 [ 372.048445][T24461] EXT4-fs error (device loop3): ext4_xattr_ibody_get:653: inode #18: comm syz.3.7367: corrupted in-inode xattr: bad magic number in in-inode xattr [ 372.086689][T24461] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #18: comm syz.3.7367: corrupted in-inode xattr: bad magic number in in-inode xattr [ 372.151631][ T3300] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /1448/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 372.236766][T24474] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7379'. [ 372.344377][T24494] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7388'. [ 372.397824][T24498] x_tables: duplicate underflow at hook 1 [ 372.517011][T24506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7393'. [ 372.552784][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 372.631885][T24516] ================================================================== [ 372.640107][T24516] BUG: KCSAN: data-race in rxrpc_input_call_event / rxrpc_send_data [ 372.648129][T24516] [ 372.650479][T24516] write to 0xffff88811c9f5474 of 4 bytes by task 24517 on cpu 0: [ 372.658206][T24516] rxrpc_input_call_event+0x8ef/0x12e0 [ 372.663690][T24516] rxrpc_io_thread+0x30e/0x1fb0 [ 372.668566][T24516] kthread+0x1d1/0x210 [ 372.672648][T24516] ret_from_fork+0x4b/0x60 [ 372.677093][T24516] ret_from_fork_asm+0x1a/0x30 [ 372.681880][T24516] [ 372.684208][T24516] read to 0xffff88811c9f5474 of 4 bytes by task 24516 on cpu 1: [ 372.691848][T24516] rxrpc_send_data+0x889/0x1820 [ 372.696708][T24516] rxrpc_do_sendmsg+0xb92/0xc30 [ 372.701565][T24516] rxrpc_sendmsg+0x417/0x520 [ 372.706156][T24516] __sock_sendmsg+0x140/0x180 [ 372.710860][T24516] ____sys_sendmsg+0x312/0x410 [ 372.715623][T24516] __sys_sendmsg+0x19d/0x230 [ 372.720216][T24516] __x64_sys_sendmsg+0x46/0x50 [ 372.724985][T24516] x64_sys_call+0x2734/0x2dc0 [ 372.729683][T24516] do_syscall_64+0xc9/0x1c0 [ 372.734194][T24516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.740103][T24516] [ 372.742438][T24516] value changed: 0x00000000 -> 0x00000003 [ 372.748151][T24516] [ 372.750474][T24516] Reported by Kernel Concurrency Sanitizer on: [ 372.756613][T24516] CPU: 1 UID: 0 PID: 24516 Comm: syz.5.7398 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0 [ 372.767372][T24516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 372.777423][T24516] ================================================================== [ 372.801812][ T9444] EXT4-fs unmount: 49 callbacks suppressed [ 372.801829][ T9444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.818502][T24449] kmmpd-loop3: attempt to access beyond end of device [ 372.818502][T24449] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 372.832150][T24449] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 373.592832][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.632810][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 375.682811][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.712826][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.752816][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.792795][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 379.842803][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.882818][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.922800][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available