last executing test programs: 3.229566169s ago: executing program 3 (id=2576): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', 0x0) 3.041646447s ago: executing program 3 (id=2581): syz_mount_image$ext4(&(0x7f0000000940)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x11, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.76507135s ago: executing program 3 (id=2585): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="00000000c5030000140012800b0001006970766c616e00000500028008000500", @ANYRES32=r2], 0x44}}, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x3) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400002, 0x0, 0x12, r4, 0x0) r5 = fcntl$dupfd(r0, 0x0, r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffffd}}, {@norecovery}, {@discard}, {@lazytime}, {@nodelalloc}, {@acl}, {@debug}]}, 0xfc, 0x564, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x2, 0xd4, 0x49, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x10000, 0x3, 0x0, 0x7, 0x8, 0xff}, 0x0, 0x0, r5, 0x0) ioctl$VT_ACTIVATE(r5, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000012c0)={r5}, 0x8) connect$pppoe(r8, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'veth1_macvtap\x00'}}, 0x1e) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet6(0xa, 0x3, 0x1000) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000094e1d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xc}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r11, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r11, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r11, &(0x7f0000000080), 0x0}, 0x20) 2.361459141s ago: executing program 3 (id=2589): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x368, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0x0, 0x4}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_CLASSID={0x8}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x2d0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x2a8, 0x6, [@m_ife={0x1d0, 0x0, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c}]}, {0x145, 0x6, "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"}, {0xc}, {0xc}}}, @m_nat={0x58, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x2d, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199"}, {0xc}, {0xc}}}, @m_csum={0x48, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x19, 0x6, "e9ff252f83b1f3f6b426a360538af449f620cbff2a"}, {0xc}, {0xc}}}, @m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x368}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x10c}}, 0x0) clock_adjtime(0x0, &(0x7f0000000700)={0x100000000006500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240e}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') fchdir(r4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = socket(0x1, 0x3, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000480), &(0x7f00000004c0)=@tcp6=r5}, 0x20) 1.70718526s ago: executing program 4 (id=2595): syz_mount_image$ext4(&(0x7f0000000940)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x11, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.493463073s ago: executing program 1 (id=2596): perf_event_open(&(0x7f0000001700)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc250d40f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c9837d5ac03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a9b893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c5452f42e09b388a14b22bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0843b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66cf8aeb1f98bd67bfd38ec2beac3ca99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94d81150c68ab27987655e1dd676ceef54ad4d663f88b6f82a65f7c94a0e40cbb782ff536bd67ba81125f8e0af199094b407f630dc6eb3b79615a4e63f75ab30b1e475748cb5dce6581dc92f740a21fb8dec725b4f2a0b0972f852504245d5ce11cfdead09c9b6e094261084cd20c2294525061a4638c0bfd08dfa70d24bf85d9cfd940e1a4f1509bed8233f22506e5b000000000000862a01def6c9e879a87688ad151c14ae7ff8a090aebe7e4f936c26e565ae96d38ee5f794468caa17419e22ff13df60a95596490358a3b8121511e427d619ad87fe998702ea0b659eff3f5cd8f4094fdd6b1d45facfe6629846170d99de670a9e72e21ed7363876612bf58a17142abccbbe4762f531067f92af24f5354f432ed1df74f8168d05de528f63a98bca22820439c567973de0077c068d1b70b6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_MAP_INFO(0x1c, 0x0, 0x0) 1.458156138s ago: executing program 2 (id=2597): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390800001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) socket$packet(0x11, 0x0, 0x300) 1.436932131s ago: executing program 4 (id=2598): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0xa, 0x0, 0x0, &(0x7f0000001540)=""/17, 0x11}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.38135362s ago: executing program 0 (id=2599): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='cpuhp_exit\x00'}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x104, 0x304, &(0x7f0000000040)="b90703600000f007049e0ff008001fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macsec0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x57, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x21, 0x3a, 0xff, @private2, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local, [{0xe, 0x1, "0c874a1a0335ae"}]}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x378, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e0, 0x98, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) close_range(0xffffffffffffffff, r4, 0x0) 1.346673745s ago: executing program 1 (id=2600): r0 = socket$key(0xf, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030000140000000000000000000000030006000000000002000000e00000020000000000000000030001000000000002000000ac1414000000000000000000030005000000000002000000ac1e0001000000000000000004000400000000000000000000000000000000000000000000000000000000000400030000000000000000000000000000000000000000000000000000000000010018"], 0xa0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "65d1224ff747f5889b07a90182721d3f56ee5b14218f6c8f850469f7031f587c", 0x401, 0xe2, 0x5, 0x1}, 0x3c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000020a000000180004"], 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x22c, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc1}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4004) 1.209844066s ago: executing program 3 (id=2601): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x320, 0x1acc02, 0x148, 0x0, 0x10, 0x3b0, 0x2a8, 0x2a8, 0x3b0, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1_to_team\x00'}, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b9) 1.097575083s ago: executing program 2 (id=2602): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x2e8}}], 0x2, 0x0) 1.088681264s ago: executing program 4 (id=2603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) (async) tee(r5, r3, 0x8, 0x2) (async) rt_sigaction(0x2f, &(0x7f00000000c0)={&(0x7f0000000000)="4a0fae252f8e000066430f10bc7f0008804165660fc276a100f2ad8fa860b6bf8dc5000000c421c1d19300000000660f38258200000000c4a2458e02450f2cad0f000000f30fa2", 0x0, &(0x7f0000000080)="65660f701e036467f3440f5dea419ea20000000000000000f00fbb4d00660f6632c481fa2c52083e660f3815ec67f3e04af20f1216", {[0x7fffffffffffffff]}}, 0x0, 0x8, &(0x7f0000000100)) rt_sigsuspend(0x0, 0x0) (async) r7 = io_uring_setup(0x2a92, &(0x7f0000000180)={0x0, 0x10cc, 0x2}) io_uring_enter(r7, 0xeda, 0x7838, 0x4, &(0x7f0000000200), 0x8) (async) lsetxattr$security_selinux(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x1) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0) (async) rt_sigprocmask(0x2, &(0x7f0000000380)={[0x8]}, &(0x7f00000003c0), 0x8) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f00000014c0)={0x3ff, 0x0, 0x0, 0x0}, 0x20) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) quotactl$Q_SETINFO(0xffffffff80000602, 0x0, r8, &(0x7f0000001600)={0x1, 0x8000000000000000, 0x1, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f00000017c0)=0xe8) lsetxattr$system_posix_acl(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)='system.posix_acl_default\x00', &(0x7f0000001840)={{}, {0x1, 0x5}, [{}, {}], {0x4, 0x2}, [], {0x10, 0x1}, {0x20, 0x1}}, 0x34, 0x1) (async) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000018c0)=@md0, 0x0, &(0x7f0000001900)={0xb6, 0x7, 0x0, 0x3}) (async) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000001940)) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000019c0)=@o_path={&(0x7f0000001980)='./file0\x00'}, 0x18) (async) getpid() (async) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001a00)={@mcast1, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0xe484, 0x4, 0x400, 0x3ff, 0x200, r9}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x18, 0xb, &(0x7f0000001a80)=ANY=[@ANYBLOB="85018000fdffffff0aa9000001000000d086b17b00000000185800000000000000000000000000001850000009000000000000000000000018590000100000000000000000000000180000000100000000000000ff0f0000"], &(0x7f0000001b00)='GPL\x00', 0x6, 0xbd, &(0x7f0000001b40)=""/189, 0x41100, 0x35, '\x00', r9, 0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000001c00)=[0x1], &(0x7f0000001c40)=[{0x1, 0x1}], 0x10, 0x7}, 0x90) 1.030202364s ago: executing program 1 (id=2604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x500, 0x0, 0x4, {[@fastopen={0x22, 0x3, "f1"}, @window={0x3, 0x3, 0x8}, @window={0x3, 0x3, 0xa0}]}}, {"2b6b52105c30993700be7dc2ba4ba28db6412cad37b74b932c98386c73a46f1bd152e6c471f6c8196aeb1388eb12db7f5696bb7758b4177402c38d029f3f5fbb0fc1cb57a35ef06fb675f7b369ce050000004ce2a60eed9a9f81549b35e9700d838db771eed8d1697c5114e22dbe33ed17dbc10c8e9e0b10fe71f48fd152954aba36"}}}}}, 0xc4) 977.533241ms ago: executing program 0 (id=2605): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', 0x0) 924.19328ms ago: executing program 3 (id=2606): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r0 = dup(0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[], 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0xc}, {}, {0x6}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@empty, 0x2d, 0x1, 0xff, 0x2, 0x5}, 0x20) listen(0xffffffffffffffff, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000001080)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x29f9bf5d620eff28, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x4000444) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x2}, {0x0, 0xfffc}], 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x25ae]) 861.187689ms ago: executing program 2 (id=2607): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1}, 0x6e) pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0xe0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x89, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') pread64(r4, &(0x7f0000000880)=""/4096, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x11, &(0x7f00000018c0)=ANY=[@ANYBLOB="18000000f706000000c6cf00ff070004181100007ba686907946386ac4d1efea525369e66012edb8b28fe3504a9952e3aa4b68382ead6bfa7591c1fe6f0ed7dc0235efd6faa556ef8e52360000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018220000", @ANYRES32=r0, @ANYBLOB="000000006678861bbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x0, 0x0, 0x40f00, 0x46, '\x00', r3, 0x2d, r0, 0x8, &(0x7f0000000400)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xe, 0x0, 0x7fffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000680)=[r0, r0, r0, r0, r4, r0, r0, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x2, 0x1, 0xb, 0xb}, {0x3, 0x1, 0xc, 0x9}, {0x1, 0x3, 0x7, 0xe}], 0x10, 0x4}, 0x90) 813.428746ms ago: executing program 4 (id=2608): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getdents(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)=""/110, 0x6e}, {&(0x7f00000004c0)=""/59, 0x3b}, {&(0x7f0000000000)=""/97, 0x61}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x4}}], 0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32, @ANYBLOB="00000000000000009f020000140000000083000000bf0900000000000055090100000000009500000000000000181200"/60, @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x90) ptrace$peek(0x3, r1, &(0x7f00000000c0)) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000180), 0x0}, 0x20) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, 0x13, 0x0, 0x669, 0x1, 0x0, 0xffffffffffffffff}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xa0401a, &(0x7f00000000c0)=ANY=[], 0x1, 0x552, &(0x7f00000004c0)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 753.820535ms ago: executing program 0 (id=2609): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getpid() connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r1, 0x0, 0x0) 742.986327ms ago: executing program 1 (id=2610): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3000000, &(0x7f0000000340)=ANY=[], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_io_uring_setup(0x24fa, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x18, 0x1, r2, 0x0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/240, 0xf0}], 0x1, &(0x7f0000000a40)=""/4096, 0x1000}, 0x0, 0x100, 0x1, {0x2}}) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='&'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800b3d6cf44f8be540d7cec39000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b7030000040000005600000040420f002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, @TCA_RED_STAB={0x104, 0x2, "130909c905f1c6521616975bf637254a07b12dd65e92074d6cd3a184e8e99a60709b11a1a3dd3ea905ab5f4c6f5b3ba124220e1a10401fb59cfaaeab610b37beb3fab50e2f7fefa76aa91a95e7eefef33dafd2e714a39d33579131e5b033fa9f3fd9002ceaaa3f3ab8670d595b6d00559ba4b6100c62e9efe5b527d9dc37409a6af7fcb8aafab60021bfc97e74a2924aa672c91e3fe0302ee2d6e7372e7e854cb23895b123a0858c3b655563ed47126efd8ad55bb90cffefc185b69561ce11ad94dbe4a10a276feea49f586b33d8efb229984f5fa200a1c9ad3c3191af52319fb3c1d7352ed9fc011691643778914de9d1d3b82015d0e07e462da0ee3e92f2f9"}]}}]}, 0x148}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRESHEX=r5, @ANYRESOCT, @ANYRES16=r5, @ANYRES32, @ANYRES16=r4], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r9}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r11) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x9}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 591.07055ms ago: executing program 2 (id=2611): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x0, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x7928, &(0x7f0000000340)=""/222}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000500)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) 445.994982ms ago: executing program 4 (id=2612): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000011c0)="a0", 0x1, 0x2, &(0x7f00000012c0)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x75, &(0x7f0000000200)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f00000001c0)=0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xeab, 0x1, 0x40007, 0x0, 0xffffffffffffffff, 0x9, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0xe}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000694aead38000181100000d76ca69d71410ec229b41", @ANYRES32=r4, @ANYRESDEC=r3, @ANYRES32=r4, @ANYRES8], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYRES8], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2430c700", @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000100001800b0001006574683a6c6f0000"], 0x24}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket(0x10, 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x4, @empty}, 0x1c) listen(0xffffffffffffffff, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x9, 0x3}}}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) 389.499921ms ago: executing program 0 (id=2613): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@empty, 0x0, 0x0, 0x10, 0x0, [{@loopback}]}}) (async) r1 = epoll_create1(0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) (async) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async) bind(r3, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x1, @broadcast}}, 0x80) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000540)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}) (async) io_uring_enter(r6, 0xa3d, 0x0, 0x0, 0x0, 0x0) (async) fsetxattr(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="4f056375726974792f6b664e756500"], &(0x7f00000003c0)='\x00\x00o;\xc8\xdd1\xa4lB&\xa9\xb6\x06\x06\x99\t\xf5\x10\x17\'\xcaV\xab\\rw9+\xba\tl|\xde\x93\xea\x95A}\x89\x82\x8c\nN\x97\xbf\xab\xa4_\xc2\x17\xe7+\xc5\xfe\x16-\xdd\xa7\x00\xfe\xa0\xa2\xbdUw\x01\x80\x92\xea\x15\xc2opg\xee\xbd\t\xba\x9d\x98\x983\xfd\v\xc1\xbd\x1e\xd5r\xb17\x83\xaf\xfa\x90\x8bh\xc3@\xda\xee\x97\xd5~\xee\xd6$\xc6\x8c\x01l\x1e\xd3\x1f\xe4<\xee\b\xe4\x16\xc3Ku\x84\xa3\xfa\xe9\t\x87\x01>\xcc\xcb~X\x16d\xf65\x15\xcd\x89\xb8\x1bF\xcd\r\xbc\xc0\xbb\xf5Q\x06\xb71>\xcd\xdb\x0f\x8c\x14\xc5\t\x92m/u,^\xe6\xc7V\xca|;j\xc1\xf4$\xe1A\x17\xeb\xf1M\x8c\x82\\\x89\x89\x00\x98\xadr\xd4\x86;\xed+\x899\x8a\xe9\x18\xb4]a\xd2\x15\x93\x84\x8b\x85\xae\'\xf4\xc9\xcb\x8c\'\x88\xff\x02\b\xaf\xe9vc\x9au\xba\xce]\x85\x98>\xa6\xe1\xc0)\xff`}\xbd;\xbc5\xda^\xfb\x91\xe6\xc6\n4!\xfa\x87*c\x8e\x9b\x95\x89D\xc0/\x17U\xd6\xc8\x8f\"<\x95O\xaf\xf0y\x11\xceL\x1bE\x9d\x03\xaf\x0f,\xd9O\x9aa\x94\xe4\x11l\x17\x8c\x7f[\xcb%Wg\xf1\t\x820\x11\xae+\x8e\xd0%|\xb7\xd9\xc0\x9e\xc1\xd1\xdc\xb7O\xd3\xce\xeb2\x18\x96\x03\xfc\n\xe4\x15d\a\xe7\x7f\x8b\x05\x880\xaa\x11\xcf\x85\xe3c\x88{\xb1E\xae\xfa\xbf\aj\x05P\x96fj5]\x16\r,\x15\xdd\f\x942\x05\xb10I\xe7\xfe\xdb\xaasT\x90\xf7O\xb4\xb1\xc1\x1de|\xf11\xd1\xc1x\xce\x11u\x16~6\xa3\xf7', 0x1a0, 0x0) (async) creat(&(0x7f0000000180)='./file0\x00', 0x10) (async) flistxattr(r5, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000001000)='signal_generate\x00', r11}, 0x10) 389.304331ms ago: executing program 1 (id=2614): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x42000000) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000), 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c000000070a01010000000000000000028000000900020073799b00000000000900010073797a30"], 0x2c}}, 0x0) pipe(&(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) 343.209688ms ago: executing program 2 (id=2615): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfff, 0x0, 0x0, 0xffffffff, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0xc) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0x38, 0x0) 245.758013ms ago: executing program 0 (id=2616): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x320, 0x1acc02, 0x148, 0x0, 0x10, 0x3b0, 0x2a8, 0x2a8, 0x3b0, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1_to_team\x00'}, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b9) 181.880052ms ago: executing program 4 (id=2617): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="d7"], 0x2e8}}], 0x2, 0x0) 13.477778ms ago: executing program 1 (id=2618): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x2, "ff"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001a0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x10, 0x70bd24, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000044) syz_emit_ethernet(0x42, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb6101000000000000000000f88f78ac1414000a010100440406038903ce830200000000000000602a958b7f68c7c109dc9ec64fc61cab95e8ef4d511aa09dcaf211ce69b7d381afb0a35612f9", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) 13.307568ms ago: executing program 2 (id=2619): socket(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000011401002dbd7000fe319668e5dbdf25080001080000000008000100020001000124ef000000080001000100000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x41) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r3, @ANYBLOB="000000000000000018001680140001801000060000000000ff0f05000000000008000d"], 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) r4 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x3f, 0x105000) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0xb0) write$P9_RUNLINKAT(r4, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) sendfile(r5, r5, 0x0, 0x800000008) pwritev2(r5, &(0x7f0000000300)=[{&(0x7f0000000280)="f0", 0x1}], 0x1, 0xfffffffd, 0x0, 0x9) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 0s ago: executing program 0 (id=2620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): b usb9: usbfs: process 8283 (syz.2.1508) did not claim interface 0 before use [ 155.081494][ T8288] loop1: detected capacity change from 0 to 128 [ 155.145756][ T8288] program syz.1.1511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.156283][ T8288] blktrace: Concurrent blktraces are not allowed on sg0 [ 155.337581][ T29] audit: type=1400 audit(1719653043.355:769): avc: denied { bind } for pid=8294 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 155.450909][ T8305] loop0: detected capacity change from 0 to 256 [ 155.465944][ T8305] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.585795][ T8304] sctp: [Deprecated]: syz.0.1516 (pid 8304) Use of int in max_burst socket option. [ 155.585795][ T8304] Use struct sctp_assoc_value instead [ 155.652473][ T8314] program syz.1.1519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.848916][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 156.025660][ T29] audit: type=1326 audit(1719653044.045:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8323 comm="syz.3.1525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1182c01b99 code=0x0 [ 156.136330][ T8330] loop3: detected capacity change from 0 to 2048 [ 156.181218][ T8330] GPT:first_usable_lbas don't match. [ 156.186532][ T8330] GPT:34 != 290 [ 156.190026][ T8330] GPT: Use GNU Parted to correct GPT errors. [ 156.196150][ T8330] loop3: p1 p2 p3 [ 156.236168][ T2782] GPT:first_usable_lbas don't match. [ 156.241523][ T2782] GPT:34 != 290 [ 156.244999][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 156.251222][ T2782] loop3: p1 p2 p3 [ 156.384468][ T8339] loop2: detected capacity change from 0 to 512 [ 156.412627][ T8339] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 156.422662][ T8339] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 156.432590][ T8339] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.1530: Failed to acquire dquot type 1 [ 156.445062][ T8339] EXT4-fs (loop2): 1 truncate cleaned up [ 156.451148][ T8339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.463681][ T8339] ext4 filesystem being mounted at /root/syzkaller.32alW8/126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.521309][ T6285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.789513][ T8359] loop0: detected capacity change from 0 to 764 [ 156.805830][ T8359] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 156.815094][ T8359] Symlink component flag not implemented [ 156.817467][ T8360] loop4: detected capacity change from 0 to 128 [ 156.820761][ T8359] Symlink component flag not implemented [ 156.833043][ T8359] Symlink component flag not implemented (128) [ 156.839328][ T8359] Symlink component flag not implemented (122) [ 156.859559][ T4039] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 156.860410][ T8360] program syz.4.1537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.879425][ T8360] blktrace: Concurrent blktraces are not allowed on sg0 [ 157.092749][ T8370] loop1: detected capacity change from 0 to 256 [ 157.111607][ T8370] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.203891][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1542'. [ 157.228841][ T8364] sctp: [Deprecated]: syz.1.1541 (pid 8364) Use of int in max_burst socket option. [ 157.228841][ T8364] Use struct sctp_assoc_value instead [ 157.453845][ T8387] loop0: detected capacity change from 0 to 8192 [ 157.747960][ T8401] loop2: detected capacity change from 0 to 1024 [ 157.781377][ T8401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.815687][ T29] audit: type=1400 audit(1719653045.835:771): avc: denied { setattr } for pid=8398 comm="syz.2.1549" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.826705][ T8401] Quota error (device loop2): do_check_range: Getting block 8388866 out of range 1-5 [ 157.847387][ T8401] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 157.856823][ T8401] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.1549: Failed to acquire dquot type 1 [ 157.885363][ T8404] loop4: detected capacity change from 0 to 128 [ 157.920825][ T6285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.941634][ T8404] program syz.4.1550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.952299][ T8404] blktrace: Concurrent blktraces are not allowed on sg0 [ 158.169858][ T8421] loop4: detected capacity change from 0 to 512 [ 158.187794][ T8421] EXT4-fs (loop4): bad geometry: block count 4043309312 exceeds size of device (256 blocks) [ 158.235400][ T8421] loop4: detected capacity change from 0 to 512 [ 158.260544][ T8421] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 158.270702][ T8421] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 158.280655][ T8421] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.1555: Failed to acquire dquot type 1 [ 158.293284][ T8421] EXT4-fs (loop4): 1 truncate cleaned up [ 158.300049][ T8421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.312621][ T8421] ext4 filesystem being mounted at /root/syzkaller.RoKDba/162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.394455][ T8430] loop2: detected capacity change from 0 to 2048 [ 158.416925][ T8430] EXT4-fs: Ignoring removed orlov option [ 158.431231][ T8430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.455357][ T6063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.464445][ T8435] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.510381][ T8437] loop0: detected capacity change from 0 to 2048 [ 158.518297][ T6285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.562470][ T8437] GPT:first_usable_lbas don't match. [ 158.567851][ T8437] GPT:34 != 290 [ 158.571386][ T8437] GPT: Use GNU Parted to correct GPT errors. [ 158.577463][ T8437] loop0: p1 p2 p3 [ 158.638399][ T2782] GPT:first_usable_lbas don't match. [ 158.643718][ T2782] GPT:34 != 290 [ 158.647177][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 158.653300][ T2782] loop0: p1 p2 p3 [ 158.679690][ T8442] loop4: detected capacity change from 0 to 512 [ 158.705409][ T8442] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 158.743251][ T8444] syz.3.1564 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 159.266040][ T8465] loop2: detected capacity change from 0 to 128 [ 159.290098][ T8465] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 159.299762][ T8465] EXT4-fs (loop2): group descriptors corrupted! [ 159.335825][ T8465] netlink: 'syz.2.1572': attribute type 2 has an invalid length. [ 159.343626][ T8465] netlink: 'syz.2.1572': attribute type 4 has an invalid length. [ 159.351438][ T8465] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1572'. [ 159.557849][ T8473] loop1: detected capacity change from 0 to 512 [ 159.584172][ T8473] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 160.020937][ T8500] loop1: detected capacity change from 0 to 164 [ 160.032720][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 160.032733][ T29] audit: type=1326 audit(1719653048.055:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8498 comm="syz.4.1585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72643f4b99 code=0x0 [ 160.070544][ T8500] rock: directory entry would overflow storage [ 160.076778][ T8500] rock: sig=0x5245, size=8, remaining=3 [ 160.143539][ T8503] loop4: detected capacity change from 0 to 2048 [ 160.182907][ T8503] GPT:first_usable_lbas don't match. [ 160.188210][ T8503] GPT:34 != 290 [ 160.191723][ T8503] GPT: Use GNU Parted to correct GPT errors. [ 160.197762][ T8503] loop4: p1 p2 p3 [ 160.244726][ T2782] GPT:first_usable_lbas don't match. [ 160.250104][ T2782] GPT:34 != 290 [ 160.253570][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 160.259628][ T2782] loop4: p1 p2 p3 [ 160.397176][ T8514] loop2: detected capacity change from 0 to 512 [ 160.413579][ T8514] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 160.669709][ T8522] loop3: detected capacity change from 0 to 2048 [ 160.795910][ T29] audit: type=1400 audit(1719653048.815:775): avc: denied { sys_module } for pid=8527 comm="syz.1.1596" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 160.878598][ T8534] loop3: detected capacity change from 0 to 2048 [ 160.946926][ T8536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1597'. [ 160.963628][ T8534] loop3: unable to read partition table [ 160.969336][ T8534] loop3: partition table beyond EOD, truncated [ 160.975523][ T8534] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 161.013801][ T2782] loop3: unable to read partition table [ 161.019506][ T2782] loop3: partition table beyond EOD, truncated [ 161.119938][ T8539] loop1: detected capacity change from 0 to 2048 [ 161.136728][ T8539] EXT4-fs: Ignoring removed orlov option [ 161.150973][ T8539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.220676][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.380942][ T29] audit: type=1400 audit(1719653049.405:776): avc: denied { write } for pid=8550 comm="syz.3.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 161.406839][ T8554] loop3: detected capacity change from 0 to 128 [ 161.423639][ T8554] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.435835][ T8554] ext4 filesystem being mounted at /root/syzkaller.aFqwuM/100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.533607][ T8563] loop4: detected capacity change from 0 to 256 [ 161.553250][ T8563] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.570576][ T8563] sctp: [Deprecated]: syz.4.1607 (pid 8563) Use of int in max_burst socket option. [ 161.570576][ T8563] Use struct sctp_assoc_value instead [ 161.667997][ T7039] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.717466][ T29] audit: type=1326 audit(1719653049.735:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.0.1610" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x0 [ 161.778768][ T8575] loop0: detected capacity change from 0 to 2048 [ 161.838553][ T8575] GPT:first_usable_lbas don't match. [ 161.843889][ T8575] GPT:34 != 290 [ 161.847387][ T8575] GPT: Use GNU Parted to correct GPT errors. [ 161.853560][ T8575] loop0: p1 p2 p3 [ 161.900874][ T2782] GPT:first_usable_lbas don't match. [ 161.906245][ T2782] GPT:34 != 290 [ 161.909728][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 161.915777][ T2782] loop0: p1 p2 p3 [ 161.978514][ T8584] usb usb9: usbfs: process 8584 (syz.2.1613) did not claim interface 0 before use [ 162.126243][ T8587] loop3: detected capacity change from 0 to 8192 [ 162.140446][ T8588] loop1: detected capacity change from 0 to 8192 [ 162.732040][ T8596] netlink: 'syz.1.1618': attribute type 3 has an invalid length. [ 162.771540][ T8596] loop1: detected capacity change from 0 to 8192 [ 162.809938][ T4039] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 162.859757][ T8602] loop0: detected capacity change from 0 to 128 [ 162.913147][ T8602] program syz.0.1619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.924216][ T8602] blktrace: Concurrent blktraces are not allowed on sg0 [ 163.068603][ T8609] loop1: detected capacity change from 0 to 2048 [ 163.084504][ T8610] loop2: detected capacity change from 0 to 256 [ 163.085244][ T8609] EXT4-fs: Ignoring removed orlov option [ 163.112188][ T8610] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.120419][ T8609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.187107][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.248694][ T8607] sctp: [Deprecated]: syz.2.1622 (pid 8607) Use of int in max_burst socket option. [ 163.248694][ T8607] Use struct sctp_assoc_value instead [ 163.286247][ T8620] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 163.431332][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1628'. [ 163.445874][ T29] audit: type=1400 audit(1719653051.465:778): avc: denied { write } for pid=8623 comm="syz.0.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.539401][ T8626] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 163.547553][ T8626] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 163.565259][ T8626] SELinux: Context system_u:object_r:sshd_exec_t:s0 is not valid (left unmapped). [ 163.565409][ T29] audit: type=1400 audit(1719653051.585:779): avc: denied { relabelfrom } for pid=8623 comm="syz.0.1630" name="AF_VSOCK" dev="sockfs" ino=24156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 163.604112][ T29] audit: type=1400 audit(1719653051.595:780): avc: denied { relabelto } for pid=8623 comm="syz.0.1630" name="AF_VSOCK" dev="sockfs" ino=24156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=vsock_socket permissive=1 trawcon="system_u:object_r:sshd_exec_t:s0" [ 163.701246][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1632'. [ 163.724061][ T8634] netlink: 'syz.1.1633': attribute type 3 has an invalid length. [ 163.765619][ T8634] loop1: detected capacity change from 0 to 8192 [ 163.809487][ T4039] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 163.841276][ T8636] loop0: detected capacity change from 0 to 2048 [ 163.855054][ T8636] EXT4-fs: Ignoring removed orlov option [ 163.872745][ T8636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.933600][ T5072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.289136][ T8654] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 164.802234][ T29] audit: type=1400 audit(1719653052.825:781): avc: denied { execute } for pid=8679 comm="syz.4.1650" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.077037][ T8698] loop1: detected capacity change from 0 to 256 [ 165.234766][ T8702] loop3: detected capacity change from 0 to 512 [ 165.252777][ T8702] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 165.319564][ T8705] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 165.571317][ T29] audit: type=1326 audit(1719653053.595:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1182c01b99 code=0x7ffc0000 [ 165.594739][ T29] audit: type=1326 audit(1719653053.595:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f1182c01b99 code=0x7ffc0000 [ 165.618082][ T29] audit: type=1326 audit(1719653053.595:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1182c01b99 code=0x7ffc0000 [ 165.641415][ T29] audit: type=1326 audit(1719653053.595:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1182c01b99 code=0x7ffc0000 [ 165.664754][ T29] audit: type=1326 audit(1719653053.595:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1182c01b99 code=0x7ffc0000 [ 165.688043][ T29] audit: type=1326 audit(1719653053.595:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1182c01b99 code=0x7ffc0000 [ 165.711339][ T29] audit: type=1326 audit(1719653053.595:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1182c005d0 code=0x7ffc0000 [ 165.734730][ T29] audit: type=1326 audit(1719653053.595:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1182c03327 code=0x7ffc0000 [ 165.758029][ T29] audit: type=1326 audit(1719653053.595:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1182c01b99 code=0x7ffc0000 [ 165.781304][ T29] audit: type=1326 audit(1719653053.595:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1182c03327 code=0x7ffc0000 [ 165.821341][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.828733][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.836154][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.843623][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.851029][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.858562][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.865963][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.873440][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.880825][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.888278][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.895684][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.903107][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.910676][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.918177][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.925601][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.933006][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.940397][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.947769][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.955259][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.962679][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.970088][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.977485][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.984873][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.992283][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 165.999677][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 166.007088][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 166.014637][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 166.022097][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 166.029591][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 166.036964][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 166.044700][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 166.052371][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 166.059865][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 166.067282][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 166.074699][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 166.082088][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 166.089476][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 166.096846][ T3159] hid-generic 0000:C9C2:0000.0002: unknown main item tag 0x0 [ 166.105136][ T3159] hid-generic 0000:C9C2:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 166.130908][ T8717] loop0: detected capacity change from 0 to 512 [ 166.151250][ T8717] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.160455][ T8717] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (800) [ 166.225784][ T8724] syzkaller0: entered promiscuous mode [ 166.231306][ T8724] syzkaller0: entered allmulticast mode [ 166.400632][ T8730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=8730 comm=syz.4.1666 [ 166.629964][ T8741] team_slave_0: entered promiscuous mode [ 166.635657][ T8741] team_slave_1: entered promiscuous mode [ 166.641895][ T8741] macvtap1: entered promiscuous mode [ 166.647225][ T8741] team0: entered promiscuous mode [ 166.654157][ T8741] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 166.662812][ T8741] team0: Device macvtap1 is already an upper device of the team interface [ 166.672119][ T8741] team0: left promiscuous mode [ 166.677206][ T8741] team_slave_0: left promiscuous mode [ 166.682616][ T8741] team_slave_1: left promiscuous mode [ 166.769365][ T8745] loop0: detected capacity change from 0 to 512 [ 166.784055][ T8745] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 166.915787][ T8753] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 167.131613][ T8761] netlink: 'syz.1.1678': attribute type 3 has an invalid length. [ 167.175561][ T8761] loop1: detected capacity change from 0 to 8192 [ 167.230386][ T4039] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 167.317611][ T8766] loop2: detected capacity change from 0 to 512 [ 167.340899][ T8766] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 167.364729][ T8766] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 167.442250][ T8766] loop2: detected capacity change from 0 to 1024 [ 167.468226][ T8766] EXT4-fs: Ignoring removed orlov option [ 167.485119][ T8766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.554430][ T8783] loop1: detected capacity change from 0 to 256 [ 167.571974][ T8783] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.613642][ T6285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.680401][ T8788] loop3: detected capacity change from 0 to 512 [ 167.710452][ T8788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.723001][ T8788] ext4 filesystem being mounted at /root/syzkaller.aFqwuM/118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.795780][ T6646] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9b [ 167.798692][ T8798] loop2: detected capacity change from 0 to 512 [ 167.818715][ T8798] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 168.005738][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 168.015039][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 168.032693][ T8808] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 168.195099][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1691'. [ 168.361979][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'. [ 168.391227][ T8814] loop1: detected capacity change from 0 to 8192 [ 168.573770][ T7039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.816376][ T8832] loop0: detected capacity change from 0 to 8192 [ 168.958108][ T8836] loop3: detected capacity change from 0 to 512 [ 168.975600][ T8836] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 169.084050][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 169.613830][ T8875] netlink: 'syz.0.1711': attribute type 3 has an invalid length. [ 169.656448][ T8875] loop0: detected capacity change from 0 to 8192 [ 169.701081][ T4039] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 169.917328][ T8883] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1715'. [ 169.994453][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1717'. [ 170.118420][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'. [ 170.208745][ T8897] loop0: detected capacity change from 0 to 2048 [ 170.242059][ T8897] GPT:first_usable_lbas don't match. [ 170.247375][ T8897] GPT:34 != 290 [ 170.250901][ T8897] GPT: Use GNU Parted to correct GPT errors. [ 170.257025][ T8897] loop0: p1 p2 p3 [ 170.309483][ T2782] GPT:first_usable_lbas don't match. [ 170.314774][ T2782] GPT:34 != 290 [ 170.318239][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 170.324374][ T2782] loop0: p1 p2 p3 [ 170.425773][ T8904] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8904 comm=syz.4.1722 [ 170.438682][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'. [ 170.451652][ T8904] dummy0: entered promiscuous mode [ 170.460968][ T8904] bridge0: port 4(team0) entered blocking state [ 170.467345][ T8904] bridge0: port 4(team0) entered disabled state [ 170.473838][ T8904] team0: entered allmulticast mode [ 170.479002][ T8904] team_slave_0: entered allmulticast mode [ 170.484785][ T8904] team_slave_1: entered allmulticast mode [ 170.491639][ T8904] team0: entered promiscuous mode [ 170.496670][ T8904] team_slave_0: entered promiscuous mode [ 170.502414][ T8904] team_slave_1: entered promiscuous mode [ 170.510678][ T8904] bridge0: port 4(team0) entered blocking state [ 170.516960][ T8904] bridge0: port 4(team0) entered forwarding state [ 170.527882][ T8905] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 170.545874][ T8905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.554676][ T8905] bond0: (slave batadv0): Enslaving as a backup interface with an up link [ 170.579368][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 170.644288][ T8911] netlink: 'syz.2.1726': attribute type 3 has an invalid length. [ 170.689642][ T8911] loop2: detected capacity change from 0 to 8192 [ 170.740432][ T4039] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 171.121911][ T8930] loop1: detected capacity change from 0 to 128 [ 171.143906][ T8930] tmpfs: Unknown parameter 'euid<00000000000000000000' [ 171.145613][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 171.145627][ T29] audit: type=1400 audit(1719653059.165:855): avc: denied { mounton } for pid=8929 comm="syz.1.1733" path="/root/syzkaller.yr9tIF/357/file1/file0" dev="loop1" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 171.269797][ T8938] loop0: detected capacity change from 0 to 512 [ 171.285325][ T8938] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 171.446672][ T29] audit: type=1400 audit(1719653059.465:856): avc: denied { mount } for pid=8945 comm="syz.4.1740" name="/" dev="configfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 171.469299][ T29] audit: type=1400 audit(1719653059.465:857): avc: denied { read } for pid=8945 comm="syz.4.1740" name="/" dev="configfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.492503][ T29] audit: type=1400 audit(1719653059.465:858): avc: denied { open } for pid=8945 comm="syz.4.1740" path="/root/syzkaller.RoKDba/196/file0" dev="configfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.568081][ T8958] netlink: 'syz.0.1741': attribute type 3 has an invalid length. [ 171.618833][ T8958] loop0: detected capacity change from 0 to 8192 [ 171.649491][ T4039] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 171.740714][ T29] audit: type=1326 audit(1719653059.765:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.1.1744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd3da43b99 code=0x0 [ 171.853162][ T8975] loop1: detected capacity change from 0 to 2048 [ 171.878646][ T8977] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 171.903320][ T8975] GPT:first_usable_lbas don't match. [ 171.908772][ T8975] GPT:34 != 290 [ 171.912263][ T8975] GPT: Use GNU Parted to correct GPT errors. [ 171.918416][ T8975] loop1: p1 p2 p3 [ 171.980886][ T2782] GPT:first_usable_lbas don't match. [ 171.986198][ T2782] GPT:34 != 290 [ 171.989771][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 171.995951][ T2782] loop1: p1 p2 p3 [ 172.243602][ T29] audit: type=1400 audit(1719653060.265:860): avc: denied { unmount } for pid=6063 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 172.357086][ T8996] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 172.365772][ T8996] team0: Device ipvlan2 is already an upper device of the team interface [ 172.708056][ T29] audit: type=1326 audit(1719653060.725:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9012 comm="syz.4.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72643f4b99 code=0x7ffc0000 [ 172.731430][ T29] audit: type=1326 audit(1719653060.725:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9012 comm="syz.4.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72643f4b99 code=0x7ffc0000 [ 172.754848][ T29] audit: type=1326 audit(1719653060.725:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9012 comm="syz.4.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f72643f4b99 code=0x7ffc0000 [ 172.778214][ T29] audit: type=1326 audit(1719653060.725:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9012 comm="syz.4.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72643f4b99 code=0x7ffc0000 [ 173.172220][ T9039] __nla_validate_parse: 4 callbacks suppressed [ 173.172233][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'. [ 173.425518][ T9052] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 173.452165][ T9054] loop3: detected capacity change from 0 to 2048 [ 173.502754][ T9054] GPT:first_usable_lbas don't match. [ 173.508072][ T9054] GPT:34 != 290 [ 173.511575][ T9054] GPT: Use GNU Parted to correct GPT errors. [ 173.517893][ T9054] loop3: p1 p2 p3 [ 173.568752][ T2782] GPT:first_usable_lbas don't match. [ 173.574097][ T2782] GPT:34 != 290 [ 173.577604][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 173.583694][ T2782] loop3: p1 p2 p3 [ 173.654161][ T9060] loop4: detected capacity change from 0 to 512 [ 173.669356][ T9060] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 174.007509][ T9072] loop1: detected capacity change from 0 to 2048 [ 174.062175][ T9072] GPT:first_usable_lbas don't match. [ 174.067484][ T9072] GPT:34 != 290 [ 174.071083][ T9072] GPT: Use GNU Parted to correct GPT errors. [ 174.077101][ T9072] loop1: p1 p2 p3 [ 174.119443][ T2782] GPT:first_usable_lbas don't match. [ 174.124738][ T2782] GPT:34 != 290 [ 174.128199][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 174.134314][ T2782] loop1: p1 p2 p3 [ 174.418398][ T9085] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 174.847099][ T9105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1798'. [ 174.911264][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 175.327725][ T9121] loop4: detected capacity change from 0 to 256 [ 175.348652][ T9121] FAT-fs (loop4): Unrecognized mount option "check=strær9s"ýÛict" or missing value [ 175.392774][ T9122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1805'. [ 175.421633][ T9121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1805'. [ 175.469974][ T9125] loop2: detected capacity change from 0 to 512 [ 175.487662][ T9125] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 175.619159][ T9130] program syz.4.1808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.813058][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1812'. [ 176.160148][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 176.160161][ T29] audit: type=1400 audit(1719653064.185:910): avc: denied { create } for pid=9168 comm="syz.4.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 176.188659][ T29] audit: type=1400 audit(1719653064.215:911): avc: denied { bind } for pid=9168 comm="syz.4.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 176.209309][ T9171] loop4: detected capacity change from 0 to 512 [ 176.224614][ T9171] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 176.234462][ T9171] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 176.242608][ T9171] System zones: 1-12 [ 176.246652][ T9171] EXT4-fs (loop4): orphan cleanup on readonly fs [ 176.253086][ T9171] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.1821: Inode bitmap for bg 0 marked uninitialized [ 176.268484][ T9171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 176.281889][ T9174] program syz.3.1822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.283892][ T9171] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #2: block 5: comm syz.4.1821: lblock 0 mapped to illegal pblock 5 (length 1) [ 176.306076][ T9171] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz.4.1821: error -117 reading directory block [ 176.352377][ T6063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.637543][ T9182] loop3: detected capacity change from 0 to 8192 [ 176.689265][ T9182] loop3: p2 p3 p4 [ 176.693127][ T9182] loop3: p2 start 452985600 is beyond EOD, truncated [ 176.699891][ T9182] loop3: p3 start 4177527808 is beyond EOD, truncated [ 176.706657][ T9182] loop3: p4 size 3599499392 extends beyond EOD, truncated [ 176.736651][ T29] audit: type=1400 audit(1719653064.755:912): avc: denied { mounton } for pid=9181 comm="syz.3.1825" path="/root/syzkaller.aFqwuM/144/bus" dev="sda1" ino=1995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 176.873810][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1827'. [ 177.119125][ T9200] loop0: detected capacity change from 0 to 512 [ 177.138629][ T9200] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 177.295354][ T9208] loop4: detected capacity change from 0 to 512 [ 177.527983][ T9223] loop1: detected capacity change from 0 to 512 [ 177.551144][ T9223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.563780][ T9223] ext4 filesystem being mounted at /root/syzkaller.yr9tIF/379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.610965][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.700966][ T9228] loop4: detected capacity change from 0 to 2048 [ 177.745986][ T9228] GPT:first_usable_lbas don't match. [ 177.751345][ T9228] GPT:34 != 290 [ 177.754813][ T9228] GPT: Use GNU Parted to correct GPT errors. [ 177.761052][ T9228] loop4: p1 p2 p3 [ 177.802188][ T2782] GPT:first_usable_lbas don't match. [ 177.807621][ T2782] GPT:34 != 290 [ 177.811111][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 177.817207][ T2782] loop4: p1 p2 p3 [ 178.151741][ T9237] loop4: detected capacity change from 0 to 512 [ 178.165043][ T9237] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 178.395948][ T9244] netlink: 'syz.2.1851': attribute type 3 has an invalid length. [ 178.431847][ T29] audit: type=1400 audit(1719653066.455:913): avc: denied { append } for pid=9243 comm="syz.3.1852" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.435264][ T9245] netlink: 'syz.3.1852': attribute type 29 has an invalid length. [ 178.461141][ T9244] loop2: detected capacity change from 0 to 8192 [ 178.511189][ T3427] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 178.599724][ T9253] loop4: detected capacity change from 0 to 1764 [ 178.649807][ T29] audit: type=1400 audit(1719653066.675:914): avc: denied { read } for pid=9254 comm="syz.3.1855" name="file2" dev="sda1" ino=1995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 178.672200][ T29] audit: type=1400 audit(1719653066.675:915): avc: denied { open } for pid=9254 comm="syz.3.1855" path="/root/syzkaller.aFqwuM/149/file2" dev="sda1" ino=1995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 178.808090][ T9261] loop0: detected capacity change from 0 to 2048 [ 178.855417][ T9261] GPT:first_usable_lbas don't match. [ 178.860733][ T9261] GPT:34 != 290 [ 178.864260][ T9261] GPT: Use GNU Parted to correct GPT errors. [ 178.870447][ T9261] loop0: p1 p2 p3 [ 178.908323][ T9265] loop3: detected capacity change from 0 to 512 [ 178.928120][ T9265] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 178.938272][ T2782] GPT:first_usable_lbas don't match. [ 178.943608][ T2782] GPT:34 != 290 [ 178.947076][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 178.953246][ T2782] loop0: p1 p2 p3 [ 179.001681][ T29] audit: type=1326 audit(1719653067.025:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.1.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 179.025303][ T29] audit: type=1326 audit(1719653067.025:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.1.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 179.049378][ T29] audit: type=1326 audit(1719653067.025:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.1.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 179.072738][ T29] audit: type=1326 audit(1719653067.025:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.1.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 179.322791][ T9278] loop0: detected capacity change from 0 to 512 [ 179.353875][ T9278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.367287][ T9278] ext4 filesystem being mounted at /root/syzkaller.6m9PbK/248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.382462][ T9278] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.1864: corrupted inode contents [ 179.394846][ T9278] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz.0.1864: mark_inode_dirty error [ 179.410079][ T9278] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.1864: corrupted inode contents [ 179.423393][ T9278] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1864: mark_inode_dirty error [ 179.431072][ T9284] netlink: 'syz.4.1866': attribute type 3 has an invalid length. [ 179.479201][ T9284] loop4: detected capacity change from 0 to 8192 [ 179.493102][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1867'. [ 179.511532][ T4039] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 179.511677][ T5072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.632637][ T9292] team0: entered promiscuous mode [ 179.637850][ T9292] team_slave_0: entered promiscuous mode [ 179.643618][ T9292] team_slave_1: entered promiscuous mode [ 179.650957][ T9292] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.659562][ T9292] team0: left promiscuous mode [ 179.664362][ T9292] team_slave_0: left promiscuous mode [ 179.669780][ T9292] team_slave_1: left promiscuous mode [ 179.916111][ T9304] loop1: detected capacity change from 0 to 512 [ 179.922638][ T9304] ext4: Unknown parameter 'noacl' [ 179.937062][ T9304] loop1: detected capacity change from 0 to 1024 [ 179.952218][ T9304] EXT4-fs: Ignoring removed orlov option [ 179.965406][ T9306] loop0: detected capacity change from 0 to 2048 [ 179.981158][ T9304] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 180.011912][ T9306] GPT:first_usable_lbas don't match. [ 180.017210][ T9306] GPT:34 != 290 [ 180.020745][ T9306] GPT: Use GNU Parted to correct GPT errors. [ 180.026812][ T9306] loop0: p1 p2 p3 [ 180.078169][ T2782] GPT:first_usable_lbas don't match. [ 180.083510][ T2782] GPT:34 != 290 [ 180.087043][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 180.093170][ T2782] loop0: p1 p2 p3 [ 180.516355][ T9323] loop1: detected capacity change from 0 to 512 [ 180.532152][ T9323] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 180.541650][ T9319] 9pnet_fd: Insufficient options for proto=fd [ 180.934716][ T9341] loop1: detected capacity change from 0 to 512 [ 180.946017][ T9342] loop2: detected capacity change from 0 to 2048 [ 180.954221][ T9341] EXT4-fs: Ignoring removed i_version option [ 180.961804][ T9341] EXT4-fs (loop1): orphan cleanup on readonly fs [ 180.968552][ T9341] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 180.983548][ T9341] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 180.990608][ T9341] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.1887: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 181.008727][ T9341] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1887: couldn't read orphan inode 13 (err -117) [ 181.021155][ T9341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.031559][ T9342] GPT:first_usable_lbas don't match. [ 181.038858][ T9342] GPT:34 != 290 [ 181.042354][ T9342] GPT: Use GNU Parted to correct GPT errors. [ 181.048461][ T9342] loop2: p1 p2 p3 [ 181.090539][ T2782] GPT:first_usable_lbas don't match. [ 181.095834][ T2782] GPT:34 != 290 [ 181.099426][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 181.105541][ T2782] loop2: p1 p2 p3 [ 181.191684][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 181.191768][ T29] audit: type=1326 audit(1719653069.205:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9316 comm="syz.0.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x7fc00000 [ 181.457185][ T29] audit: type=1326 audit(1719653069.475:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.2.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24dfb99 code=0x7ffc0000 [ 181.482725][ T29] audit: type=1326 audit(1719653069.505:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.2.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24dfb99 code=0x7ffc0000 [ 181.506085][ T29] audit: type=1326 audit(1719653069.505:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.2.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f29c24dfb99 code=0x7ffc0000 [ 181.529534][ T29] audit: type=1326 audit(1719653069.505:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.2.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24dfb99 code=0x7ffc0000 [ 181.552924][ T29] audit: type=1326 audit(1719653069.505:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.2.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24dfb99 code=0x7ffc0000 [ 181.576278][ T29] audit: type=1326 audit(1719653069.505:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.2.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29c24dfb99 code=0x7ffc0000 [ 181.599502][ T29] audit: type=1326 audit(1719653069.505:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.2.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24dfb99 code=0x7ffc0000 [ 181.622801][ T29] audit: type=1326 audit(1719653069.505:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.2.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29c24de5d0 code=0x7ffc0000 [ 181.646121][ T29] audit: type=1326 audit(1719653069.505:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.2.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f29c24e1327 code=0x7ffc0000 [ 181.863413][ T9362] loop0: detected capacity change from 0 to 512 [ 181.879634][ T9362] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 182.148736][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.360835][ T9379] loop1: detected capacity change from 0 to 2048 [ 182.404951][ T9379] GPT:first_usable_lbas don't match. [ 182.410380][ T9379] GPT:34 != 290 [ 182.413862][ T9379] GPT: Use GNU Parted to correct GPT errors. [ 182.420079][ T9379] loop1: p1 p2 p3 [ 182.478387][ T2782] GPT:first_usable_lbas don't match. [ 182.483726][ T2782] GPT:34 != 290 [ 182.487166][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 182.493283][ T2782] loop1: p1 p2 p3 [ 182.641091][ T9393] loop0: detected capacity change from 0 to 512 [ 182.655766][ T9393] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 182.820142][ T9400] loop2: detected capacity change from 0 to 128 [ 182.843776][ T9400] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.856522][ T9400] ext4 filesystem being mounted at /root/syzkaller.32alW8/201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 182.894562][ T9404] tipc: Started in network mode [ 182.899533][ T9404] tipc: Node identity f7, cluster identity 4711 [ 182.905833][ T9404] tipc: Node number set to 247 [ 182.965114][ T6285] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.386801][ T9427] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 183.397600][ T9426] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 183.399639][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1922'. [ 183.459188][ T9430] loop0: detected capacity change from 0 to 512 [ 183.513117][ T9430] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1923'. [ 183.576298][ T9430] loop0: detected capacity change from 0 to 8192 [ 183.583911][ T9430] FAT-fs (loop0): Unrecognized mount option "0xfffffffffffffffff•`ÿðG¥FÀ¢î×T §†[ôj°›*´öç~QܽLÈUʵÁ˸Ž7Dürô£úSÊ*£2Œ·•ß»" or missing value [ 184.035535][ T9446] loop0: detected capacity change from 0 to 1024 [ 184.061530][ T9446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.184782][ T5072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.018154][ T9520] O3ãc¤±: renamed from bridge_slave_0 (while UP) [ 185.799085][ T9598] netlink: 'syz.1.1959': attribute type 2 has an invalid length. [ 185.806848][ T9598] netlink: 'syz.1.1959': attribute type 2 has an invalid length. [ 185.817302][ T9598] netlink: 'syz.1.1959': attribute type 2 has an invalid length. [ 185.825176][ T9598] netlink: 'syz.1.1959': attribute type 2 has an invalid length. [ 185.851367][ T9603] loop3: detected capacity change from 0 to 512 [ 185.866214][ T9603] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 185.874914][ T9603] EXT4-fs (loop3): invalid journal inode [ 185.881129][ T9603] EXT4-fs (loop3): can't get journal size [ 185.887443][ T9603] EXT4-fs (loop3): orphan cleanup on readonly fs [ 185.895190][ T9603] EXT4-fs (loop3): 1 truncate cleaned up [ 185.901655][ T9603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 185.960737][ T7039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.963168][ T3159] hid (null): unknown global tag 0xd [ 185.975124][ T3159] hid (null): invalid report_size 14195 [ 185.980740][ T3159] hid (null): bogus close delimiter [ 185.987631][ T3159] hid-generic 0000:C9C2:0000.0003: unknown global tag 0xd [ 185.994826][ T3159] hid-generic 0000:C9C2:0000.0003: item 0 4 1 13 parsing failed [ 186.002734][ T3159] hid-generic 0000:C9C2:0000.0003: probe with driver hid-generic failed with error -22 [ 186.129797][ T9613] vhci_hcd: invalid port number 63 [ 186.140254][ T9613] loop4: detected capacity change from 0 to 512 [ 186.161781][ T9613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.174328][ T9613] ext4 filesystem being mounted at /root/syzkaller.RoKDba/247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.240710][ T6063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.776703][ T9643] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1973'. [ 186.787676][ T9643] IPv6: sit2: Disabled Multicast RS [ 186.801589][ T9649] loop2: detected capacity change from 0 to 164 [ 186.847653][ T9650] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 187.098612][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 187.098707][ T29] audit: type=1400 audit(1719653075.115:987): avc: denied { read } for pid=9657 comm="syz.3.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 187.158022][ T9659] loop3: detected capacity change from 0 to 2048 [ 187.189276][ T9659] loop3: p1 < > p2 < > p3 p4 < > [ 187.194322][ T9659] loop3: partition table partially beyond EOD, truncated [ 187.201468][ T9659] loop3: p1 start 2305 is beyond EOD, truncated [ 187.207711][ T9659] loop3: p2 start 4294902784 is beyond EOD, truncated [ 187.214608][ T9659] loop3: p3 start 4278191616 is beyond EOD, truncated [ 187.237039][ T2782] loop3: p1 < > p2 < > p3 p4 < > [ 187.242083][ T2782] loop3: partition table partially beyond EOD, truncated [ 187.249365][ T2782] loop3: p1 start 2305 is beyond EOD, truncated [ 187.255667][ T2782] loop3: p2 start 4294902784 is beyond EOD, truncated [ 187.262441][ T2782] loop3: p3 start 4278191616 is beyond EOD, truncated [ 187.278369][ T9666] loop1: detected capacity change from 0 to 2048 [ 187.294890][ T9666] EXT4-fs: Ignoring removed orlov option [ 187.311341][ T9666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.365077][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.668453][ T29] audit: type=1400 audit(1719653075.685:988): avc: denied { mount } for pid=9677 comm="syz.4.1984" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 187.670658][ T9680] loop4: detected capacity change from 0 to 128 [ 187.741426][ T9680] program syz.4.1984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.750821][ T9680] blktrace: Concurrent blktraces are not allowed on sg0 [ 187.929012][ T9685] loop4: detected capacity change from 0 to 512 [ 187.943130][ T9685] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 187.952083][ T9685] EXT4-fs (loop4): invalid journal inode [ 187.957817][ T9685] EXT4-fs (loop4): can't get journal size [ 187.964262][ T9685] EXT4-fs (loop4): orphan cleanup on readonly fs [ 187.971686][ T9685] EXT4-fs (loop4): 1 truncate cleaned up [ 187.977859][ T9685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 187.995971][ T29] audit: type=1400 audit(1719653076.015:989): avc: denied { connect } for pid=9684 comm="syz.4.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.067363][ T9689] loop0: detected capacity change from 0 to 512 [ 188.078151][ T6063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.089705][ T9690] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 188.109390][ T9689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 188.117295][ T9689] System zones: 1-12 [ 188.129733][ T9689] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1988: invalid indirect mapped block 8 (level 2) [ 188.143878][ T9689] EXT4-fs (loop0): Remounting filesystem read-only [ 188.150756][ T9689] EXT4-fs (loop0): 1 truncate cleaned up [ 188.156780][ T9689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.168949][ T9689] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 188.176274][ T9689] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.343439][ T29] audit: type=1326 audit(1719653076.365:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.1.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 188.367032][ T29] audit: type=1326 audit(1719653076.365:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.1.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 188.399487][ T29] audit: type=1326 audit(1719653076.415:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.1.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 188.422792][ T29] audit: type=1326 audit(1719653076.415:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.1.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 188.446470][ T29] audit: type=1326 audit(1719653076.415:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.1.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 188.469927][ T29] audit: type=1326 audit(1719653076.415:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.1.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 188.493215][ T29] audit: type=1326 audit(1719653076.415:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.1.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 188.689727][ T9712] loop4: detected capacity change from 0 to 128 [ 188.729810][ T9712] program syz.4.1997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.742605][ T9712] blktrace: Concurrent blktraces are not allowed on sg0 [ 189.336245][ T9746] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 189.578630][ T9752] loop4: detected capacity change from 0 to 128 [ 189.641556][ T9752] program syz.4.2011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.655569][ T9752] blktrace: Concurrent blktraces are not allowed on sg0 [ 189.861400][ T9764] loop0: detected capacity change from 0 to 8192 [ 189.958552][ T9768] loop3: detected capacity change from 0 to 512 [ 189.974796][ T9768] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 189.983717][ T9768] EXT4-fs (loop3): invalid journal inode [ 189.989500][ T9768] EXT4-fs (loop3): can't get journal size [ 189.996518][ T9768] EXT4-fs (loop3): orphan cleanup on readonly fs [ 190.003195][ T9768] EXT4-fs (loop3): 1 truncate cleaned up [ 190.009328][ T9768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 190.081820][ T7039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.197747][ T9779] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 190.396370][ T9786] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 190.528366][ T9791] loop0: detected capacity change from 0 to 256 [ 190.551669][ T9791] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.584680][ T9794] loop2: detected capacity change from 0 to 128 [ 190.650013][ T9794] program syz.2.2025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.661229][ T9794] blktrace: Concurrent blktraces are not allowed on sg0 [ 190.670816][ T9790] sctp: [Deprecated]: syz.0.2024 (pid 9790) Use of int in max_burst socket option. [ 190.670816][ T9790] Use struct sctp_assoc_value instead [ 190.886509][ T9811] loop3: detected capacity change from 0 to 512 [ 190.903569][ T9811] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 190.912522][ T9811] EXT4-fs (loop3): invalid journal inode [ 190.920024][ T9811] EXT4-fs (loop3): can't get journal size [ 190.926568][ T9811] EXT4-fs (loop3): orphan cleanup on readonly fs [ 190.933289][ T9811] EXT4-fs (loop3): 1 truncate cleaned up [ 190.941910][ T9811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 191.037831][ T7039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.495507][ T9833] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 192.123728][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 192.123744][ T29] audit: type=1400 audit(1719653080.145:1073): avc: denied { map } for pid=9847 comm="syz.1.2044" path="socket:[27520]" dev="sockfs" ino=27520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.267351][ T9856] loop3: detected capacity change from 0 to 512 [ 192.289546][ T9856] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 192.299470][ T9856] EXT4-fs (loop3): invalid journal inode [ 192.305162][ T9856] EXT4-fs (loop3): can't get journal size [ 192.312672][ T9856] EXT4-fs (loop3): orphan cleanup on readonly fs [ 192.320067][ T9856] EXT4-fs (loop3): 1 truncate cleaned up [ 192.326739][ T9856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.382239][ T29] audit: type=1326 audit(1719653080.405:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 192.405924][ T29] audit: type=1326 audit(1719653080.405:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 192.429441][ T29] audit: type=1326 audit(1719653080.405:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 192.434874][ T9863] loop1: detected capacity change from 0 to 256 [ 192.452840][ T29] audit: type=1326 audit(1719653080.405:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 192.482520][ T29] audit: type=1326 audit(1719653080.425:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 192.488503][ T9863] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.518084][ T7039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.585837][ T9865] loop4: detected capacity change from 0 to 128 [ 192.638004][ T9861] sctp: [Deprecated]: syz.1.2047 (pid 9861) Use of int in max_burst socket option. [ 192.638004][ T9861] Use struct sctp_assoc_value instead [ 192.670660][ T9865] program syz.4.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.680568][ T9865] blktrace: Concurrent blktraces are not allowed on sg0 [ 193.483008][ T9893] xt_hashlimit: max too large, truncated to 1048576 [ 193.489833][ T9893] xt_bpf: check failed: parse error [ 193.943038][ T9914] netlink: 'syz.2.2069': attribute type 5 has an invalid length. [ 194.147404][ T9924] xt_hashlimit: max too large, truncated to 1048576 [ 194.155066][ T9924] xt_bpf: check failed: parse error [ 194.671985][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2079'. [ 195.055930][ T9956] xt_hashlimit: max too large, truncated to 1048576 [ 195.064137][ T9956] xt_bpf: check failed: parse error [ 195.428304][ T9971] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2090'. [ 195.438879][ T9971] IPv6: sit3: Disabled Multicast RS [ 195.812078][ T9995] xt_hashlimit: max too large, truncated to 1048576 [ 195.820073][ T9995] xt_bpf: check failed: parse error [ 196.597526][T10030] loop2: detected capacity change from 0 to 1024 [ 196.611267][T10034] xt_hashlimit: max too large, truncated to 1048576 [ 196.618042][T10034] xt_bpf: check failed: parse error [ 196.622583][T10030] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 196.633917][T10030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.679116][ T29] audit: type=1400 audit(1719653084.695:1079): avc: denied { ioctl } for pid=10036 comm="syz.4.2111" path="socket:[29043]" dev="sockfs" ino=29043 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.738146][ T6285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.842785][T10041] netlink: 'syz.1.2113': attribute type 7 has an invalid length. [ 196.850600][T10041] netlink: 'syz.1.2113': attribute type 39 has an invalid length. [ 196.865614][T10041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=10041 comm=syz.1.2113 [ 197.170095][T10053] loop1: detected capacity change from 0 to 128 [ 197.294489][T10052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2118'. [ 197.457303][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'. [ 198.534028][T10099] loop2: detected capacity change from 0 to 512 [ 198.583444][T10099] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 198.595269][T10099] EXT4-fs (loop2): invalid journal inode [ 198.602563][T10099] EXT4-fs (loop2): can't get journal size [ 198.610315][T10099] EXT4-fs (loop2): orphan cleanup on readonly fs [ 198.619857][T10099] EXT4-fs (loop2): 1 truncate cleaned up [ 198.626826][T10099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 198.721888][ T6285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.805560][T10101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2134'. [ 198.843333][ T29] audit: type=1400 audit(1719653086.865:1080): avc: denied { accept } for pid=10106 comm="syz.0.2136" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.843744][T10109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2136'. [ 198.928427][T10112] xt_hashlimit: max too large, truncated to 1048576 [ 198.935204][T10112] xt_bpf: check failed: parse error [ 199.030146][T10117] loop3: detected capacity change from 0 to 256 [ 199.203085][T10126] sctp: [Deprecated]: syz.2.2142 (pid 10126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.203085][T10126] Use struct sctp_sack_info instead [ 199.220823][T10126] loop2: detected capacity change from 0 to 256 [ 199.241194][T10126] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2142'. [ 199.251280][ T29] audit: type=1400 audit(1719653087.275:1081): avc: denied { mounton } for pid=10124 comm="syz.2.2142" path="/root/syzkaller.32alW8/245/file1/file0" dev="loop2" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 199.471553][T10138] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2147'. [ 199.483048][ T29] audit: type=1326 audit(1719653087.505:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10137 comm="syz.3.2147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1182c01b99 code=0x0 [ 199.769662][T10148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10148 comm=syz.4.2149 [ 200.105646][T10164] xt_hashlimit: max too large, truncated to 1048576 [ 200.112495][T10164] xt_bpf: check failed: parse error [ 200.152740][ T29] audit: type=1326 audit(1719653088.175:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.2154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x0 [ 200.262025][T10168] loop0: detected capacity change from 0 to 2048 [ 200.302915][T10168] GPT:first_usable_lbas don't match. [ 200.308218][T10168] GPT:34 != 290 [ 200.311714][T10168] GPT: Use GNU Parted to correct GPT errors. [ 200.317794][T10168] loop0: p1 p2 p3 [ 200.367841][ T2782] GPT:first_usable_lbas don't match. [ 200.373245][ T2782] GPT:34 != 290 [ 200.376823][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 200.383064][ T2782] loop0: p1 p2 p3 [ 200.470870][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 200.560040][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2158'. [ 200.903929][T10196] loop4: detected capacity change from 0 to 1024 [ 200.923208][T10196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.981570][ T6063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.785771][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2179'. [ 201.963196][ T29] audit: type=1326 audit(1719653089.985:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10238 comm="syz.3.2182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1182c01b99 code=0x0 [ 202.074135][T10244] loop3: detected capacity change from 0 to 2048 [ 202.120867][T10244] GPT:first_usable_lbas don't match. [ 202.126226][T10244] GPT:34 != 290 [ 202.129727][T10244] GPT: Use GNU Parted to correct GPT errors. [ 202.135777][T10244] loop3: p1 p2 p3 [ 202.161483][T10247] loop1: detected capacity change from 0 to 128 [ 202.179874][T10247] FAT-fs (loop1): bogus number of directory entries (1) [ 202.186893][T10247] FAT-fs (loop1): Can't find a valid FAT filesystem [ 202.205690][ T2782] GPT:first_usable_lbas don't match. [ 202.211002][ T2782] GPT:34 != 290 [ 202.214465][ T2782] GPT: Use GNU Parted to correct GPT errors. [ 202.220642][ T2782] loop3: p1 p2 p3 [ 202.398340][ T6666] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 203.356521][T10284] loop1: detected capacity change from 0 to 2048 [ 203.399330][T10284] loop1: p1 p2 p3 [ 203.405073][T10284] loop1: p3 size 2164260864 extends beyond EOD, truncated [ 203.454955][ T2782] loop1: p1 p2 p3 [ 203.461322][ T2782] loop1: p3 size 2164260864 extends beyond EOD, truncated [ 203.472870][T10286] xt_hashlimit: max too large, truncated to 1048576 [ 203.480012][T10286] xt_bpf: check failed: parse error [ 203.563711][T10288] loop0: detected capacity change from 0 to 128 [ 204.040662][ T6648] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 204.556108][T10330] loop3: detected capacity change from 0 to 164 [ 204.771569][T10330] rock: directory entry would overflow storage [ 204.777858][T10330] rock: sig=0x5245, size=8, remaining=3 [ 205.165188][T10339] loop4: detected capacity change from 0 to 1024 [ 205.174965][ T29] audit: type=1400 audit(1719653093.175:1085): avc: denied { read } for pid=10337 comm="syz.1.2217" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.198381][ T29] audit: type=1400 audit(1719653093.175:1086): avc: denied { open } for pid=10337 comm="syz.1.2217" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.231938][T10339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.250511][ T29] audit: type=1400 audit(1719653093.275:1087): avc: denied { execute } for pid=10336 comm="syz.4.2218" path="/root/syzkaller.RoKDba/301/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 205.252668][T10339] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 372 with max blocks 8 with error 28 [ 205.287046][T10344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2219'. [ 205.287780][T10339] EXT4-fs (loop4): This should not happen!! Data will be lost [ 205.287780][T10339] [ 205.306425][T10339] EXT4-fs (loop4): Total free blocks count 0 [ 205.312495][T10339] EXT4-fs (loop4): Free/Dirty block details [ 205.312793][ T3159] IPVS: starting estimator thread 0... [ 205.318371][T10339] EXT4-fs (loop4): free_blocks=0 [ 205.318385][T10339] EXT4-fs (loop4): dirty_blocks=0 [ 205.318397][T10339] EXT4-fs (loop4): Block reservation details [ 205.318408][T10339] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 205.429206][T10345] IPVS: using max 2736 ests per chain, 136800 per kthread [ 205.455682][ T6063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.814290][T10367] loop2: detected capacity change from 0 to 512 [ 205.830053][T10367] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 205.839871][T10367] EXT4-fs (loop2): invalid journal inode [ 205.845729][T10367] EXT4-fs (loop2): can't get journal size [ 205.853040][T10367] EXT4-fs (loop2): orphan cleanup on readonly fs [ 205.861430][T10367] EXT4-fs (loop2): 1 truncate cleaned up [ 205.867706][T10367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 205.942991][T10370] loop4: detected capacity change from 0 to 2048 [ 205.961283][ T6285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.980954][T10370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.996119][ T29] audit: type=1400 audit(1719653094.015:1088): avc: denied { read write } for pid=10369 comm="syz.4.2228" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 206.018893][ T29] audit: type=1400 audit(1719653094.015:1089): avc: denied { open } for pid=10369 comm="syz.4.2228" path="/root/syzkaller.RoKDba/303/file0/file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 206.099179][ T6063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.226244][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2231'. [ 206.248077][T10381] loop1: detected capacity change from 0 to 736 [ 206.442258][T10388] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 206.857522][T10405] loop2: detected capacity change from 0 to 512 [ 206.876850][T10405] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 206.885646][T10405] EXT4-fs (loop2): invalid journal inode [ 206.891501][T10405] EXT4-fs (loop2): can't get journal size [ 206.900966][T10405] EXT4-fs (loop2): orphan cleanup on readonly fs [ 206.916493][T10405] EXT4-fs (loop2): 1 truncate cleaned up [ 206.923698][T10405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 207.004782][ T6285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.051461][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2245'. [ 207.066780][T10415] loop3: detected capacity change from 0 to 256 [ 207.083676][T10415] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.253229][T10427] loop4: detected capacity change from 0 to 2048 [ 207.314661][T10427] Alternate GPT is invalid, using primary GPT. [ 207.320998][T10427] loop4: p1 p2 p3 [ 207.360066][ T4038] printk: udevd: 505 output lines suppressed due to ratelimiting [ 208.084569][T10448] loop3: detected capacity change from 0 to 128 [ 208.149933][T10448] program syz.3.2254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.160571][T10448] blktrace: Concurrent blktraces are not allowed on sg0 [ 208.548855][T10463] loop4: detected capacity change from 0 to 512 [ 208.570001][T10463] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 208.582619][ T6648] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.590196][T10463] EXT4-fs (loop4): invalid journal inode [ 208.599955][T10463] EXT4-fs (loop4): can't get journal size [ 208.615075][T10463] EXT4-fs (loop4): orphan cleanup on readonly fs [ 208.622935][T10463] EXT4-fs (loop4): 1 truncate cleaned up [ 208.632538][T10463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 208.650517][ T6648] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.676251][T10451] chnl_net:caif_netlink_parms(): no params data found [ 208.703507][ T6648] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.728287][T10451] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.735478][T10451] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.743266][T10451] bridge_slave_0: entered allmulticast mode [ 208.750113][T10451] bridge_slave_0: entered promiscuous mode [ 208.759294][ T6648] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.770625][T10451] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.777733][T10451] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.784943][T10451] bridge_slave_1: entered allmulticast mode [ 208.785883][ T6063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.791493][T10451] bridge_slave_1: entered promiscuous mode [ 208.817246][T10451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.827565][T10451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.850043][T10451] team0: Port device team_slave_0 added [ 208.856642][T10451] team0: Port device team_slave_1 added [ 208.870386][T10473] loop0: detected capacity change from 0 to 2048 [ 208.883257][T10451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.890312][T10451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.916380][T10451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.916781][T10473] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 208.931168][T10451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.940359][T10451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.966339][T10451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.986926][ T6648] veth0: left allmulticast mode [ 208.991884][ T6648] veth0: left promiscuous mode [ 208.996703][ T6648] bridge0: port 3(veth0) entered disabled state [ 209.003638][ T6648] bridge_slave_1: left allmulticast mode [ 209.009299][ T6648] bridge_slave_1: left promiscuous mode [ 209.014994][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.024043][ T6648] bridge_slave_0: left allmulticast mode [ 209.029837][ T6648] bridge_slave_0: left promiscuous mode [ 209.035490][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.182515][ T6648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.193073][ T6648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.203287][ T6648] bond0 (unregistering): Released all slaves [ 209.242212][T10451] hsr_slave_0: entered promiscuous mode [ 209.248280][T10451] hsr_slave_1: entered promiscuous mode [ 209.283061][ T6648] hsr_slave_0: left promiscuous mode [ 209.288993][ T6648] hsr_slave_1: left promiscuous mode [ 209.295036][ T6648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.302532][ T6648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.311113][ T6648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.318563][ T6648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.331100][ T6648] veth1_macvtap: left promiscuous mode [ 209.336771][ T6648] veth0_macvtap: left promiscuous mode [ 209.342311][ T6648] veth1_vlan: left promiscuous mode [ 209.347542][ T6648] veth0_vlan: left promiscuous mode [ 209.443925][ T6648] team0 (unregistering): Port device team_slave_1 removed [ 209.455148][ T6648] team0 (unregistering): Port device team_slave_0 removed [ 209.968361][T10451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 209.981552][T10451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 209.993868][T10451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.007605][T10451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.078393][T10451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.098893][T10451] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.122920][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.130087][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.156815][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.163893][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.307221][T10451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.420047][T10451] veth0_vlan: entered promiscuous mode [ 210.428399][T10451] veth1_vlan: entered promiscuous mode [ 210.448839][T10451] veth0_macvtap: entered promiscuous mode [ 210.457179][T10451] veth1_macvtap: entered promiscuous mode [ 210.470839][T10451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.481324][T10451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.491301][T10451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.501791][T10451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.513044][T10451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.525413][T10451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.535925][T10451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.545829][T10451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.556323][T10451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.566198][T10451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.576616][T10451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.588542][T10451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.600552][T10451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.609423][T10451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.618186][T10451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.626985][T10451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.726935][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 211.047482][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2282'. [ 211.126880][T10562] xt_hashlimit: max too large, truncated to 1048576 [ 211.133807][T10562] xt_bpf: check failed: parse error [ 211.233926][ T29] audit: type=1400 audit(1719653099.255:1090): avc: denied { bind } for pid=10564 comm="syz.2.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.403562][T10577] loop1: detected capacity change from 0 to 512 [ 211.419995][T10577] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.2290: corrupted in-inode xattr: invalid ea_ino [ 211.422203][T10580] loop3: detected capacity change from 0 to 256 [ 211.435380][T10577] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.2290: couldn't read orphan inode 15 (err -117) [ 211.453938][T10577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.454466][T10580] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.499549][T10577] usb usb8: usbfs: process 10577 (syz.1.2290) did not claim interface 0 before use [ 211.513300][T10577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2290'. [ 211.522402][T10577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2290'. [ 211.552763][ T29] audit: type=1326 audit(1719653099.575:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 211.577321][ T29] audit: type=1326 audit(1719653099.575:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 211.600853][ T29] audit: type=1326 audit(1719653099.575:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 211.624354][ T29] audit: type=1326 audit(1719653099.575:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 211.647852][ T29] audit: type=1326 audit(1719653099.575:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 211.671330][ T29] audit: type=1326 audit(1719653099.575:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 211.694826][ T29] audit: type=1326 audit(1719653099.575:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 211.718450][ T29] audit: type=1326 audit(1719653099.575:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 211.742438][ T29] audit: type=1326 audit(1719653099.575:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 211.878272][ T3087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.432675][T10608] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2298'. [ 212.493367][T10611] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 212.816164][T10617] loop3: detected capacity change from 0 to 512 [ 212.834138][T10617] ext4: Unknown parameter 'noacl' [ 213.101345][ T6666] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 213.232573][T10633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=10633 comm=syz.0.2308 [ 213.428599][T10638] loop1: detected capacity change from 0 to 512 [ 213.671837][T10646] loop1: detected capacity change from 0 to 128 [ 213.721156][T10646] program syz.1.2314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.730793][T10646] blktrace: Concurrent blktraces are not allowed on sg0 [ 213.968486][T10656] openvswitch: netlink: ct_state flags 00001eac unsupported [ 214.146395][T10664] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2321'. [ 214.187498][T10667] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2320'. [ 214.566834][T10683] loop3: detected capacity change from 0 to 1764 [ 214.583578][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2328'. [ 214.594546][ T6666] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 214.898842][T10697] loop3: detected capacity change from 0 to 256 [ 214.914292][T10697] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.293464][T10706] loop2: detected capacity change from 0 to 512 [ 215.307697][T10706] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 215.566083][T10717] loop0: detected capacity change from 0 to 256 [ 215.684068][T10722] netlink: 1312 bytes leftover after parsing attributes in process `syz.0.2340'. [ 216.158766][T10748] loop2: detected capacity change from 0 to 1024 [ 216.177057][T10748] EXT4-fs: Ignoring removed bh option [ 216.185204][T10748] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 216.193449][T10748] System zones: 0-1, 3-12 [ 216.198298][T10748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.304674][ T6285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.471872][T10762] vlan0: entered promiscuous mode [ 216.481460][T10762] vlan0 (unregistering): left promiscuous mode [ 216.509419][T10763] loop2: detected capacity change from 0 to 512 [ 216.524943][T10763] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 216.534543][T10763] EXT4-fs (loop2): invalid journal inode [ 216.540866][T10763] EXT4-fs (loop2): can't get journal size [ 216.546832][T10763] EXT4-fs (loop2): orphan cleanup on readonly fs [ 216.553331][T10763] EXT4-fs (loop2): 1 truncate cleaned up [ 216.559338][T10763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 216.624117][ T6285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.701883][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 216.701896][ T29] audit: type=1326 audit(1719653104.725:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.1.2357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd3da43b99 code=0x0 [ 216.876934][T10777] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 216.959273][ T29] audit: type=1326 audit(1719653104.985:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 216.983089][ T29] audit: type=1326 audit(1719653104.985:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 217.006750][ T29] audit: type=1326 audit(1719653104.985:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 217.030427][ T29] audit: type=1326 audit(1719653104.985:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 217.200086][ T29] audit: type=1326 audit(1719653105.225:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 217.223643][ T29] audit: type=1326 audit(1719653105.225:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 217.247125][ T29] audit: type=1326 audit(1719653105.225:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 217.267862][T10789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2365'. [ 217.271594][ T29] audit: type=1326 audit(1719653105.225:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x7ffc0000 [ 217.503731][T10800] loop4: detected capacity change from 0 to 512 [ 217.519694][T10800] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 217.528595][T10800] EXT4-fs (loop4): invalid journal inode [ 217.534290][T10800] EXT4-fs (loop4): can't get journal size [ 217.541675][T10800] EXT4-fs (loop4): orphan cleanup on readonly fs [ 217.549509][T10800] EXT4-fs (loop4): 1 truncate cleaned up [ 217.556229][T10800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 217.645026][ T6063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.725382][T10809] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 217.771950][ T29] audit: type=1326 audit(1719653105.785:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3da43b99 code=0x7ffc0000 [ 217.871393][T10814] capability: warning: `syz.4.2376' uses 32-bit capabilities (legacy support in use) [ 218.400019][T10839] loop0: detected capacity change from 0 to 512 [ 218.419676][T10839] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 218.437240][T10839] EXT4-fs (loop0): invalid journal inode [ 218.453796][T10841] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 218.468875][T10839] EXT4-fs (loop0): can't get journal size [ 218.485855][T10839] EXT4-fs (loop0): orphan cleanup on readonly fs [ 218.493390][T10839] EXT4-fs (loop0): 1 truncate cleaned up [ 218.499685][T10839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 218.566455][ T5072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.780425][T10856] loop0: detected capacity change from 0 to 512 [ 218.788585][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'. [ 218.810621][T10856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.824188][T10856] ext4 filesystem being mounted at /root/syzkaller.6m9PbK/346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.843250][T10856] netlink: 'syz.0.2392': attribute type 5 has an invalid length. [ 218.910652][ T5072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.248242][T10871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2399'. [ 219.273389][T10876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2399'. [ 219.431331][T10882] loop2: detected capacity change from 0 to 512 [ 219.454640][T10882] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 219.463593][T10882] EXT4-fs (loop2): invalid journal inode [ 219.470345][T10882] EXT4-fs (loop2): can't get journal size [ 219.478453][T10882] EXT4-fs (loop2): orphan cleanup on readonly fs [ 219.485192][T10882] EXT4-fs (loop2): 1 truncate cleaned up [ 219.492612][T10882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 219.517724][T10887] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 219.600902][ T6285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.815967][T10903] loop3: detected capacity change from 0 to 2048 [ 219.872383][T10903] GPT:first_usable_lbas don't match. [ 219.877891][T10903] GPT:34 != 290 [ 219.881385][T10903] GPT: Use GNU Parted to correct GPT errors. [ 219.887631][T10903] loop3: p1 p2 p3 [ 219.965857][T10909] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 220.124370][T10914] loop4: detected capacity change from 0 to 128 [ 220.347059][T10920] program syz.2.2417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.606409][T10927] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 220.663426][T10929] loop0: detected capacity change from 0 to 512 [ 220.688727][T10929] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 220.702533][T10929] EXT4-fs (loop0): invalid journal inode [ 220.708468][T10929] EXT4-fs (loop0): can't get journal size [ 220.715548][T10929] EXT4-fs (loop0): orphan cleanup on readonly fs [ 220.722288][T10929] EXT4-fs (loop0): 1 truncate cleaned up [ 220.736384][T10929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 220.862141][ T5072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.928236][T10935] loop2: detected capacity change from 0 to 512 [ 220.944074][T10935] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 221.227167][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2425'. [ 221.279424][T10944] loop0: detected capacity change from 0 to 512 [ 221.300899][T10944] EXT4-fs (loop0): orphan cleanup on readonly fs [ 221.310270][T10944] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.2427: corrupted in-inode xattr: e_value size too large [ 221.325200][T10944] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.2427: couldn't read orphan inode 15 (err -117) [ 221.340979][T10944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.405539][ T5072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.480308][T10967] tc_dump_action: action bad kind [ 221.695529][T10976] netlink: 'syz.1.2431': attribute type 21 has an invalid length. [ 221.703651][T10976] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2431'. [ 221.712785][T10976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2431'. [ 221.806915][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 221.806928][ T29] audit: type=1326 audit(1719653109.825:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10981 comm="syz.0.2433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f4507161be7 code=0x0 [ 221.873273][T10983] loop0: detected capacity change from 0 to 2048 [ 221.920928][T10986] loop2: detected capacity change from 0 to 512 [ 221.921821][T10983] GPT:first_usable_lbas don't match. [ 221.932629][T10983] GPT:34 != 290 [ 221.936159][T10983] GPT: Use GNU Parted to correct GPT errors. [ 221.939788][T10987] loop1: detected capacity change from 0 to 164 [ 221.942291][T10983] loop0: p1 p2 p3 [ 221.952496][T10986] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 221.961496][T10986] EXT4-fs (loop2): invalid journal inode [ 221.967251][T10986] EXT4-fs (loop2): can't get journal size [ 221.973439][T10986] EXT4-fs (loop2): orphan cleanup on readonly fs [ 221.980027][T10986] EXT4-fs (loop2): 1 truncate cleaned up [ 221.986213][T10986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 222.048944][ T6285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.102687][ T29] audit: type=1400 audit(1719653110.125:1199): avc: denied { setopt } for pid=10992 comm="syz.3.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 222.297507][T11004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2438'. [ 222.844664][ T29] audit: type=1326 audit(1719653110.865:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09989d1b99 code=0x7ffc0000 [ 222.868408][ T29] audit: type=1326 audit(1719653110.865:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09989d1b99 code=0x7ffc0000 [ 222.892389][ T29] audit: type=1326 audit(1719653110.865:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09989d1b99 code=0x7ffc0000 [ 222.916060][ T29] audit: type=1326 audit(1719653110.865:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09989d1b99 code=0x7ffc0000 [ 222.939628][ T29] audit: type=1326 audit(1719653110.865:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09989d1b99 code=0x7ffc0000 [ 222.963155][ T29] audit: type=1326 audit(1719653110.865:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09989d1b99 code=0x7ffc0000 [ 222.986661][ T29] audit: type=1326 audit(1719653110.865:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09989d1b99 code=0x7ffc0000 [ 222.993057][T11020] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 223.010134][ T29] audit: type=1326 audit(1719653110.865:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f09989d1b99 code=0x7ffc0000 [ 223.451925][T11029] loop0: detected capacity change from 0 to 512 [ 223.468611][T11029] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 223.478098][T11029] EXT4-fs (loop0): invalid journal inode [ 223.484828][T11029] EXT4-fs (loop0): can't get journal size [ 223.491464][T11029] EXT4-fs (loop0): orphan cleanup on readonly fs [ 223.498025][T11029] EXT4-fs (loop0): 1 truncate cleaned up [ 223.505061][T11029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 223.648279][ T5072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.792359][T11040] loop1: detected capacity change from 0 to 128 [ 223.901443][T11047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2456'. [ 223.935481][T11050] loop0: detected capacity change from 0 to 2048 [ 223.983919][T11050] GPT:first_usable_lbas don't match. [ 223.989260][T11050] GPT:34 != 290 [ 223.992734][T11050] GPT: Use GNU Parted to correct GPT errors. [ 223.998781][T11050] loop0: p1 p2 p3 [ 224.255318][T11059] program syz.2.2460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.497863][T11067] loop3: detected capacity change from 0 to 2048 [ 224.552083][T11067] GPT:first_usable_lbas don't match. [ 224.557554][T11067] GPT:34 != 290 [ 224.561205][T11067] GPT: Use GNU Parted to correct GPT errors. [ 224.567238][T11067] loop3: p1 p2 p3 [ 225.377869][T11099] program syz.0.2473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.500333][T11106] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2476'. [ 225.624540][T11112] loop4: detected capacity change from 0 to 2048 [ 225.691011][T11112] GPT:first_usable_lbas don't match. [ 225.696428][T11112] GPT:34 != 290 [ 225.699915][T11112] GPT: Use GNU Parted to correct GPT errors. [ 225.705946][T11112] loop4: p1 p2 p3 [ 225.987873][T11125] xt_recent: hitcount (14045) is larger than allowed maximum (255) [ 226.058094][T11128] loop0: detected capacity change from 0 to 2048 [ 226.135785][T11128] loop0: unable to read partition table [ 226.141490][T11128] loop0: partition table beyond EOD, truncated [ 226.147783][T11128] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 226.220246][T11133] loop3: detected capacity change from 0 to 2048 [ 226.273340][T11133] GPT:first_usable_lbas don't match. [ 226.278659][T11133] GPT:34 != 290 [ 226.282142][T11133] GPT: Use GNU Parted to correct GPT errors. [ 226.288260][T11133] loop3: p1 p2 p3 [ 226.594888][T11139] netlink: 'syz.4.2488': attribute type 12 has an invalid length. [ 226.644395][T11141] program syz.2.2489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.309327][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 227.309340][ T29] audit: type=1326 audit(1719653115.335:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11161 comm="syz.1.2498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd3da43b99 code=0x0 [ 227.329255][T11166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2497'. [ 227.383086][T11168] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2495'. [ 227.447800][ T29] audit: type=1400 audit(1719653115.465:1277): avc: denied { create } for pid=11171 comm="syz.4.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 227.468355][ T29] audit: type=1400 audit(1719653115.465:1278): avc: denied { setopt } for pid=11171 comm="syz.4.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 227.656585][ T29] audit: type=1326 audit(1719653115.675:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.4.2503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72643f4b99 code=0x0 [ 227.775774][T11181] tipc: Started in network mode [ 227.780896][T11181] tipc: Node identity ac141428, cluster identity 4711 [ 227.787938][T11181] tipc: Enabled bearer , priority 10 [ 227.939415][ T29] audit: type=1326 audit(1719653115.965:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.0.2505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x0 [ 228.049144][T11189] loop0: detected capacity change from 0 to 2048 [ 228.093226][T11189] GPT:first_usable_lbas don't match. [ 228.098577][T11189] GPT:34 != 290 [ 228.102064][T11189] GPT: Use GNU Parted to correct GPT errors. [ 228.108165][T11189] loop0: p1 p2 p3 [ 228.281794][T11198] loop2: detected capacity change from 0 to 1024 [ 228.285833][T11199] netlink: 'syz.3.2509': attribute type 29 has an invalid length. [ 228.296330][T11199] netlink: 'syz.3.2509': attribute type 29 has an invalid length. [ 228.304979][T11199] netlink: 'syz.3.2509': attribute type 29 has an invalid length. [ 228.313578][T11199] netlink: 'syz.3.2509': attribute type 29 has an invalid length. [ 228.316004][T11198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.508599][ T6285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.559733][T11209] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2512'. [ 228.789978][ T3161] tipc: Node number set to 2886997032 [ 228.858901][T11223] program syz.4.2517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.923198][T11232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2518'. [ 229.239888][T11249] tmpfs: Bad value for 'mpol' [ 229.354509][T11255] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2526'. [ 229.692550][ T29] audit: type=1326 audit(1719653117.715:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.3.2531" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09989d1b99 code=0x0 [ 229.744279][ T29] audit: type=1326 audit(1719653117.765:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.4.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72643f4b99 code=0x7ffc0000 [ 229.768340][ T29] audit: type=1326 audit(1719653117.765:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.4.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72643f4b99 code=0x7ffc0000 [ 229.791893][ T29] audit: type=1326 audit(1719653117.765:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.4.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f72643f34d7 code=0x7ffc0000 [ 229.815463][ T29] audit: type=1326 audit(1719653117.775:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.4.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72643f4b99 code=0x7ffc0000 [ 229.855250][T11272] loop3: detected capacity change from 0 to 2048 [ 229.911551][T11272] GPT:first_usable_lbas don't match. [ 229.916908][T11272] GPT:34 != 290 [ 229.920640][T11272] GPT: Use GNU Parted to correct GPT errors. [ 229.926865][T11272] loop3: p1 p2 p3 [ 230.231964][T11290] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2539'. [ 230.558653][T11306] loop2: detected capacity change from 0 to 136 [ 230.565084][T11306] iso9660: Unknown parameter './file0' [ 230.626362][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2544'. [ 230.756492][T11315] tmpfs: Bad value for 'mpol' [ 231.082585][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2551'. [ 231.124378][T11333] loop3: detected capacity change from 0 to 512 [ 231.142115][T11333] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 231.153397][T11333] EXT4-fs (loop3): invalid journal inode [ 231.159742][T11333] EXT4-fs (loop3): can't get journal size [ 231.165759][T11333] EXT4-fs (loop3): orphan cleanup on readonly fs [ 231.172242][T11322] chnl_net:caif_netlink_parms(): no params data found [ 231.175321][T11333] EXT4-fs (loop3): 1 truncate cleaned up [ 231.185222][T11333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 231.215787][T11322] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.223051][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.231072][T11322] bridge_slave_0: entered allmulticast mode [ 231.238801][T11322] bridge_slave_0: entered promiscuous mode [ 231.245724][T11322] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.252825][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.260042][T11322] bridge_slave_1: entered allmulticast mode [ 231.266563][T11322] bridge_slave_1: entered promiscuous mode [ 231.285751][T11322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.296116][T11322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.314672][T10451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.333049][T11322] team0: Port device team_slave_0 added [ 231.339449][T11322] team0: Port device team_slave_1 added [ 231.355269][T11322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.362265][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.388190][T11322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.399973][T11322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.406993][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.432891][T11322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.459745][T11322] hsr_slave_0: entered promiscuous mode [ 231.465916][T11322] hsr_slave_1: entered promiscuous mode [ 231.471749][T11322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.479378][T11322] Cannot create hsr debugfs directory [ 231.544994][T11322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.576813][T11345] loop3: detected capacity change from 0 to 128 [ 231.599569][T11345] EXT4-fs: Mount option(s) incompatible with ext3 [ 231.601190][T11322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.651697][T11322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.708929][T11322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.735852][T11351] loop0: detected capacity change from 0 to 2048 [ 231.788896][T11322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.791369][T11351] GPT:first_usable_lbas don't match. [ 231.800914][T11351] GPT:34 != 290 [ 231.804367][T11351] GPT: Use GNU Parted to correct GPT errors. [ 231.810500][T11351] loop0: p1 p2 p3 [ 231.816687][T11322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.825705][T11322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.834422][T11322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.880643][T11322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.893484][T11322] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.905539][ T3144] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.912603][ T3144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.921958][ T3144] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.929004][ T3144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.944826][T11356] tun0: tun_chr_ioctl cmd 1074025675 [ 231.950224][T11356] tun0: persist disabled [ 231.972182][T11322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.982655][T11322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.044532][T11322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.117835][T11322] veth0_vlan: entered promiscuous mode [ 232.127446][T11322] veth1_vlan: entered promiscuous mode [ 232.147700][T11322] veth0_macvtap: entered promiscuous mode [ 232.156347][T11322] veth1_macvtap: entered promiscuous mode [ 232.167580][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.178050][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.188086][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.198694][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.208588][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.219035][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.229978][T11322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.241940][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.252561][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.262511][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.272965][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.282786][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.293286][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.303119][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.313580][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.325284][T11322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.336206][T11322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.345066][T11322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.353823][T11322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.362533][T11322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.411681][T11378] program syz.4.2564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.588950][T11384] loop3: detected capacity change from 0 to 512 [ 232.623226][T11384] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 232.632409][T11384] EXT4-fs (loop3): invalid journal inode [ 232.638243][T11384] EXT4-fs (loop3): can't get journal size [ 232.644665][T11384] EXT4-fs (loop3): orphan cleanup on readonly fs [ 232.652617][T11384] EXT4-fs (loop3): 1 truncate cleaned up [ 232.658565][T11384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 232.741624][T10451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.363778][T11434] tmpfs: Bad value for 'mpol' [ 233.369381][T11432] program syz.0.2580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.391419][T11436] loop3: detected capacity change from 0 to 512 [ 233.407946][T11436] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 233.417453][T11436] EXT4-fs (loop3): invalid journal inode [ 233.424013][T11436] EXT4-fs (loop3): can't get journal size [ 233.430248][T11436] EXT4-fs (loop3): orphan cleanup on readonly fs [ 233.436864][T11436] EXT4-fs (loop3): 1 truncate cleaned up [ 233.442960][T11436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 233.462387][T11438] netlink: 'syz.2.2582': attribute type 3 has an invalid length. [ 233.512883][T10451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.716002][T11455] loop3: detected capacity change from 0 to 512 [ 233.731295][T11455] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.742759][T11455] EXT4-fs (loop3): 1 orphan inode deleted [ 233.748497][T11455] EXT4-fs (loop3): 1 truncate cleaned up [ 233.754416][T11455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.770068][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2585'. [ 233.778986][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2585'. [ 233.787953][T11455] ip_vti0: Master is either lo or non-ether device [ 233.803806][T11455] EXT4-fs error (device loop3): ext4_lookup:1854: inode #15: comm syz.3.2585: iget: bad extra_isize 46 (inode size 256) [ 233.817436][T11455] EXT4-fs (loop3): Remounting filesystem read-only [ 233.853526][T10451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.895589][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 233.895602][ T29] audit: type=1326 audit(1719653121.915:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11459 comm="syz.0.2588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f450716ab99 code=0x0 [ 234.673521][T11477] program syz.2.2594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.730339][T11484] loop4: detected capacity change from 0 to 512 [ 234.743840][T11484] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 234.752647][T11484] EXT4-fs (loop4): invalid journal inode [ 234.758350][T11484] EXT4-fs (loop4): can't get journal size [ 234.765238][T11484] EXT4-fs (loop4): orphan cleanup on readonly fs [ 234.771752][T11484] EXT4-fs (loop4): 1 truncate cleaned up [ 234.777881][T11484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 234.840521][ T6063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.041203][T11491] netlink: 'syz.2.2597': attribute type 4 has an invalid length. [ 235.188599][T11499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2600'. [ 235.293138][T11502] xt_hashlimit: max too large, truncated to 1048576 [ 235.299826][T11502] xt_hashlimit: overflow, try lower: 0/0 [ 235.515038][ T29] audit: type=1326 audit(1719653123.426:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11515 comm="syz.3.2606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09989d1b99 code=0x0 [ 235.601846][T11519] loop3: detected capacity change from 0 to 2048 [ 235.652770][T11519] GPT:first_usable_lbas don't match. [ 235.658165][T11519] GPT:34 != 290 [ 235.661650][T11519] GPT: Use GNU Parted to correct GPT errors. [ 235.667755][T11519] loop3: p1 p2 p3 [ 235.711948][T11520] loop4: detected capacity change from 0 to 164 [ 235.730438][T11520] rock: directory entry would overflow storage [ 235.736631][T11520] rock: sig=0x5245, size=8, remaining=3 [ 235.766242][T11525] loop1: detected capacity change from 0 to 128 [ 236.096665][T11540] program syz.2.2615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.202324][T11544] xt_hashlimit: max too large, truncated to 1048576 [ 236.209776][T11544] xt_bpf: check failed: parse error [ 236.386443][T11550] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 236.480553][T11556] loop1: detected capacity change from 0 to 164 [ 236.495806][T11556] rock: directory entry would overflow storage [ 236.502158][T11556] rock: sig=0x5245, size=8, remaining=3 [ 236.641322][T11560] loop2: detected capacity change from 0 to 512 [ 236.659866][T11560] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 236.669746][T11560] EXT4-fs (loop2): invalid journal inode [ 236.675495][T11560] EXT4-fs (loop2): can't get journal size [ 236.681495][T11560] EXT4-fs (loop2): orphan cleanup on readonly fs [ 236.688037][T11560] EXT4-fs (loop2): 1 truncate cleaned up [ 236.695449][T11560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 236.752921][T11322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.850106][T11568] loop1: detected capacity change from 0 to 512 [ 236.868016][T11568] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 256.052420][ T6666] bond0: left allmulticast mode [ 256.057331][ T6666] bond_slave_0: left allmulticast mode [ 256.062856][ T6666] bond_slave_1: left allmulticast mode [ 256.068526][ T6666] bridge0: port 3(bond0) entered disabled state [ 256.077344][ T6666] bridge_slave_1: left allmulticast mode [ 256.083039][ T6666] bridge_slave_1: left promiscuous mode [ 256.088755][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.100512][ T6666] bridge_slave_0: left allmulticast mode [ 256.106299][ T6666] bridge_slave_0: left promiscuous mode [ 256.112011][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.249142][ T6666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.258921][ T6666] bond_slave_0: left promiscuous mode [ 256.265728][ T6666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.275273][ T6666] bond_slave_1: left promiscuous mode [ 256.282022][ T6666] bond0 (unregistering): Released all slaves [ 256.369167][ T6666] hsr_slave_0: left promiscuous mode [ 256.374830][ T6666] hsr_slave_1: left promiscuous mode [ 256.381049][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.388503][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.396137][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.403646][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.413072][ T6666] veth1_macvtap: left promiscuous mode [ 256.418547][ T6666] veth0_macvtap: left promiscuous mode [ 256.424073][ T6666] veth1_vlan: left promiscuous mode [ 256.429323][ T6666] veth0_vlan: left promiscuous mode [ 256.481666][ T6666] pim6reg (unregistering): left allmulticast mode [ 256.521172][ T6666] team0 (unregistering): Port device team_slave_1 removed [ 256.532080][ T6666] team0 (unregistering): Port device team_slave_0 removed [ 306.194655][ T7848] ================================================================== [ 306.202757][ T7848] BUG: KCSAN: data-race in relay_switch_subbuf / relay_switch_subbuf [ 306.210819][ T7848] [ 306.213122][ T7848] write to 0xffff888112e6ae38 of 8 bytes by task 2745 on cpu 0: [ 306.220744][ T7848] relay_switch_subbuf+0x39e/0x3b0 [ 306.225877][ T7848] __blk_add_trace+0x66a/0x730 [ 306.230631][ T7848] blk_add_trace_unplug+0x76/0xb0 [ 306.235644][ T7848] blk_mq_flush_plug_list+0xd17/0xde0 [ 306.241003][ T7848] __blk_flush_plug+0x216/0x290 [ 306.245843][ T7848] blk_finish_plug+0x48/0x70 [ 306.250431][ T7848] jbd2_journal_commit_transaction+0x1bc5/0x33e0 [ 306.256760][ T7848] kjournald2+0x243/0x430 [ 306.261083][ T7848] kthread+0x1d1/0x210 [ 306.265231][ T7848] ret_from_fork+0x4b/0x60 [ 306.269635][ T7848] ret_from_fork_asm+0x1a/0x30 [ 306.274402][ T7848] [ 306.276726][ T7848] write to 0xffff888112e6ae38 of 8 bytes by task 7848 on cpu 1: [ 306.284336][ T7848] relay_switch_subbuf+0x39e/0x3b0 [ 306.289441][ T7848] __blk_add_trace+0x66a/0x730 [ 306.294200][ T7848] blk_add_trace_unplug+0x76/0xb0 [ 306.299214][ T7848] blk_mq_flush_plug_list+0xd17/0xde0 [ 306.304588][ T7848] __blk_flush_plug+0x216/0x290 [ 306.309428][ T7848] blk_finish_plug+0x48/0x70 [ 306.314008][ T7848] ext4_do_writepages+0x1bd0/0x2110 [ 306.319223][ T7848] ext4_writepages+0x159/0x2e0 [ 306.323988][ T7848] do_writepages+0x1d8/0x480 [ 306.328570][ T7848] filemap_fdatawrite_wbc+0xdb/0x100 [ 306.333848][ T7848] file_write_and_wait_range+0xc8/0x170 [ 306.339404][ T7848] ext4_sync_file+0x134/0x6c0 [ 306.344100][ T7848] vfs_fsync_range+0x122/0x140 [ 306.348845][ T7848] ext4_buffered_write_iter+0x338/0x380 [ 306.354399][ T7848] ext4_file_write_iter+0x29f/0xe30 [ 306.359588][ T7848] __kernel_write_iter+0x24f/0x4d0 [ 306.364685][ T7848] dump_user_range+0x3a7/0x550 [ 306.369453][ T7848] elf_core_dump+0x1aeb/0x1c30 [ 306.374213][ T7848] do_coredump+0xff6/0x1860 [ 306.378710][ T7848] get_signal+0xdc1/0x1080 [ 306.383115][ T7848] arch_do_signal_or_restart+0x95/0x4b0 [ 306.388665][ T7848] irqentry_exit_to_user_mode+0x94/0x130 [ 306.394329][ T7848] irqentry_exit+0x12/0x50 [ 306.398767][ T7848] asm_exc_page_fault+0x26/0x30 [ 306.403602][ T7848] [ 306.405908][ T7848] value changed: 0x0000000000000030 -> 0x0000000000000038 [ 306.413008][ T7848] [ 306.415326][ T7848] Reported by Kernel Concurrency Sanitizer on: [ 306.421486][ T7848] CPU: 1 PID: 7848 Comm: syz.4.1357 Not tainted 6.10.0-rc5-syzkaller-00253-gde0a9f448633 #0 [ 306.431554][ T7848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 306.441634][ T7848] ================================================================== [ 309.631903][ T6666] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.694708][ T6666] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.759587][ T6666] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.814037][ T6666] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.888191][ T6666] veth0: left allmulticast mode [ 309.893044][ T6666] veth0: left promiscuous mode [ 309.897886][ T6666] bridge0: port 3(veth0) entered disabled state [ 309.904588][ T6666] bridge_slave_1: left allmulticast mode [ 309.910261][ T6666] bridge_slave_1: left promiscuous mode [ 309.915895][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.923540][ T6666] bridge_slave_0: left allmulticast mode [ 309.929215][ T6666] bridge_slave_0: left promiscuous mode [ 309.934952][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.147851][ T6666] bond0 (unregistering): Released all slaves [ 310.246468][ T6666] hsr_slave_0: left promiscuous mode [ 310.252268][ T6666] hsr_slave_1: left promiscuous mode [ 310.257957][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.265372][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.272867][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.280352][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.289573][ T6666] veth1_macvtap: left promiscuous mode [ 310.295084][ T6666] veth0_macvtap: left promiscuous mode [ 310.300691][ T6666] veth1_vlan: left promiscuous mode [ 310.305890][ T6666] veth0_vlan: left promiscuous mode [ 310.385145][ T6666] team0 (unregistering): Port device team_slave_1 removed [ 310.395432][ T6666] team0 (unregistering): Port device team_slave_0 removed [ 310.691630][ T6666] IPVS: stop unused estimator thread 0... [ 313.913241][ T6666] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.995852][ T6666] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.060208][ T6666] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.103908][ T6666] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.167030][ T6666] team0: left allmulticast mode [ 314.171988][ T6666] team_slave_0: left allmulticast mode [ 314.177446][ T6666] team_slave_1: left allmulticast mode [ 314.182908][ T6666] team0: left promiscuous mode [ 314.187677][ T6666] team_slave_0: left promiscuous mode [ 314.193103][ T6666] team_slave_1: left promiscuous mode [ 314.198718][ T6666] bridge0: port 4(team0) entered disabled state [ 314.205539][ T6666] veth0: left allmulticast mode [ 314.210496][ T6666] veth0: left promiscuous mode [ 314.215324][ T6666] bridge0: port 3(veth0) entered disabled state [ 314.222120][ T6666] bridge_slave_1: left allmulticast mode [ 314.227748][ T6666] bridge_slave_1: left promiscuous mode [ 314.233383][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.241064][ T6666] O3ãc¤±: left allmulticast mode [ 314.246034][ T6666] O3ãc¤±: left promiscuous mode [ 314.250903][ T6666] bridge0: port 1(O3ãc¤±) entered disabled state [ 314.471278][ T6666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.481596][ T6666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.491348][ T6666] bond0 (unregistering): Released all slaves [ 314.524419][ T6666] tipc: Disabling bearer [ 314.529504][ T6666] tipc: Left network mode [ 314.590720][ T6666] hsr_slave_0: left promiscuous mode [ 314.596353][ T6666] hsr_slave_1: left promiscuous mode [ 314.602204][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.609598][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.617044][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.624495][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.633570][ T6666] dummy0: left promiscuous mode [ 314.638440][ T6666] veth1_macvtap: left promiscuous mode [ 314.644031][ T6666] veth0_macvtap: left promiscuous mode [ 314.649520][ T6666] veth1_vlan: left promiscuous mode [ 314.654739][ T6666] veth0_vlan: left promiscuous mode [ 314.701740][ T6666] pim6reg (unregistering): left allmulticast mode [ 314.737075][ T6666] team0 (unregistering): Port device team_slave_1 removed [ 314.747145][ T6666] team0 (unregistering): Port device team_slave_0 removed