last executing test programs: 26.086749677s ago: executing program 1 (id=1396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, r3, {0x0, 0x11}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0xfffe, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 26.053680188s ago: executing program 1 (id=1397): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4044d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x7, 0x9, 0xd, 0xf18, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) socket$inet6(0xa, 0x2, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 26.005050789s ago: executing program 1 (id=1398): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x4) 25.860523552s ago: executing program 1 (id=1401): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 25.817999532s ago: executing program 1 (id=1404): syz_emit_ethernet(0x2e, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$eJzs3U9vHGcZAPBn1rvBTpzaBQ5QiVJoIYkgu3FNW4tDKRKCUyWg3IuxN5aVtdfyrtvYqrAjPgASQoDECS5ckPgASKgSF44IqRKcQYBACFI4cIBONbuztmPvvzRrr2v/ftJ43nnnnXmed5OZndkZzQRwYT0VES9FxDtpmt6IiJm8vpAPsdcesnZv339jKRuSSNNX/plEktd11pXk4yv5YpMR8fWvRHwrOR63sb1zZ7FWq27m05Xm2kalsb1zc3VtcaW6Ul2fn597fuGFhecWbvXIvPBQ/bwaES9+6a8/+O7Pvvzirz77+p9e/fv1b2dpTefzD/fjIRX7zWx3vdT6LA4vsPkeg51FxVYPc1PdWkwcq7l3wjkBANBddhT9wYj4ZETciJmY6H84CwAAALwPpV+Yjv8lEWl3l3rUAwAAAO8jhdY9sEmhnN8LMB2FQrncvof3w3G5UKs3mp+5Xd9aX27fKzsbpcLt1Vr1Vn6v8GyUkmx6rlU+mH72yPR8RDweEd+fmWpNl5fqteVx//gBAAAAF8SVI+f//5lpn/937I4zOQAAAGB0ZsedAAAAAHDihj3/v3zCeQAAAAAnx/V/AAAAONe++vLL2ZB23n+9/Nr21p36azeXq4075bWtpfJSfXOjvFKvr7Se2bc2aH21en3jc7G+dbfSrDaalcb2ZKzVt9abr64+8ApsAAAA4BQ9/vE3/5BExN7np1pD5tJwiw7ZDDirivulJB932az/+Fh7/JdTSgo4FRPjTgAYm+K4EwDGpjTuBICxSwbM73nzzm/z8SdGmw8AADB61z7a+/p/oe+Se/1nA2eejRguLtf/4eJqXf8f9k5eBwtwrpQGHQH03eZ3R5wNMA6PfP1/oDR9qIQAAICRm24NSaFc7EwXCuVyxNXWawFKye3VWvVWRDwWEb+fKX0gm55rtUwGnjMAAAAAAAAAAAAAAAAAAAAAAAAAAG1pmkQKAAAAnGsRhb8lv24/y//azDPTR38fuJT8dybyV4S+/uNXfnh3sdncnMvq/7Vf3/xRXv/sOH7BAAAAgAthwAv8H9Q5T++cxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKL19/42lznCacf/xxYiY7Ra/GJOt8WSUIuLyv5MoHlouiYiJEcSfyv58pFv8JEtrP2S3+FMjiL93r2/82Ms/hW7xr4wgPlxkb2b7n5e6bX+FeKo17r79FSMemH6veu//Yn//N9Fj+7/66cZQMZ546xeVnvHvRTxRPBZ/N4vQiZ/0iP/0kH385jd2dnrNS38Sca3r90/SaZLtIaPSXNuoNLZ3bq6uLa5UV6rr8/Nzzy+8sPDcwq3K7dVaNf/bNcb3PvbLd/r1/3KP+LMD+v/MsbVd6hrj/2/dvf+hdrHULf71p7vE/81P8xbH4xfy775P5eVs/rVOea9dPuzJn//uyX79X+7R/0H//td7rfSIG1/7zp+HbAoAnILG9s6dxVqtunluC9lZ+pCNs6OzM5HzOAqd/xFnJZ/TKOw++nomDmrSNE2zT/ARVpjEWfhYWoWx7pYAAIATcHDQP+5MAAAAAAAAAAAAAAAAAAAA4OI6jceJHQk5eVBMRvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAkXg3AAD//wuK1X0=") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 25.502624309s ago: executing program 1 (id=1422): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/212, 0xd4}], 0x1, 0x1b, 0x0) 25.46448766s ago: executing program 32 (id=1422): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/212, 0xd4}], 0x1, 0x1b, 0x0) 2.07741391s ago: executing program 4 (id=2089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.237920826s ago: executing program 4 (id=2106): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) modify_ldt$write(0x1, &(0x7f0000000640)={0x1, 0x0, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) pipe2(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mlock2(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) 1.167354427s ago: executing program 4 (id=2111): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r0 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) r3 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.093808089s ago: executing program 2 (id=2113): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.03726247s ago: executing program 2 (id=2115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) 968.121091ms ago: executing program 2 (id=2116): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000e2ff0f0000180012800e0001007769726567756172640000000400028008000a00", @ANYRES8=r0], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 946.547961ms ago: executing program 4 (id=2117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) getrusage(0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 905.221373ms ago: executing program 4 (id=2118): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) 786.430865ms ago: executing program 0 (id=2121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[], 0x0) 761.676815ms ago: executing program 2 (id=2123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 743.829805ms ago: executing program 2 (id=2124): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 711.305446ms ago: executing program 0 (id=2126): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 710.885676ms ago: executing program 2 (id=2127): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 682.267067ms ago: executing program 0 (id=2129): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 611.549778ms ago: executing program 0 (id=2130): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 610.641658ms ago: executing program 5 (id=2131): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 610.277428ms ago: executing program 0 (id=2132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) 589.518498ms ago: executing program 0 (id=2133): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x10}, @timestamp, @timestamp, @timestamp, @mss={0x2, 0x2}, @sack_perm, @sack_perm, @mss={0x2, 0x6}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 507.4446ms ago: executing program 5 (id=2135): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x802}, 0x8080) 489.96849ms ago: executing program 5 (id=2136): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mknodat(0xffffffffffffffff, 0x0, 0x200, 0x81dc) 470.206631ms ago: executing program 3 (id=2137): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000be04000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x80000) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) 468.663801ms ago: executing program 5 (id=2138): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2c, 0x4, 0x4) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x18) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) 381.698682ms ago: executing program 5 (id=2140): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r5 = dup2(r4, r3) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r5, &(0x7f0000008800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008a40)=ANY=[], 0x10b0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="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", 0x5dd}], 0x1}}], 0x6, 0x20004095) 381.191923ms ago: executing program 3 (id=2141): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x5d6c}, 0x18) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00') unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x0) 367.110523ms ago: executing program 3 (id=2142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084484) 53.715439ms ago: executing program 4 (id=2143): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x3c, 0x1, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 52.958829ms ago: executing program 5 (id=2153): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYRES32, @ANYBLOB="00e64f173a"], 0x50) 52.698449ms ago: executing program 3 (id=2144): openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 0s ago: executing program 3 (id=2145): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x104020, 0x7, 0x2, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) timer_create(0x9, 0x0, 0x0) r0 = io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x4000159}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ڬdGݡ [ 50.799017][ T4333] ) failed (rc=-5) [ 50.830605][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.833439][ T4339] loop4: detected capacity change from 0 to 4096 [ 50.842222][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.853787][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.863633][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.889293][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.898074][ T4339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.961130][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.009460][ T4362] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.039971][ T4375] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.059567][ T4380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.244'. [ 51.071875][ T4362] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.090354][ T4380] netlink: 'syz.4.244': attribute type 1 has an invalid length. [ 51.104006][ T4375] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.157559][ T4362] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.191862][ T4375] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.211150][ T4407] netlink: 'syz.4.250': attribute type 4 has an invalid length. [ 51.240046][ T4362] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.277219][ T4419] ref_ctr increment failed for inode: 0x107 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810005b980 [ 51.289437][ T4375] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.316525][ T4418] uprobe: syz.4.255:4418 failed to unregister, leaking uprobe [ 51.354817][ T3815] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.354966][ T4428] loop1: detected capacity change from 0 to 128 [ 51.373233][ T3815] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.385106][ T3837] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.413603][ T3837] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.421796][ T3837] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.451110][ T3837] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.466177][ T3837] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.476596][ T3837] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.595800][ T4409] bio_check_eod: 4773 callbacks suppressed [ 51.595814][ T4409] syz.1.253: attempt to access beyond end of device [ 51.595814][ T4409] loop1: rw=2049, sector=145, nr_sectors = 888 limit=128 [ 51.663863][ T4409] syz.1.253: attempt to access beyond end of device [ 51.663863][ T4409] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 51.679351][ T4409] syz.1.253: attempt to access beyond end of device [ 51.679351][ T4409] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 51.706881][ T4409] syz.1.253: attempt to access beyond end of device [ 51.706881][ T4409] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 51.737910][ T4409] syz.1.253: attempt to access beyond end of device [ 51.737910][ T4409] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 51.751145][ T4409] syz.1.253: attempt to access beyond end of device [ 51.751145][ T4409] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 51.764437][ T4409] syz.1.253: attempt to access beyond end of device [ 51.764437][ T4409] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 51.784976][ T4409] syz.1.253: attempt to access beyond end of device [ 51.784976][ T4409] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 51.798819][ T4409] syz.1.253: attempt to access beyond end of device [ 51.798819][ T4409] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 51.813059][ T4409] syz.1.253: attempt to access beyond end of device [ 51.813059][ T4409] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 51.929664][ T4490] loop3: detected capacity change from 0 to 1024 [ 51.953443][ T4490] EXT4-fs: Ignoring removed nobh option [ 51.959126][ T4490] EXT4-fs: inline encryption not supported [ 51.973586][ T4492] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.004978][ T4490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.035769][ T4492] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.072889][ T4501] veth0_to_team: entered promiscuous mode [ 52.107016][ T4492] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.122478][ T4509] bridge0: entered promiscuous mode [ 52.128090][ T4509] macvtap1: entered allmulticast mode [ 52.133693][ T4509] bridge0: entered allmulticast mode [ 52.140821][ T4509] bridge0: port 3(macvtap1) entered blocking state [ 52.147579][ T4509] bridge0: port 3(macvtap1) entered disabled state [ 52.158216][ T4509] bridge0: left allmulticast mode [ 52.163374][ T4509] bridge0: left promiscuous mode [ 52.175404][ T4492] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.221369][ T3796] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.238636][ T3855] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.250938][ T3855] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.259987][ T3855] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.542954][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.567790][ T3357] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.575336][ T3357] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.582794][ T3357] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.590438][ T3357] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.597984][ T3357] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.605436][ T3357] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.612944][ T3357] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.620390][ T3357] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.627857][ T3357] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.635291][ T3357] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.643411][ T3357] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 52.724139][ T4578] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.775759][ T4578] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.826113][ T4578] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.865439][ T4578] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.922444][ T3796] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.935721][ T3837] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.947700][ T3837] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.959558][ T3837] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.236884][ T4650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4650 comm=syz.0.307 [ 53.298831][ T4659] netlink: 96 bytes leftover after parsing attributes in process `syz.0.311'. [ 53.358726][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 53.466407][ T4678] loop3: detected capacity change from 0 to 512 [ 53.512754][ T4678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.526406][ T4678] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.728793][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.839895][ T4694] ipvlan2: entered promiscuous mode [ 53.846259][ T4694] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 53.854409][ T4694] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 53.886939][ T4699] loop4: detected capacity change from 0 to 512 [ 53.894528][ T4699] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 53.945876][ T4713] loop3: detected capacity change from 0 to 1024 [ 53.955022][ T4713] EXT4-fs: inline encryption not supported [ 53.961087][ T4713] EXT4-fs: Ignoring removed bh option [ 53.970910][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 53.983833][ T4713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.001225][ T4718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.016763][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 54.028121][ T4718] bond1 (unregistering): Released all slaves [ 54.047140][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.476748][ T4851] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.523672][ T4851] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.583368][ T4851] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.643600][ T4851] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.125811][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 55.125828][ T29] audit: type=1400 audit(1757465508.725:725): avc: denied { read } for pid=4871 comm="syz.1.348" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.155663][ T29] audit: type=1400 audit(1757465508.725:726): avc: denied { open } for pid=4871 comm="syz.1.348" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.183780][ T29] audit: type=1400 audit(1757465508.785:727): avc: denied { ioctl } for pid=4871 comm="syz.1.348" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.223853][ T29] audit: type=1326 audit(1757465508.825:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 55.248355][ T29] audit: type=1326 audit(1757465508.825:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 55.271734][ T29] audit: type=1326 audit(1757465508.825:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 55.294969][ T29] audit: type=1326 audit(1757465508.825:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 55.318365][ T29] audit: type=1326 audit(1757465508.825:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 55.341638][ T29] audit: type=1326 audit(1757465508.825:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 55.365029][ T29] audit: type=1326 audit(1757465508.825:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 55.687798][ T3815] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.700086][ T3815] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.711317][ T3855] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.715043][ T4931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 55.729951][ T3855] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.745390][ T4936] loop3: detected capacity change from 0 to 256 [ 55.751862][ T4931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 55.768232][ T4936] FAT-fs (loop3): Directory bread(block 64) failed [ 55.776676][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 55.783972][ T4936] FAT-fs (loop3): Directory bread(block 65) failed [ 55.792180][ T4936] FAT-fs (loop3): Directory bread(block 66) failed [ 55.798707][ T4936] FAT-fs (loop3): Directory bread(block 67) failed [ 55.798746][ T4931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 55.806520][ T4936] FAT-fs (loop3): Directory bread(block 68) failed [ 55.821213][ T4936] FAT-fs (loop3): Directory bread(block 69) failed [ 55.828007][ T4936] FAT-fs (loop3): Directory bread(block 70) failed [ 55.834714][ T4936] FAT-fs (loop3): Directory bread(block 71) failed [ 55.839309][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 55.841241][ T4936] FAT-fs (loop3): Directory bread(block 72) failed [ 55.841258][ T4936] FAT-fs (loop3): Directory bread(block 73) failed [ 55.882414][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 55.992943][ T4960] Zero length message leads to an empty skb [ 56.064478][ T4974] smc: net device bond0 applied user defined pnetid SYZ0 [ 56.073195][ T4974] smc: net device bond0 erased user defined pnetid SYZ0 [ 56.352133][ T4992] loop4: detected capacity change from 0 to 512 [ 56.359145][ T4992] EXT4-fs: Ignoring removed nobh option [ 56.366191][ T4992] EXT4-fs (loop4): failed to initialize system zone (-117) [ 56.373600][ T4992] EXT4-fs (loop4): mount failed [ 56.583337][ T5015] netlink: 'syz.0.384': attribute type 11 has an invalid length. [ 56.790313][ T5030] mmap: syz.0.390 (5030) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.977981][ T5038] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.985253][ T5038] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.045594][ T5038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.055797][ T5045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.079477][ T5045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.087542][ T5038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.141440][ T3815] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.151177][ T3815] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.179625][ T3815] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.206012][ T3815] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.729268][ T5104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5104 comm=syz.1.410 [ 58.067861][ T5134] SELinux: security_context_str_to_sid () failed with errno=-22 [ 58.362326][ T5153] syzkaller1: entered promiscuous mode [ 58.367847][ T5153] syzkaller1: entered allmulticast mode [ 58.430763][ T5165] netlink: 'syz.2.437': attribute type 1 has an invalid length. [ 58.457122][ T5165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.465857][ T5168] sch_fq: defrate 0 ignored. [ 58.484683][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'. [ 58.504861][ T5165] bond1 (unregistering): Released all slaves [ 58.681650][ T5271] loop2: detected capacity change from 0 to 8192 [ 58.791539][ T5296] netlink: 96 bytes leftover after parsing attributes in process `syz.2.452'. [ 58.801828][ T5290] loop3: detected capacity change from 0 to 8192 [ 58.842250][ T5290] loop3: p1 p2 < > p3 p4 < p5 > [ 58.847279][ T5290] loop3: partition table partially beyond EOD, truncated [ 58.868937][ T5290] loop3: p1 size 100663296 extends beyond EOD, truncated [ 58.891471][ T5290] loop3: p2 start 591104 is beyond EOD, truncated [ 58.897946][ T5290] loop3: p3 start 33572980 is beyond EOD, truncated [ 58.911782][ T5290] loop3: p5 size 100663296 extends beyond EOD, truncated [ 59.047317][ T5346] netlink: 3 bytes leftover after parsing attributes in process `syz.0.459'. [ 59.060102][ T5346] batadv1: entered promiscuous mode [ 59.065505][ T5346] batadv1: entered allmulticast mode [ 59.136614][ T5347] loop3: detected capacity change from 0 to 8192 [ 59.148921][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 59.233731][ T5349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.460'. [ 59.242707][ T5349] netlink: 21 bytes leftover after parsing attributes in process `syz.2.460'. [ 59.251663][ T5349] netlink: 'syz.2.460': attribute type 2 has an invalid length. [ 59.259334][ T5349] netlink: 21 bytes leftover after parsing attributes in process `syz.2.460'. [ 59.344480][ T5376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 59.353472][ T5376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 59.887669][ T5445] netlink: 360 bytes leftover after parsing attributes in process `syz.3.484'. [ 60.029642][ T5468] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.143876][ T5468] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.173478][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 60.173494][ T29] audit: type=1326 audit(1757465513.775:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 60.177753][ T5476] loop4: detected capacity change from 0 to 512 [ 60.179969][ T29] audit: type=1326 audit(1757465513.775:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 60.206066][ T5476] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 60.209585][ T29] audit: type=1326 audit(1757465513.775:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 60.264370][ T29] audit: type=1326 audit(1757465513.775:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 60.288231][ T29] audit: type=1326 audit(1757465513.775:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 60.289285][ T5476] EXT4-fs (loop4): 1 truncate cleaned up [ 60.311619][ T29] audit: type=1326 audit(1757465513.775:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 60.317583][ T5476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.340608][ T29] audit: type=1326 audit(1757465513.775:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 60.376145][ T29] audit: type=1326 audit(1757465513.775:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f85d9f3ebe3 code=0x7ffc0000 [ 60.399573][ T29] audit: type=1326 audit(1757465513.775:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85d9f3d65f code=0x7ffc0000 [ 60.422767][ T29] audit: type=1326 audit(1757465513.775:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f85d9f3ec37 code=0x7ffc0000 [ 60.447369][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.522323][ T5497] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 60.536807][ T5497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.552531][ T5497] bond1 (unregistering): Released all slaves [ 60.590860][ T5468] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.654801][ T5570] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5570 comm=syz.4.500 [ 60.667290][ T5570] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5570 comm=syz.4.500 [ 60.697841][ T5468] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.747987][ T5580] bridge_slave_0: left allmulticast mode [ 60.753746][ T5580] bridge_slave_0: left promiscuous mode [ 60.759577][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.768897][ T5580] bridge_slave_1: left allmulticast mode [ 60.774633][ T5580] bridge_slave_1: left promiscuous mode [ 60.780383][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.791223][ T5580] bond0: (slave bond_slave_0): Releasing backup interface [ 60.802879][ T5580] bond0: (slave bond_slave_1): Releasing backup interface [ 60.814214][ T5580] team0: Port device team_slave_0 removed [ 60.825466][ T5580] team0: Port device team_slave_1 removed [ 60.832654][ T5580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.840077][ T5580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.856546][ T5580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.864054][ T5580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.889257][ T5580] team0: Port device vlan2 removed [ 60.915102][ T3824] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.934281][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.956986][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.987191][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.043947][ T5612] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 61.068961][ T5612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.088755][ T5612] bond1 (unregistering): Released all slaves [ 61.127984][ T5657] bridge: RTM_NEWNEIGH with invalid ether address [ 62.098801][ T5794] loop2: detected capacity change from 0 to 256 [ 62.114383][ T5794] vfat: Unknown parameter '' [ 62.349516][ T5822] capability: warning: `syz.2.566' uses deprecated v2 capabilities in a way that may be insecure [ 62.386824][ T5820] SELinux: Context @ is not valid (left unmapped). [ 62.422537][ T5831] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 62.437692][ T5837] loop4: detected capacity change from 0 to 256 [ 62.444841][ T5837] vfat: Unknown parameter '' [ 62.821506][ T5881] macvlan1: entered promiscuous mode [ 62.829039][ T5881] ipvlan0: entered promiscuous mode [ 62.835339][ T5881] ipvlan0: left promiscuous mode [ 62.846387][ T5881] macvlan1: left promiscuous mode [ 62.933198][ T3412] hid_parser_main: 18 callbacks suppressed [ 62.933240][ T3412] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.958331][ T3412] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.053360][ T5911] loop2: detected capacity change from 0 to 2048 [ 63.118388][ T5911] loop2: unable to read partition table [ 63.125623][ T5911] loop2: partition table beyond EOD, truncated [ 63.131807][ T5911] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 63.516237][ T5955] loop3: detected capacity change from 0 to 512 [ 63.556535][ T5955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.622034][ T5955] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.645799][ T5955] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.683092][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.721711][ T5968] syzkaller1: entered promiscuous mode [ 63.727268][ T5968] syzkaller1: entered allmulticast mode [ 63.771350][ T5970] __nla_validate_parse: 11 callbacks suppressed [ 63.771368][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 63.845791][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'. [ 63.919471][ T6008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 64.015025][ T23] IPVS: starting estimator thread 0... [ 64.102061][ T6024] IPVS: using max 1920 ests per chain, 96000 per kthread [ 64.167051][ T6040] serio: Serial port ttyS3 [ 64.175711][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 64.194481][ T6042] ip6gre1: entered allmulticast mode [ 65.411228][ T6122] syz.1.664 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 65.555160][ T6135] veth0: entered promiscuous mode [ 65.563733][ T29] kauditd_printk_skb: 672 callbacks suppressed [ 65.563774][ T29] audit: type=1400 audit(1757465519.165:1844): avc: denied { bind } for pid=6134 comm="syz.3.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.564553][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 65.570053][ T6129] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 65.730935][ T29] audit: type=1400 audit(1757465519.325:1845): avc: denied { setopt } for pid=6144 comm="syz.3.672" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.799770][ T29] audit: type=1400 audit(1757465519.395:1846): avc: denied { write } for pid=6152 comm="syz.2.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.835620][ T29] audit: type=1400 audit(1757465519.435:1847): avc: denied { create } for pid=6158 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.913573][ T29] audit: type=1400 audit(1757465519.455:1848): avc: denied { connect } for pid=6158 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.933046][ T29] audit: type=1400 audit(1757465519.455:1849): avc: denied { write } for pid=6158 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.952496][ T29] audit: type=1400 audit(1757465519.455:1850): avc: denied { read } for pid=6158 comm="syz.3.677" path="socket:[13496]" dev="sockfs" ino=13496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.991756][ T29] audit: type=1400 audit(1757465519.585:1851): avc: denied { accept } for pid=6170 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.057868][ T29] audit: type=1400 audit(1757465519.655:1852): avc: denied { listen } for pid=6170 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.065124][ T6184] rdma_op ffff888143014580 conn xmit_rdma 0000000000000000 [ 66.093707][ T29] audit: type=1400 audit(1757465519.665:1853): avc: denied { create } for pid=6182 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.138910][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 66.727044][ T6252] process 'syz.1.701' launched './file0' with NULL argv: empty string added [ 66.905350][ T6267] loop4: detected capacity change from 0 to 512 [ 66.959038][ T6267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.993377][ T6267] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.023822][ T6267] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 67.046431][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.127424][ T6286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.709'. [ 68.107259][ T6338] netlink: 'syz.3.725': attribute type 13 has an invalid length. [ 68.158333][ T6338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.499669][ T6347] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.563345][ T6349] netlink: 32 bytes leftover after parsing attributes in process `syz.0.729'. [ 68.668993][ T6347] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.870367][ T6347] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.019146][ T6353] Set syz1 is full, maxelem 65536 reached [ 69.101528][ T6347] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.334168][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.356081][ T6388] lo speed is unknown, defaulting to 1000 [ 69.362068][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.370293][ T6388] lo speed is unknown, defaulting to 1000 [ 69.386385][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.406236][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.419395][ T6388] lo speed is unknown, defaulting to 1000 [ 69.428096][ T6388] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.438438][ T6388] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 69.506555][ T6388] lo speed is unknown, defaulting to 1000 [ 69.515361][ T6388] lo speed is unknown, defaulting to 1000 [ 69.521419][ T6388] lo speed is unknown, defaulting to 1000 [ 69.527782][ T6388] lo speed is unknown, defaulting to 1000 [ 69.539547][ T6388] lo speed is unknown, defaulting to 1000 [ 69.950818][ T6464] ip6gre1: entered allmulticast mode [ 69.981542][ T6470] netlink: 'syz.0.771': attribute type 39 has an invalid length. [ 70.576222][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 70.576234][ T29] audit: type=1326 audit(1757465524.175:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 70.616406][ T29] audit: type=1326 audit(1757465524.215:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 70.658858][ T29] audit: type=1326 audit(1757465524.235:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 70.682384][ T29] audit: type=1326 audit(1757465524.245:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 70.706347][ T29] audit: type=1326 audit(1757465524.305:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 70.738499][ T29] audit: type=1326 audit(1757465524.325:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 70.761920][ T29] audit: type=1400 audit(1757465524.335:2049): avc: denied { create } for pid=6575 comm="syz.1.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.781571][ T29] audit: type=1326 audit(1757465524.365:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 70.812879][ T29] audit: type=1326 audit(1757465524.405:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 70.836717][ T29] audit: type=1326 audit(1757465524.415:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 71.393043][ T6565] syz.0.790 (6565) used greatest stack depth: 7304 bytes left [ 71.646322][ T6702] netlink: 48 bytes leftover after parsing attributes in process `syz.0.806'. [ 71.689683][ T6707] openvswitch: netlink: Message has 6 unknown bytes. [ 71.976338][ T6731] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.816' sets config #0 [ 72.214555][ T6771] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 72.294263][ T6784] sctp: [Deprecated]: syz.1.840 (pid 6784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.294263][ T6784] Use struct sctp_sack_info instead [ 72.316785][ T6784] sctp: [Deprecated]: syz.1.840 (pid 6784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.316785][ T6784] Use struct sctp_sack_info instead [ 72.343731][ T6758] netlink: 4104 bytes leftover after parsing attributes in process `syz.2.828'. [ 72.364264][ T6758] netlink: zone id is out of range [ 72.369481][ T6758] netlink: set zone limit has 4 unknown bytes [ 72.378719][ T6781] lo speed is unknown, defaulting to 1000 [ 72.474444][ T6813] dummy0: entered allmulticast mode [ 72.493511][ T6824] loop2: detected capacity change from 0 to 1024 [ 72.501100][ T6813] dummy0: left allmulticast mode [ 72.513985][ T6824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.549334][ T6824] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.848: Allocating blocks 449-513 which overlap fs metadata [ 72.578069][ T6823] EXT4-fs (loop2): pa ffff888106dc7540: logic 48, phys. 177, len 21 [ 72.586262][ T6823] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 72.668314][ T6840] loop4: detected capacity change from 0 to 1024 [ 72.677118][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.686835][ T6840] EXT4-fs: Ignoring removed nobh option [ 72.692604][ T6840] EXT4-fs: Ignoring removed bh option [ 72.722814][ T6851] ip6gre2: entered allmulticast mode [ 72.722956][ T6840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.790969][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.853913][ T6869] loop2: detected capacity change from 0 to 1024 [ 72.864916][ T6869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.886232][ T6869] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.910182][ T6869] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.861: lblock 3 mapped to illegal pblock 3 (length 3) [ 72.941761][ T6869] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 72.954153][ T6869] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.954153][ T6869] [ 72.978016][ T6883] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm syz.2.861: lblock 8 mapped to illegal pblock 8 (length 8) [ 73.017945][ T6883] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 73.030386][ T6883] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.030386][ T6883] [ 73.097156][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.166466][ T6907] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.871'. [ 73.189607][ T6909] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 73.292870][ T6913] netlink: 'syz.2.876': attribute type 16 has an invalid length. [ 73.300772][ T6913] netlink: 156 bytes leftover after parsing attributes in process `syz.2.876'. [ 73.340561][ T6920] netlink: 3 bytes leftover after parsing attributes in process `syz.4.877'. [ 73.395906][ T6920] batadv1: entered promiscuous mode [ 73.401163][ T6920] batadv1: entered allmulticast mode [ 73.943235][ T6959] tipc: Started in network mode [ 73.948257][ T6959] tipc: Node identity ac14140f, cluster identity 4711 [ 73.955464][ T6959] tipc: New replicast peer: 255.255.255.255 [ 73.961796][ T6959] tipc: Enabled bearer , priority 10 [ 74.656111][ T7011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.913'. [ 74.855932][ T7041] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.081954][ T3379] tipc: Node number set to 2886997007 [ 75.269828][ T7068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.939'. [ 75.371631][ T7081] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.408540][ T7080] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.434855][ T7081] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.505208][ T7080] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.536546][ T7081] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.587880][ T7080] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.614781][ T7103] 9pnet: p9_errstr2errno: server reported unknown error [ 75.644174][ T7081] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.721515][ T7080] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.750008][ T3824] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.762458][ T3824] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.774155][ T3796] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.786150][ T3796] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.841340][ T7132] netlink: 96 bytes leftover after parsing attributes in process `syz.3.954'. [ 75.914321][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 75.914399][ T29] audit: type=1326 audit(1757465529.515:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 75.952044][ T3824] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.963124][ T29] audit: type=1326 audit(1757465529.545:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 75.986769][ T29] audit: type=1326 audit(1757465529.545:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 76.010193][ T29] audit: type=1326 audit(1757465529.545:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 76.033529][ T29] audit: type=1326 audit(1757465529.545:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 76.056958][ T29] audit: type=1326 audit(1757465529.545:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 76.080375][ T29] audit: type=1326 audit(1757465529.545:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 76.104656][ T29] audit: type=1326 audit(1757465529.545:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 76.128092][ T29] audit: type=1326 audit(1757465529.545:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 76.152314][ T29] audit: type=1326 audit(1757465529.545:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff103eba9 code=0x7ffc0000 [ 76.206249][ T3796] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.228062][ T7156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7156 comm=syz.1.961 [ 76.318215][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.963'. [ 76.341815][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 76.354420][ T7159] netem: change failed [ 76.366497][ T7161] IPVS: Error joining to the multicast group [ 76.402138][ T3796] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.410912][ T3796] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.667501][ T7189] lo speed is unknown, defaulting to 1000 [ 76.871192][ T7224] loop2: detected capacity change from 0 to 512 [ 76.900387][ T7229] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 76.902082][ T7224] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 76.922129][ T7224] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.979: invalid indirect mapped block 8 (level 2) [ 76.960087][ T7224] EXT4-fs (loop2): Remounting filesystem read-only [ 76.977317][ T7224] EXT4-fs (loop2): 1 truncate cleaned up [ 76.987244][ T7224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.000484][ T7224] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.063404][ T7243] syzkaller0: entered promiscuous mode [ 77.068929][ T7243] syzkaller0: entered allmulticast mode [ 77.268346][ T7263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.989'. [ 77.963128][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 78.127771][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1012'. [ 78.152797][ T7331] VFS: Mount too revealing [ 78.474875][ T7363] loop2: detected capacity change from 0 to 8192 [ 79.514800][ T7438] loop2: detected capacity change from 0 to 128 [ 79.721689][ T7446] lo speed is unknown, defaulting to 1000 [ 79.839777][ T7473] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.914747][ T7473] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.973961][ T7473] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.033829][ T7473] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.096984][ T3796] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.117081][ T3796] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.135323][ T3796] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.147384][ T3796] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.223599][ T7516] macvtap0: refused to change device tx_queue_len [ 80.674136][ T7543] VFS: Mount too revealing [ 80.822911][ T7549] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.854372][ T7550] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.872375][ T7549] FAT-fs (loop7): unable to read boot sector [ 80.988204][ T7550] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.055178][ T7550] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.185638][ T7550] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.257678][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 81.257704][ T29] audit: type=1326 audit(1757465534.855:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 81.287430][ T29] audit: type=1326 audit(1757465534.855:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 81.360232][ T3855] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.413849][ T3855] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.432026][ T29] audit: type=1326 audit(1757465534.855:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 81.443760][ T3855] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.455480][ T29] audit: type=1326 audit(1757465534.855:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 81.455510][ T29] audit: type=1326 audit(1757465534.855:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 81.455533][ T29] audit: type=1326 audit(1757465534.855:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 81.534333][ T29] audit: type=1326 audit(1757465534.865:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 81.541174][ T3855] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.557772][ T29] audit: type=1326 audit(1757465534.865:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 81.557804][ T29] audit: type=1326 audit(1757465534.865:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 81.612844][ T29] audit: type=1326 audit(1757465534.915:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 81.876358][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'. [ 82.027576][ T7604] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1090'. [ 82.036722][ T7604] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1090'. [ 82.083361][ T7604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1090'. [ 82.270655][ T7626] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 82.423545][ T7631] netlink: 4104 bytes leftover after parsing attributes in process `syz.3.1099'. [ 82.433901][ T7631] netlink: zone id is out of range [ 82.439027][ T7631] netlink: set zone limit has 4 unknown bytes [ 83.741517][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 83.753658][ T7704] bridge: RTM_NEWNEIGH with invalid ether address [ 83.768018][ T7710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1131'. [ 84.934304][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.962523][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.999594][ T7860] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 85.030868][ T7860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.057787][ T7860] vlan1: entered allmulticast mode [ 85.063016][ T7860] bond1: entered allmulticast mode [ 85.402680][ T7937] bond0: (slave dummy0): Releasing backup interface [ 85.425321][ T7937] bridge_slave_0: left allmulticast mode [ 85.431033][ T7937] bridge_slave_0: left promiscuous mode [ 85.436881][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.449545][ T7949] netlink: 'syz.2.1158': attribute type 10 has an invalid length. [ 85.457492][ T7949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1158'. [ 85.489027][ T7937] bridge_slave_1: left allmulticast mode [ 85.494795][ T7937] bridge_slave_1: left promiscuous mode [ 85.500558][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.536876][ T7937] bond0: (slave bond_slave_0): Releasing backup interface [ 85.572450][ T7937] bond0: (slave bond_slave_1): Releasing backup interface [ 85.625501][ T7937] team0: Port device team_slave_0 removed [ 85.703246][ T7937] team0: Port device team_slave_1 removed [ 85.764318][ T7937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.771762][ T7937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.806664][ T7937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.814202][ T7937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.924884][ T7942] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1160'. [ 85.934842][ T7949] batman_adv: batadv0: Adding interface: veth1_vlan [ 85.941546][ T7949] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.052439][ T7949] batman_adv: batadv0: Interface activated: veth1_vlan [ 86.269284][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 86.269299][ T29] audit: type=1326 audit(1757465539.865:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 86.299071][ T7987] lo speed is unknown, defaulting to 1000 [ 86.336578][ T29] audit: type=1326 audit(1757465539.895:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 86.360101][ T29] audit: type=1326 audit(1757465539.905:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 86.383618][ T29] audit: type=1326 audit(1757465539.915:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 86.407375][ T29] audit: type=1326 audit(1757465539.925:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 86.431879][ T29] audit: type=1326 audit(1757465539.935:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 86.455543][ T29] audit: type=1326 audit(1757465539.995:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 86.479104][ T29] audit: type=1326 audit(1757465540.005:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 86.502710][ T29] audit: type=1326 audit(1757465540.015:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 86.547977][ T29] audit: type=1326 audit(1757465540.045:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7968 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f85d9f3eba9 code=0x7ffc0000 [ 86.709278][ T8038] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1186'. [ 86.750333][ T8038] batadv1: entered promiscuous mode [ 86.755661][ T8038] batadv1: entered allmulticast mode [ 86.818977][ T8054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1191'. [ 86.996616][ T8070] lo speed is unknown, defaulting to 1000 [ 87.082572][ T8103] netlink: 'syz.1.1202': attribute type 21 has an invalid length. [ 87.090626][ T8103] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1202'. [ 87.099777][ T8103] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 87.126713][ T8107] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1204'. [ 87.171689][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 87.705231][ T8111] Set syz1 is full, maxelem 65536 reached [ 88.014236][ T8146] loop4: detected capacity change from 0 to 1024 [ 88.032114][ T8146] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 88.063405][ T8146] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.092568][ T8146] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 88.100885][ T8146] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.169491][ T8146] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.1219: Inode bitmap for bg 0 marked uninitialized [ 88.183614][ T8146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.197069][ T8146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.320054][ T8154] lo speed is unknown, defaulting to 1000 [ 88.523520][ T8187] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1224'. [ 88.555202][ T8187] batadv1: entered promiscuous mode [ 88.560574][ T8187] batadv1: entered allmulticast mode [ 88.677192][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1226'. [ 88.894866][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 88.943674][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 89.071712][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1234'. [ 89.084499][ T8234] macsec1: entered promiscuous mode [ 89.089751][ T8234] dummy0: entered promiscuous mode [ 89.100241][ T8234] dummy0: left promiscuous mode [ 89.136470][ T8226] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1230' sets config #0 [ 89.214940][ T8251] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1236'. [ 89.285119][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 89.294111][ T8251] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1236'. [ 89.347668][ T8267] syzkaller0: entered allmulticast mode [ 89.387763][ T8267] syzkaller0 (unregistering): left allmulticast mode [ 89.430125][ T8278] netlink: 'syz.4.1249': attribute type 21 has an invalid length. [ 89.439703][ T8278] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1249'. [ 89.448798][ T8278] netlink: 'syz.4.1249': attribute type 1 has an invalid length. [ 89.685310][ T8290] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1253' sets config #0 [ 90.012748][ T8337] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.064089][ T8337] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.113851][ T8337] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.173660][ T8337] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.239808][ T3855] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.251581][ T3855] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.263729][ T3855] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.275281][ T3855] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.337209][ T8366] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1278'. [ 90.576448][ T8362] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1275' sets config #0 [ 91.273132][ T8469] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1308' sets config #0 [ 91.451523][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 91.451538][ T29] audit: type=1400 audit(1757465545.045:3026): avc: denied { read } for pid=8483 comm="syz.2.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.615432][ T8491] 9pnet: p9_errstr2errno: server reported unknown error [ 91.705131][ T29] audit: type=1326 audit(1757465545.305:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8498 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6f03eba9 code=0x7ffc0000 [ 91.728678][ T29] audit: type=1326 audit(1757465545.305:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8498 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fcb6f03eba9 code=0x7ffc0000 [ 91.774062][ T8501] tipc: Started in network mode [ 91.778974][ T8501] tipc: Node identity 3a362add8ad9, cluster identity 4711 [ 91.786250][ T8501] tipc: Enabled bearer , priority 0 [ 91.792739][ T29] audit: type=1326 audit(1757465545.305:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8498 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6f03eba9 code=0x7ffc0000 [ 91.816360][ T29] audit: type=1326 audit(1757465545.345:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8498 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6f03eba9 code=0x7ffc0000 [ 91.841288][ T8501] tipc: Disabling bearer [ 91.880144][ T8507] bridge_slave_0: left allmulticast mode [ 91.885960][ T8507] bridge_slave_0: left promiscuous mode [ 91.891692][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.900954][ T8507] bridge_slave_1: left allmulticast mode [ 91.906699][ T8507] bridge_slave_1: left promiscuous mode [ 91.912460][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.938671][ T8517] netlink: 'syz.0.1328': attribute type 10 has an invalid length. [ 91.950997][ T8507] bond0: (slave bond_slave_0): Releasing backup interface [ 91.987484][ T8507] bond0: (slave bond_slave_1): Releasing backup interface [ 91.987930][ T29] audit: type=1400 audit(1757465545.585:3031): avc: denied { sqpoll } for pid=8520 comm="syz.2.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 92.032661][ T8507] team0: Port device team_slave_0 removed [ 92.051295][ T8507] team0: Port device team_slave_1 removed [ 92.062957][ T8507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.070397][ T8507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.099538][ T8507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.106990][ T8507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.164684][ T8517] batman_adv: batadv0: Adding interface: veth1_vlan [ 92.171382][ T8517] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.205352][ T8517] batman_adv: batadv0: Interface activated: veth1_vlan [ 92.315186][ T8516] lo speed is unknown, defaulting to 1000 [ 92.549623][ T8556] tls_set_device_offload: netdev not found [ 92.589770][ T29] audit: type=1400 audit(1757465546.185:3032): avc: denied { read write } for pid=8559 comm="syz.4.1337" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 92.614094][ T29] audit: type=1400 audit(1757465546.185:3033): avc: denied { open } for pid=8559 comm="syz.4.1337" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 92.686842][ T29] audit: type=1400 audit(1757465546.245:3034): avc: denied { mount } for pid=8563 comm="syz.3.1338" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 92.709265][ T29] audit: type=1400 audit(1757465546.245:3035): avc: denied { search } for pid=8563 comm="syz.3.1338" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 93.002193][ T8605] loop4: detected capacity change from 0 to 1024 [ 93.013811][ T8603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.024346][ T8605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.042747][ T8605] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.075880][ T8618] tls_set_device_offload: netdev not found [ 93.112946][ T8626] bridge_slave_0: left allmulticast mode [ 93.118647][ T8626] bridge_slave_0: left promiscuous mode [ 93.124386][ T8626] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.135755][ T8626] bridge_slave_1: left allmulticast mode [ 93.141436][ T8626] bridge_slave_1: left promiscuous mode [ 93.147281][ T8626] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.189597][ T8632] netlink: 'syz.1.1358': attribute type 10 has an invalid length. [ 93.199248][ T8627] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1354: bg 0: block 393: padding at end of block bitmap is not set [ 93.214672][ T8627] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 93.227322][ T8627] EXT4-fs (loop4): This should not happen!! Data will be lost [ 93.227322][ T8627] [ 93.238278][ T8626] bond0: (slave bond_slave_0): Releasing backup interface [ 93.285329][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.294814][ T8626] bond0: (slave bond_slave_1): Releasing backup interface [ 93.309662][ T8626] team0: Port device team_slave_0 removed [ 93.317567][ T8626] team0: Port device team_slave_1 removed [ 93.323748][ T8626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.331526][ T8626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.352572][ T8632] veth1_vlan: left promiscuous mode [ 93.359411][ T8632] batman_adv: batadv0: Adding interface: veth1_vlan [ 93.366177][ T8632] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.394694][ T8632] batman_adv: batadv0: Interface activated: veth1_vlan [ 93.473611][ T8660] tls_set_device_offload: netdev not found [ 93.527236][ T8662] loop4: detected capacity change from 0 to 512 [ 93.606083][ T8662] EXT4-fs (loop4): orphan cleanup on readonly fs [ 93.613027][ T8662] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1369: bad orphan inode 13 [ 93.663070][ T8662] ext4_test_bit(bit=12, block=18) = 1 [ 93.668507][ T8662] is_bad_inode(inode)=0 [ 93.672724][ T8662] NEXT_ORPHAN(inode)=2130706432 [ 93.677589][ T8662] max_ino=32 [ 93.680800][ T8662] i_nlink=1 [ 93.751559][ T8662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.853307][ T8662] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 93.878094][ T8671] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 93.892606][ T8662] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 93.920526][ T3796] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.976679][ T3796] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.005813][ T3796] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.016301][ T3796] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.025523][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.173447][ T8697] wg2: left promiscuous mode [ 94.178101][ T8697] wg2: left allmulticast mode [ 94.201144][ T8697] wg2: entered promiscuous mode [ 94.206265][ T8697] wg2: entered allmulticast mode [ 94.224182][ T8701] __nla_validate_parse: 11 callbacks suppressed [ 94.224199][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'. [ 94.253412][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'. [ 94.284867][ T8711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8711 comm=syz.2.1385 [ 94.316737][ T8715] netlink: 'syz.2.1387': attribute type 30 has an invalid length. [ 94.506082][ T8744] loop7: detected capacity change from 0 to 16384 [ 94.529994][ T8746] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1390'. [ 94.632619][ T8754] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 94.640457][ T8754] netlink: 198116 bytes leftover after parsing attributes in process `syz.1.1397'. [ 94.683140][ T8748] loop7: detected capacity change from 16384 to 16383 [ 94.692818][ T8756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.705675][ T8756] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.726451][ T8756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.819608][ T8764] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 94.917160][ T8786] vlan2: entered allmulticast mode [ 94.922371][ T8786] bridge_slave_0: entered allmulticast mode [ 94.955216][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'. [ 95.030476][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1413'. [ 95.145831][ T8831] $H: renamed from bond0 (while UP) [ 95.155828][ T8831] $H: entered promiscuous mode [ 95.234978][ T8837] syz.0.1425: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 95.249754][ T8837] CPU: 1 UID: 0 PID: 8837 Comm: syz.0.1425 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.249828][ T8837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.249840][ T8837] Call Trace: [ 95.249846][ T8837] [ 95.249870][ T8837] __dump_stack+0x1d/0x30 [ 95.249917][ T8837] dump_stack_lvl+0xe8/0x140 [ 95.249938][ T8837] dump_stack+0x15/0x1b [ 95.250017][ T8837] warn_alloc+0x12b/0x1a0 [ 95.250126][ T8837] __vmalloc_node_range_noprof+0x9c/0xe00 [ 95.250158][ T8837] ? __futex_wait+0x1ff/0x260 [ 95.250248][ T8837] ? __pfx_futex_wake_mark+0x10/0x10 [ 95.250281][ T8837] ? __rcu_read_unlock+0x4f/0x70 [ 95.250303][ T8837] ? avc_has_perm_noaudit+0x1b1/0x200 [ 95.250362][ T8837] ? should_fail_ex+0x30/0x280 [ 95.250386][ T8837] ? xskq_create+0x36/0xe0 [ 95.250408][ T8837] vmalloc_user_noprof+0x7d/0xb0 [ 95.250441][ T8837] ? xskq_create+0x80/0xe0 [ 95.250461][ T8837] xskq_create+0x80/0xe0 [ 95.250551][ T8837] xsk_init_queue+0x95/0xf0 [ 95.250571][ T8837] xsk_setsockopt+0x477/0x640 [ 95.250606][ T8837] ? __pfx_xsk_setsockopt+0x10/0x10 [ 95.250651][ T8837] __sys_setsockopt+0x181/0x200 [ 95.250676][ T8837] __x64_sys_setsockopt+0x64/0x80 [ 95.250700][ T8837] x64_sys_call+0x20ec/0x2ff0 [ 95.250726][ T8837] do_syscall_64+0xd2/0x200 [ 95.250861][ T8837] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.250890][ T8837] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.250975][ T8837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.251061][ T8837] RIP: 0033:0x7fcb6f03eba9 [ 95.251079][ T8837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.251117][ T8837] RSP: 002b:00007fcb6daa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 95.251135][ T8837] RAX: ffffffffffffffda RBX: 00007fcb6f285fa0 RCX: 00007fcb6f03eba9 [ 95.251186][ T8837] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 95.251198][ T8837] RBP: 00007fcb6f0c1e19 R08: 0000000000000004 R09: 0000000000000000 [ 95.251210][ T8837] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 95.251223][ T8837] R13: 00007fcb6f286038 R14: 00007fcb6f285fa0 R15: 00007ffd43763bc8 [ 95.251244][ T8837] [ 95.251332][ T8837] Mem-Info: [ 95.476276][ T8837] active_anon:39385 inactive_anon:9 isolated_anon:0 [ 95.476276][ T8837] active_file:20449 inactive_file:2418 isolated_file:0 [ 95.476276][ T8837] unevictable:0 dirty:368 writeback:0 [ 95.476276][ T8837] slab_reclaimable:3331 slab_unreclaimable:29548 [ 95.476276][ T8837] mapped:28949 shmem:35442 pagetables:1212 [ 95.476276][ T8837] sec_pagetables:0 bounce:0 [ 95.476276][ T8837] kernel_misc_reclaimable:0 [ 95.476276][ T8837] free:1824149 free_pcp:17034 free_cma:0 [ 95.521612][ T8837] Node 0 active_anon:157540kB inactive_anon:36kB active_file:81796kB inactive_file:9672kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115912kB dirty:1472kB writeback:0kB shmem:141768kB kernel_stack:4240kB pagetables:5080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 95.549316][ T8837] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.555982][ T8839] lo speed is unknown, defaulting to 1000 [ 95.578082][ T8837] lowmem_reserve[]: 0 2883 7862 7862 [ 95.589188][ T8837] Node 0 DMA32 free:2949288kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 95.619339][ T8837] lowmem_reserve[]: 0 0 4978 4978 [ 95.624625][ T8837] Node 0 Normal free:4331420kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:157540kB inactive_anon:36kB active_file:81796kB inactive_file:9672kB unevictable:0kB writepending:1472kB present:5242880kB managed:5098240kB mlocked:116kB bounce:0kB free_pcp:64108kB local_pcp:53920kB free_cma:0kB [ 95.657161][ T8837] lowmem_reserve[]: 0 0 0 0 [ 95.661819][ T8837] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 95.675119][ T8837] Node 0 DMA32: 4*4kB (M) 5*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949288kB [ 95.684748][ T8839] chnl_net:caif_netlink_parms(): no params data found [ 95.691362][ T8837] Node 0 Normal: 7*4kB (E) 1*8kB (U) 1*16kB (U) 30*32kB (ME) 45*64kB (ME) 48*128kB (UME) 170*256kB (UME) 121*512kB (UM) 84*1024kB (UME) 62*2048kB (UM) 977*4096kB (UM) = 4330292kB [ 95.716235][ T8837] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 95.725694][ T8837] 58325 total pagecache pages [ 95.730365][ T8837] 20 pages in swap cache [ 95.734782][ T8837] Free swap = 124788kB [ 95.739123][ T8837] Total swap = 124996kB [ 95.743321][ T8837] 2097051 pages RAM [ 95.747146][ T8837] 0 pages HighMem/MovableOnly [ 95.751937][ T8837] 80446 pages reserved [ 95.826699][ T8839] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.833917][ T8839] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.843028][ T8839] bridge_slave_0: entered allmulticast mode [ 95.850319][ T8839] bridge_slave_0: entered promiscuous mode [ 95.870347][ T8839] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.877520][ T8839] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.886819][ T8839] bridge_slave_1: entered allmulticast mode [ 95.893443][ T8839] bridge_slave_1: entered promiscuous mode [ 95.910659][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'. [ 95.933261][ T8839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.942410][ T9034] : renamed from vlan1 (while UP) [ 95.966240][ T9024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.976831][ T8839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.014765][ T9024] macvlan2: entered promiscuous mode [ 96.020080][ T9024] macvlan2: entered allmulticast mode [ 96.027424][ T9024] bond1: (slave macvlan2): Opening slave failed [ 96.038345][ T8839] team0: Port device team_slave_0 added [ 96.062375][ T9115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.077886][ T3379] lo speed is unknown, defaulting to 1000 [ 96.079989][ T8839] team0: Port device team_slave_1 added [ 96.120216][ T8839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.127300][ T8839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.153349][ T8839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.166270][ T8839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.173433][ T8839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.199371][ T8839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.214678][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1444'. [ 96.223725][ T9151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1444'. [ 96.232759][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1444'. [ 96.256247][ T9151] netlink: 'syz.3.1444': attribute type 6 has an invalid length. [ 96.290873][ T8839] hsr_slave_0: entered promiscuous mode [ 96.298289][ T8839] hsr_slave_1: entered promiscuous mode [ 96.304648][ T8839] debugfs: 'hsr0' already exists in 'hsr' [ 96.310403][ T8839] Cannot create hsr debugfs directory [ 96.446048][ T8839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.464296][ T8839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.473932][ T8839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.482952][ T8839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.526532][ T8839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.541749][ T8839] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.551397][ T3796] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.558465][ T3796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.578877][ T3796] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.585973][ T3796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.601312][ T8839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.611716][ T8839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.665483][ T8839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.769773][ T8839] veth0_vlan: entered promiscuous mode [ 96.778305][ T8839] veth1_vlan: entered promiscuous mode [ 96.794574][ T8839] veth0_macvtap: entered promiscuous mode [ 96.802523][ T8839] veth1_macvtap: entered promiscuous mode [ 96.814654][ T8839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.828149][ T8839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.840691][ T3824] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.859257][ T3824] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.872912][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 96.872925][ T29] audit: type=1400 audit(1757465550.465:3182): avc: denied { mounton } for pid=8839 comm="syz-executor" path="/root/syzkaller.WeY8W1/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 96.878200][ T3824] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.880370][ T29] audit: type=1400 audit(1757465550.475:3183): avc: denied { mounton } for pid=8839 comm="syz-executor" path="/root/syzkaller.WeY8W1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 96.904034][ T3824] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.912275][ T29] audit: type=1400 audit(1757465550.475:3184): avc: denied { mounton } for pid=8839 comm="syz-executor" path="/root/syzkaller.WeY8W1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 97.001707][ T29] audit: type=1400 audit(1757465550.545:3185): avc: denied { mounton } for pid=8839 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 97.024855][ T29] audit: type=1400 audit(1757465550.545:3186): avc: denied { mount } for pid=8839 comm="syz-executor" name="/" dev="gadgetfs" ino=3909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 97.047427][ T29] audit: type=1400 audit(1757465550.595:3187): avc: denied { add_name } for pid=8839 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 97.072176][ T29] audit: type=1400 audit(1757465550.595:3188): avc: denied { create } for pid=8839 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 97.092737][ T29] audit: type=1400 audit(1757465550.595:3189): avc: denied { associate } for pid=8839 comm="syz-executor" name="syz5" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.208783][ T9301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.360715][ T29] audit: type=1400 audit(1757465550.955:3190): avc: denied { read write } for pid=9306 comm="syz.2.1456" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.384352][ T29] audit: type=1400 audit(1757465550.955:3191): avc: denied { open } for pid=9306 comm="syz.2.1456" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.594662][ T9295] Set syz1 is full, maxelem 65536 reached [ 97.735022][ T9329] netlink: 'syz.5.1465': attribute type 12 has an invalid length. [ 97.865288][ T9337] vlan2: entered allmulticast mode [ 97.965602][ T9354] loop4: detected capacity change from 0 to 164 [ 97.989257][ T9356] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 98.237700][ T9387] vlan1: entered allmulticast mode [ 98.242971][ T9387] bridge_slave_0: entered allmulticast mode [ 98.401395][ T9415] tipc: Started in network mode [ 98.406429][ T9415] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 98.413650][ T9415] tipc: Enabled bearer , priority 0 [ 98.455782][ T9419] macvlan2: entered promiscuous mode [ 98.461251][ T9419] macvlan2: entered allmulticast mode [ 98.690309][ T9436] loop4: detected capacity change from 0 to 2048 [ 98.732349][ T9436] loop4: p1 < > p4 [ 98.740343][ T9436] loop4: p4 size 8388608 extends beyond EOD, truncated [ 98.755739][ T9448] IPv6: Can't replace route, no match found [ 98.831626][ T9460] loop2: detected capacity change from 0 to 164 [ 98.987458][ T9487] loop9: detected capacity change from 0 to 7 [ 99.006242][ T9487] Buffer I/O error on dev loop9, logical block 0, async page read [ 99.017253][ T9487] Buffer I/O error on dev loop9, logical block 0, async page read [ 99.025148][ T9487] loop9: unable to read partition table [ 99.033537][ T9487] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 99.033537][ T9487] ) failed (rc=-5) [ 99.269440][ T9513] netlink: 'syz.0.1530': attribute type 30 has an invalid length. [ 99.493649][ T9536] __nla_validate_parse: 2 callbacks suppressed [ 99.493667][ T9536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1539'. [ 99.531960][ T3413] tipc: Node number set to 11578026 [ 99.849652][ T9587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.239036][ T9622] team_slave_0: entered promiscuous mode [ 100.246043][ T9622] team_slave_0: left promiscuous mode [ 100.411450][ T9629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1563'. [ 100.420908][ T9629] netem: change failed [ 100.459322][ T9616] Set syz1 is full, maxelem 65536 reached [ 100.524511][ T9635] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 100.535076][ T9641] loop9: detected capacity change from 0 to 7 [ 100.541753][ T9641] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.549804][ T9641] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.557741][ T9641] loop9: unable to read partition table [ 100.573632][ T9641] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 100.573632][ T9641] ) failed (rc=-5) [ 100.818621][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 100.837013][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'. [ 100.848177][ T9685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.873888][ T9685] macvlan2: entered promiscuous mode [ 100.879381][ T9685] macvlan2: entered allmulticast mode [ 100.887142][ T9685] bond0: (slave macvlan2): Opening slave failed [ 100.920581][ T9728] loop2: detected capacity change from 0 to 512 [ 100.928751][ T9728] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.941766][ T9728] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.956276][ T9728] EXT4-fs (loop2): 1 truncate cleaned up [ 100.962486][ T9728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.990163][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.099235][ T9748] loop4: detected capacity change from 0 to 512 [ 101.129279][ T9748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.157003][ T9748] ext4 filesystem being mounted at /320/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.171063][ T9748] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1600: corrupted xattr block 33: overlapping e_value [ 101.186465][ T9748] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 101.195716][ T9748] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1600: corrupted xattr block 33: overlapping e_value [ 101.211020][ T9748] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 101.220859][ T9748] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1600: corrupted xattr block 33: overlapping e_value [ 101.236381][ T9748] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 101.246103][ T9766] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1600: corrupted xattr block 33: overlapping e_value [ 101.265308][ T9766] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 101.270288][ T9746] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 101.274679][ T9766] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1600: corrupted xattr block 33: overlapping e_value [ 101.297803][ T9766] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 101.307523][ T9766] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1600: corrupted xattr block 33: overlapping e_value [ 101.323262][ T9766] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1600: corrupted xattr block 33: overlapping e_value [ 101.337880][ T9766] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 101.368514][ T3824] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.386368][ T3824] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.409851][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.412058][ T3824] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.432553][ T3824] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.656935][ T9782] loop4: detected capacity change from 0 to 164 [ 101.664875][ T9782] rock: directory entry would overflow storage [ 101.671065][ T9782] rock: sig=0x66, size=4, remaining=3 [ 101.708570][ T9787] wg2: entered promiscuous mode [ 101.714036][ T9787] wg2: entered allmulticast mode [ 101.836920][ T9814] netlink: zone id is out of range [ 101.842361][ T9814] netlink: zone id is out of range [ 101.852131][ T9814] netlink: zone id is out of range [ 101.857275][ T9814] netlink: zone id is out of range [ 101.862673][ T9814] netlink: zone id is out of range [ 101.867971][ T9814] netlink: zone id is out of range [ 101.873296][ T9814] netlink: zone id is out of range [ 101.878524][ T9814] netlink: zone id is out of range [ 101.899288][ T9822] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1620'. [ 101.908525][ T9822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1620'. [ 101.929373][ T9821] netlink: 'syz.2.1622': attribute type 7 has an invalid length. [ 102.674281][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 102.674295][ T29] audit: type=1326 audit(1757465556.275:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 102.751505][ T29] audit: type=1326 audit(1757465556.305:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 102.775168][ T29] audit: type=1326 audit(1757465556.305:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 102.798701][ T29] audit: type=1326 audit(1757465556.305:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 102.822201][ T29] audit: type=1326 audit(1757465556.305:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 102.845665][ T29] audit: type=1326 audit(1757465556.305:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 102.869329][ T29] audit: type=1326 audit(1757465556.305:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 102.892910][ T29] audit: type=1326 audit(1757465556.305:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 102.916324][ T29] audit: type=1326 audit(1757465556.305:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 102.939827][ T29] audit: type=1326 audit(1757465556.305:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdb2ceba9 code=0x7ffc0000 [ 103.365128][ T9897] bridge: RTM_NEWNEIGH with invalid ether address [ 103.379084][ T9899] unsupported nla_type 52263 [ 103.415852][ T9905] syzkaller0: entered allmulticast mode [ 103.422426][ T9905] syzkaller0: entered promiscuous mode [ 103.429242][ T9905] syzkaller0 (unregistering): left allmulticast mode [ 103.436079][ T9905] syzkaller0 (unregistering): left promiscuous mode [ 103.714658][ T9932] loop2: detected capacity change from 0 to 512 [ 103.726122][ T9934] netlink: 'syz.3.1660': attribute type 1 has an invalid length. [ 103.746297][ T9932] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1659: corrupted in-inode xattr: invalid ea_ino [ 103.761950][ T9932] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1659: couldn't read orphan inode 15 (err -117) [ 103.777358][ T9932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.807515][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.901689][ T9953] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1665'. [ 103.996553][ T9963] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1669'. [ 104.029728][ T9966] syzkaller0: entered allmulticast mode [ 104.035718][ T9966] syzkaller0: entered promiscuous mode [ 104.051517][ T9972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9972 comm=syz.2.1673 [ 104.052362][ T9966] syzkaller0 (unregistering): left allmulticast mode [ 104.070651][ T9966] syzkaller0 (unregistering): left promiscuous mode [ 104.157299][ T9978] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1674'. [ 104.166576][ T9978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1674'. [ 104.309258][ T9992] bridge: RTM_NEWNEIGH with invalid ether address [ 104.456919][ T3796] bond0 (unregistering): Released all slaves [ 104.526223][ T3796] hsr_slave_0: left promiscuous mode [ 104.534491][ T3796] hsr_slave_1: left promiscuous mode [ 104.540211][ T3796] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 104.547330][ T3796] batman_adv: batadv0: Removing interface: veth1_vlan [ 104.679892][T10022] SELinux: failed to load policy [ 105.113568][T10052] ip6gre2: entered allmulticast mode [ 105.443532][T10081] lo speed is unknown, defaulting to 1000 [ 105.829478][T10139] netlink: 'syz.5.1718': attribute type 1 has an invalid length. [ 105.868710][T10139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.897900][T10139] macvlan2: entered promiscuous mode [ 105.903342][T10139] macvlan2: entered allmulticast mode [ 105.924151][T10139] bond1: entered promiscuous mode [ 105.952833][T10139] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.991929][T10139] bond1: left promiscuous mode [ 106.196775][T10204] syz_tun: entered allmulticast mode [ 106.206927][T10204] dvmrp1: entered allmulticast mode [ 106.216001][T10203] syz_tun: left allmulticast mode [ 107.406543][T10292] loop5: detected capacity change from 0 to 512 [ 107.426374][T10292] EXT4-fs: Ignoring removed nobh option [ 107.434625][T10298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10298 comm=syz.2.1769 [ 107.459441][T10292] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1767: corrupted inode contents [ 107.477109][T10292] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.1767: mark_inode_dirty error [ 107.491367][T10292] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1767: corrupted inode contents [ 107.512757][T10292] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.1767: mark_inode_dirty error [ 107.553310][T10292] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1767: Failed to acquire dquot type 0 [ 107.575046][T10292] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1767: corrupted inode contents [ 107.575563][T10317] veth1_macvtap: left promiscuous mode [ 107.612673][T10292] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1767: mark_inode_dirty error [ 107.633257][T10317] macsec0: entered allmulticast mode [ 107.643295][T10322] serio: Serial port ptm0 [ 107.644088][T10292] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1767: corrupted inode contents [ 107.663604][T10320] veth1_macvtap: entered promiscuous mode [ 107.669361][T10320] veth1_macvtap: entered allmulticast mode [ 107.689072][T10320] macsec0: entered promiscuous mode [ 107.712277][T10292] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1767: mark_inode_dirty error [ 107.732750][T10292] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1767: corrupted inode contents [ 107.751928][T10292] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 107.761966][T10292] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1767: corrupted inode contents [ 107.778421][T10292] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1767: mark_inode_dirty error [ 107.790429][T10292] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 107.803744][T10292] EXT4-fs (loop5): 1 truncate cleaned up [ 107.810030][T10292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.827447][T10331] program syz.4.1781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.827482][T10292] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.863801][T10333] __nla_validate_parse: 2 callbacks suppressed [ 107.863825][T10333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1782'. [ 107.923482][ T8839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.933234][T10342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1787'. [ 107.957580][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 107.957596][ T29] audit: type=1326 audit(1757465561.555:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac367deba9 code=0x7ffc0000 [ 107.989957][T10350] loop5: detected capacity change from 0 to 128 [ 107.997984][T10350] EXT4-fs: Ignoring removed nobh option [ 108.004993][ T29] audit: type=1326 audit(1757465561.585:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac367deba9 code=0x7ffc0000 [ 108.013286][T10350] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.028697][ T29] audit: type=1326 audit(1757465561.585:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac367deba9 code=0x7ffc0000 [ 108.064148][ T29] audit: type=1326 audit(1757465561.585:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac367deba9 code=0x7ffc0000 [ 108.087841][ T29] audit: type=1326 audit(1757465561.585:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fac367deba9 code=0x7ffc0000 [ 108.093386][T10350] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.111355][ T29] audit: type=1326 audit(1757465561.585:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fac367debe3 code=0x7ffc0000 [ 108.144836][ T29] audit: type=1326 audit(1757465561.585:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fac367dd65f code=0x7ffc0000 [ 108.168237][ T29] audit: type=1326 audit(1757465561.585:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fac367dec37 code=0x7ffc0000 [ 108.191644][ T29] audit: type=1326 audit(1757465561.585:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac367dd510 code=0x7ffc0000 [ 108.215307][ T29] audit: type=1326 audit(1757465561.585:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac367de7ab code=0x7ffc0000 [ 108.258502][ T8839] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.291560][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 108.311552][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 108.345301][T10405] veth1_macvtap: left promiscuous mode [ 108.361048][T10405] macsec0: entered allmulticast mode [ 108.395646][T10416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1799'. [ 108.408132][T10405] veth1_macvtap: entered promiscuous mode [ 108.414000][T10405] veth1_macvtap: entered allmulticast mode [ 108.420706][T10405] macsec0: entered promiscuous mode [ 108.953607][T10478] syzkaller0: entered promiscuous mode [ 108.959696][T10478] syzkaller0: entered allmulticast mode [ 109.103804][T10509] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 109.115321][T10511] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1831'. [ 109.579154][T10554] lo speed is unknown, defaulting to 1000 [ 110.437185][T10648] loop4: detected capacity change from 0 to 512 [ 110.462090][T10648] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1875: iget: bad i_size value: 38620345925642 [ 110.485563][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 110.502327][T10648] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1875: couldn't read orphan inode 15 (err -117) [ 110.518294][T10648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.589295][T10667] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1881'. [ 110.631135][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.982718][T10697] netlink: 'syz.0.1899': attribute type 10 has an invalid length. [ 110.992193][T10697] team0: Port device dummy0 added [ 110.999105][T10697] netlink: 'syz.0.1899': attribute type 10 has an invalid length. [ 111.008974][T10697] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.019373][T10697] team0: Failed to send options change via netlink (err -105) [ 111.028082][T10697] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.037460][T10697] team0: Port device dummy0 removed [ 111.085549][T10705] loop2: detected capacity change from 0 to 512 [ 111.096838][T10709] netlink: 'syz.3.1905': attribute type 10 has an invalid length. [ 111.116778][T10705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.143599][T10709] team0: Port device dummy0 added [ 111.149274][T10715] netlink: 'syz.3.1905': attribute type 10 has an invalid length. [ 111.152201][T10705] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.172847][T10715] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.198642][T10715] team0: Failed to send options change via netlink (err -105) [ 111.206726][T10715] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.217997][T10715] team0: Port device dummy0 removed [ 111.245225][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.259057][T10717] loop5: detected capacity change from 0 to 512 [ 111.288831][T10717] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1895: iget: bad i_size value: 38620345925642 [ 111.310150][T10717] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1895: couldn't read orphan inode 15 (err -117) [ 111.338373][T10717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.437275][ T8839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.571547][T10775] loop2: detected capacity change from 0 to 256 [ 111.582559][T10773] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1915'. [ 111.598641][T10775] FAT-fs (loop2): Directory bread(block 64) failed [ 111.605707][T10775] FAT-fs (loop2): Directory bread(block 65) failed [ 111.613665][T10775] FAT-fs (loop2): Directory bread(block 66) failed [ 111.620266][T10775] FAT-fs (loop2): Directory bread(block 67) failed [ 111.627513][T10775] FAT-fs (loop2): Directory bread(block 68) failed [ 111.638650][T10775] FAT-fs (loop2): Directory bread(block 69) failed [ 111.645332][T10775] FAT-fs (loop2): Directory bread(block 70) failed [ 111.651976][T10775] FAT-fs (loop2): Directory bread(block 71) failed [ 111.658811][T10775] FAT-fs (loop2): Directory bread(block 72) failed [ 111.665366][T10780] usb usb1: usbfs: process 10780 (syz.4.1918) did not claim interface 4 before use [ 111.667597][T10775] FAT-fs (loop2): Directory bread(block 73) failed [ 111.742919][T10775] bio_check_eod: 3777 callbacks suppressed [ 111.742937][T10775] syz.2.1916: attempt to access beyond end of device [ 111.742937][T10775] loop2: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 111.779499][T10775] syz.2.1916: attempt to access beyond end of device [ 111.779499][T10775] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 111.920407][T10816] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1930'. [ 112.009488][T10830] netlink: 'syz.2.1937': attribute type 21 has an invalid length. [ 112.104236][T10844] geneve2: entered promiscuous mode [ 112.109508][T10844] geneve2: entered allmulticast mode [ 112.145472][T10858] serio: Serial port ttyS3 [ 112.154281][T10861] wg2: left promiscuous mode [ 112.224775][T10868] netlink: 'syz.4.1951': attribute type 10 has an invalid length. [ 112.246300][T10868] team0: Port device dummy0 added [ 112.271599][T10868] netlink: 'syz.4.1951': attribute type 10 has an invalid length. [ 112.281320][T10868] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 112.300406][T10868] team0: Failed to send options change via netlink (err -105) [ 112.321175][T10868] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 112.340196][T10868] team0: Port device dummy0 removed [ 112.349232][T10868] dummy0: entered promiscuous mode [ 112.354802][T10868] $H: (slave dummy0): Enslaving as an active interface with an up link [ 112.450716][T10888] loop5: detected capacity change from 0 to 512 [ 112.464555][T10888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.477446][T10888] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.512143][ T8839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.613026][T10902] loop5: detected capacity change from 0 to 128 [ 112.628101][T10902] syz.5.1964: attempt to access beyond end of device [ 112.628101][T10902] loop5: rw=2049, sector=154, nr_sectors = 72 limit=128 [ 112.644003][T10902] syz.5.1964: attempt to access beyond end of device [ 112.644003][T10902] loop5: rw=2049, sector=226, nr_sectors = 8 limit=128 [ 112.658412][T10902] syz.5.1964: attempt to access beyond end of device [ 112.658412][T10902] loop5: rw=2049, sector=232, nr_sectors = 2 limit=128 [ 112.671964][T10902] Buffer I/O error on dev loop5, logical block 116, lost async page write [ 112.682656][T10902] syz.5.1964: attempt to access beyond end of device [ 112.682656][T10902] loop5: rw=2049, sector=234, nr_sectors = 16 limit=128 [ 112.698327][T10902] syz.5.1964: attempt to access beyond end of device [ 112.698327][T10902] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 112.713504][T10902] syz.5.1964: attempt to access beyond end of device [ 112.713504][T10902] loop5: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 112.727171][T10902] Buffer I/O error on dev loop5, logical block 72, lost async page write [ 112.737639][T10902] syz.5.1964: attempt to access beyond end of device [ 112.737639][T10902] loop5: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 112.751859][T10902] syz.5.1964: attempt to access beyond end of device [ 112.751859][T10902] loop5: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 112.762726][T10905] netlink: 'syz.4.1965': attribute type 13 has an invalid length. [ 112.765383][T10902] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 112.797762][T10905] gretap0: refused to change device tx_queue_len [ 112.805058][T10905] net_ratelimit: 3 callbacks suppressed [ 112.805074][T10905] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 112.926979][T10913] __nla_validate_parse: 5 callbacks suppressed [ 112.927111][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1968'. [ 112.936592][T10915] netlink: 'syz.5.1967': attribute type 10 has an invalid length. [ 112.962762][T10915] team0: Port device dummy0 added [ 112.970080][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 112.970096][ T29] audit: type=1326 audit(1757465566.565:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb6f035b67 code=0x7ffc0000 [ 112.988034][T10915] netlink: 'syz.5.1967': attribute type 10 has an invalid length. [ 113.009123][T10915] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 113.035806][T10915] team0: Failed to send options change via netlink (err -105) [ 113.044173][ T29] audit: type=1326 audit(1757465566.595:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb6efdada9 code=0x7ffc0000 [ 113.067961][ T29] audit: type=1326 audit(1757465566.595:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb6f035b67 code=0x7ffc0000 [ 113.091692][ T29] audit: type=1326 audit(1757465566.595:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb6efdada9 code=0x7ffc0000 [ 113.115359][ T29] audit: type=1326 audit(1757465566.595:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fcb6f03eba9 code=0x7ffc0000 [ 113.139185][ T29] audit: type=1326 audit(1757465566.615:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb6f035b67 code=0x7ffc0000 [ 113.162653][ T29] audit: type=1326 audit(1757465566.615:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb6efdada9 code=0x7ffc0000 [ 113.186271][ T29] audit: type=1326 audit(1757465566.615:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fcb6f03eba9 code=0x7ffc0000 [ 113.209879][ T29] audit: type=1326 audit(1757465566.615:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb6f035b67 code=0x7ffc0000 [ 113.233420][ T29] audit: type=1326 audit(1757465566.615:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb6efdada9 code=0x7ffc0000 [ 113.257143][T10915] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 113.273716][T10915] team0: Port device dummy0 removed [ 113.585556][T10964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.619814][T10964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.923070][T11095] team0: Port device dummy0 added [ 114.941547][T11095] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.963939][T11101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1992'. [ 114.988994][T11095] team0: Failed to send options change via netlink (err -105) [ 115.003131][T11095] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 115.013390][T11095] team0: Port device dummy0 removed [ 115.126460][T11115] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1999'. [ 115.139789][T11115] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1999'. [ 115.197010][T11091] lo speed is unknown, defaulting to 1000 [ 115.691943][T11162] syzkaller0: entered allmulticast mode [ 115.762483][T11162] syzkaller0 (unregistering): left allmulticast mode [ 116.455449][T11231] loop4: detected capacity change from 0 to 1024 [ 116.485025][T11231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.564925][T11231] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2031: Allocating blocks 449-513 which overlap fs metadata [ 116.608342][T11233] loop2: detected capacity change from 0 to 8192 [ 116.649024][T11230] EXT4-fs (loop4): pa ffff888106e53310: logic 48, phys. 177, len 21 [ 116.657104][T11230] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 116.682838][T11244] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2034'. [ 116.729074][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.886010][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2039'. [ 117.118402][T11275] validate_nla: 6 callbacks suppressed [ 117.118416][T11275] netlink: 'syz.0.2047': attribute type 10 has an invalid length. [ 117.155151][T11275] team0: Port device dummy0 added [ 117.167613][T11275] netlink: 'syz.0.2047': attribute type 10 has an invalid length. [ 117.187137][T11275] team0: Port device dummy0 removed [ 117.282126][T11283] syz_tun: entered allmulticast mode [ 117.294038][T11282] syz_tun: left allmulticast mode [ 117.318259][T11285] loop5: detected capacity change from 0 to 512 [ 117.336169][T11285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.352858][T11287] pim6reg1: entered promiscuous mode [ 117.358172][T11287] pim6reg1: entered allmulticast mode [ 117.374824][T11285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.408749][T11285] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.446932][T11285] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2050: corrupted xattr block 19: overlapping e_value [ 117.491608][T11298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11298 comm=syz.4.2053 [ 117.511977][T11300] geneve2: entered promiscuous mode [ 117.515000][T11298] netlink: 'syz.4.2053': attribute type 1 has an invalid length. [ 117.517353][T11300] geneve2: entered allmulticast mode [ 117.517438][T11285] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 117.517472][T11285] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2050: corrupted xattr block 19: overlapping e_value [ 117.553351][T11303] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2050: corrupted xattr block 19: overlapping e_value [ 117.569662][T11310] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2050: corrupted xattr block 19: overlapping e_value [ 117.584180][T11303] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 117.593656][T11303] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2050: corrupted xattr block 19: overlapping e_value [ 117.620255][T11310] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 117.628113][T11309] bond1: (slave bridge5): making interface the new active one [ 117.632029][T11285] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 117.645012][T11309] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 117.653517][T11303] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 117.654780][T11310] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2050: corrupted xattr block 19: overlapping e_value [ 117.667764][T11303] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2050: corrupted xattr block 19: overlapping e_value [ 117.677803][T11310] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 117.701208][T11303] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2050: corrupted xattr block 19: overlapping e_value [ 117.716498][T11303] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 117.726000][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 117.745699][T11352] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2057'. [ 117.758680][T11303] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 117.807298][T11284] Process accounting resumed [ 117.817283][T11284] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2050: corrupted xattr block 19: overlapping e_value [ 117.851614][T11284] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 117.863968][T11284] EXT4-fs (loop5): This should not happen!! Data will be lost [ 117.863968][T11284] [ 117.873655][T11284] EXT4-fs (loop5): Total free blocks count 0 [ 117.879683][T11284] EXT4-fs (loop5): Free/Dirty block details [ 117.885625][T11284] EXT4-fs (loop5): free_blocks=39627 [ 117.890948][T11284] EXT4-fs (loop5): dirty_blocks=1 [ 117.896022][T11284] EXT4-fs (loop5): Block reservation details [ 117.902175][T11284] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 117.909686][T11366] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2063'. [ 117.922258][ T9755] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 117.986466][T11384] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2069'. [ 118.066622][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 118.066638][ T29] audit: type=1326 audit(1757465571.665:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6f03eba9 code=0x7ffc0000 [ 118.100566][T11397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11397 comm=syz.3.2074 [ 118.128951][T11401] geneve2: entered promiscuous mode [ 118.134476][T11401] geneve2: entered allmulticast mode [ 118.134752][ T29] audit: type=1326 audit(1757465571.665:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcb6f03eba9 code=0x7ffc0000 [ 118.163185][ T29] audit: type=1326 audit(1757465571.665:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6f03eba9 code=0x7ffc0000 [ 118.187045][ T29] audit: type=1326 audit(1757465571.665:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcb6f03eba9 code=0x7ffc0000 [ 118.210615][ T29] audit: type=1326 audit(1757465571.665:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb6f03ebe3 code=0x7ffc0000 [ 118.234198][ T29] audit: type=1326 audit(1757465571.665:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb6f03d65f code=0x7ffc0000 [ 118.257530][ T29] audit: type=1326 audit(1757465571.665:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcb6f03ec37 code=0x7ffc0000 [ 118.281006][ T29] audit: type=1326 audit(1757465571.665:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb6f03d510 code=0x7ffc0000 [ 118.304584][ T29] audit: type=1326 audit(1757465571.665:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcb6f03d80a code=0x7ffc0000 [ 118.328097][ T29] audit: type=1326 audit(1757465571.665:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6f03eba9 code=0x7ffc0000 [ 118.380463][T11420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2080'. [ 118.428588][T11428] netlink: 'syz.4.2084': attribute type 1 has an invalid length. [ 118.447935][T11428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.458048][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'. [ 118.483331][T11428] bond2 (unregistering): Released all slaves [ 118.541687][T11506] netlink: zone id is out of range [ 118.547603][T11506] netlink: zone id is out of range [ 118.552858][T11506] netlink: zone id is out of range [ 118.670894][T11518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2092'. [ 118.680242][ T3357] IPVS: starting estimator thread 0... [ 118.791999][T11521] IPVS: using max 2496 ests per chain, 124800 per kthread [ 118.807371][T11535] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2099'. [ 118.979363][T11543] netlink: 'syz.3.2103': attribute type 10 has an invalid length. [ 118.988973][T11543] team0: Port device dummy0 added [ 118.997017][T11543] netlink: 'syz.3.2103': attribute type 10 has an invalid length. [ 119.020511][T11543] team0: Port device dummy0 removed [ 119.244538][T11546] lo speed is unknown, defaulting to 1000 [ 119.288624][T11548] loop5: detected capacity change from 0 to 8192 [ 119.662373][T11594] block device autoloading is deprecated and will be removed. [ 119.718822][T11602] netlink: 'syz.2.2116': attribute type 1 has an invalid length. [ 119.777717][T11602] bond2: entered promiscuous mode [ 119.786154][T11602] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.084980][T11682] netlink: 'syz.5.2131': attribute type 10 has an invalid length. [ 120.094792][T11682] team0: Port device dummy0 added [ 120.103136][T11682] netlink: 'syz.5.2131': attribute type 10 has an invalid length. [ 120.115110][T11682] team0: Port device dummy0 removed [ 120.204511][T11694] loop5: detected capacity change from 0 to 164 [ 120.215051][T11694] syz.5.2138: attempt to access beyond end of device [ 120.215051][T11694] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 120.229007][T11694] syz.5.2138: attempt to access beyond end of device [ 120.229007][T11694] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 120.627966][T11715] tipc: Started in network mode [ 120.632962][T11715] tipc: Node identity ac14140f, cluster identity 4711 [ 120.640425][T11715] tipc: New replicast peer: 255.255.255.83 [ 120.646437][T11715] tipc: Enabled bearer , priority 10 [ 120.709275][T11713] loop4: detected capacity change from 0 to 8192 [ 120.780418][T11713] ================================================================== [ 120.788541][T11713] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 120.795689][T11713] [ 120.798017][T11713] write to 0xffff88816b5b639e of 2 bytes by task 11721 on cpu 1: [ 120.805746][T11713] fat16_ent_put+0x28/0x60 [ 120.810170][T11713] fat_alloc_clusters+0x4d1/0xa80 [ 120.815207][T11713] fat_get_block+0x258/0x5e0 [ 120.819801][T11713] __block_write_begin_int+0x400/0xf90 [ 120.825277][T11713] cont_write_begin+0x5fc/0x970 [ 120.830145][T11713] fat_write_begin+0x4f/0xe0 [ 120.834741][T11713] cont_write_begin+0x671/0x970 [ 120.839604][T11713] fat_write_begin+0x4f/0xe0 [ 120.844209][T11713] generic_perform_write+0x181/0x490 [ 120.849503][T11713] __generic_file_write_iter+0x9e/0x120 [ 120.855058][T11713] generic_file_write_iter+0x8d/0x2f0 [ 120.860445][T11713] do_iter_readv_writev+0x49c/0x540 [ 120.865657][T11713] vfs_writev+0x2df/0x8b0 [ 120.870094][T11713] __se_sys_pwritev2+0xfc/0x1c0 [ 120.874965][T11713] __x64_sys_pwritev2+0x67/0x80 [ 120.879833][T11713] x64_sys_call+0x2c55/0x2ff0 [ 120.884538][T11713] do_syscall_64+0xd2/0x200 [ 120.889066][T11713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.894979][T11713] [ 120.897303][T11713] read to 0xffff88816b5b6200 of 512 bytes by task 11713 on cpu 0: [ 120.905117][T11713] fat_mirror_bhs+0x1df/0x320 [ 120.909811][T11713] fat_alloc_clusters+0x98b/0xa80 [ 120.914847][T11713] fat_get_block+0x258/0x5e0 [ 120.919442][T11713] __block_write_begin_int+0x400/0xf90 [ 120.924909][T11713] cont_write_begin+0x5fc/0x970 [ 120.929776][T11713] fat_write_begin+0x4f/0xe0 [ 120.934386][T11713] cont_write_begin+0x1b0/0x970 [ 120.939273][T11713] fat_write_begin+0x4f/0xe0 [ 120.943881][T11713] generic_cont_expand_simple+0xad/0x150 [ 120.949534][T11713] fat_cont_expand+0x3e/0x170 [ 120.954220][T11713] fat_setattr+0x2a5/0x8a0 [ 120.958637][T11713] notify_change+0x806/0x890 [ 120.963261][T11713] do_ftruncate+0x34b/0x450 [ 120.967775][T11713] __x64_sys_ftruncate+0x68/0xc0 [ 120.972734][T11713] x64_sys_call+0x2d52/0x2ff0 [ 120.977419][T11713] do_syscall_64+0xd2/0x200 [ 120.981940][T11713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.987847][T11713] [ 120.990169][T11713] Reported by Kernel Concurrency Sanitizer on: [ 120.996363][T11713] CPU: 0 UID: 0 PID: 11713 Comm: syz.4.2143 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.006168][T11713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.016225][T11713] ================================================================== [ 121.761906][ T9755] tipc: Node number set to 2886997007