last executing test programs: 42.584784246s ago: executing program 0 (id=714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 42.500604657s ago: executing program 0 (id=720): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xe3b9}, 0x18) r1 = io_uring_setup(0xf08, &(0x7f0000000800)={0x0, 0x8fb5, 0x10000, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) 42.478487478s ago: executing program 0 (id=721): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 42.448730898s ago: executing program 0 (id=724): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) 42.359475289s ago: executing program 0 (id=725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0xffffffff}, 0x18) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x4, 0x0, 0x0) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 42.127665762s ago: executing program 0 (id=732): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 42.084269713s ago: executing program 32 (id=732): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.132596702s ago: executing program 4 (id=2036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x4, 0x8201, 0x0, 0x0, 0x2, 0x2fd, 0x100000}}) 1.782696816s ago: executing program 4 (id=2038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) 1.749392797s ago: executing program 4 (id=2039): r0 = gettid() prctl$PR_SET_KEEPCAPS(0x8, 0xfdfffffffffffffb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) unshare(0x6060600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xf0588357b60851c) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.152754364s ago: executing program 2 (id=2059): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x7) 995.109737ms ago: executing program 3 (id=2064): r0 = syz_io_uring_setup(0x110b, &(0x7f0000000240)={0x0, 0xd736, 0x0, 0x3, 0xbf7ffffa}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x1000, 0x1}) io_uring_enter(r0, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 937.884748ms ago: executing program 3 (id=2067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x4}, {}, {0xa, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040e9}, 0x20000004) 895.388358ms ago: executing program 4 (id=2070): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000005000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048010) 814.475129ms ago: executing program 3 (id=2071): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket(0x18, 0x4, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8) syz_read_part_table(0x60f, &(0x7f0000000740)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x1004491, &(0x7f0000000380)=ANY=[], 0x2, 0x826, &(0x7f00000012c0)="$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") 584.015142ms ago: executing program 4 (id=2075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 563.127522ms ago: executing program 4 (id=2076): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) 543.175582ms ago: executing program 1 (id=2077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x40, 0xe, 0x2}, {0x801, 0x7}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) 514.831863ms ago: executing program 3 (id=2079): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8b040400000000002000128008000100736974001400028008000100", @ANYRES32=r3, @ANYBLOB="08000300e060"], 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002940)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @empty}}}], 0x20}}], 0x1, 0x0) 435.676964ms ago: executing program 5 (id=2080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) 435.279404ms ago: executing program 3 (id=2081): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0x327, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 414.769534ms ago: executing program 3 (id=2082): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) ftruncate(r0, 0x2000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 408.574464ms ago: executing program 1 (id=2083): fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000001180)='pids.events\x00', 0x5000000, 0x0) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 381.160954ms ago: executing program 5 (id=2084): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 345.475525ms ago: executing program 1 (id=2085): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 318.798825ms ago: executing program 5 (id=2086): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 317.384705ms ago: executing program 1 (id=2087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r2, 0x1) 293.734405ms ago: executing program 2 (id=2088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000300)='cpu<02||!') 270.335286ms ago: executing program 5 (id=2089): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 243.816306ms ago: executing program 2 (id=2090): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2, 0x1bd}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000018"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 182.412747ms ago: executing program 2 (id=2091): semtimedop(0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) timer_getoverrun(r2) 181.542297ms ago: executing program 1 (id=2101): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$TCSETSW2(r0, 0x5453, 0x0) 115.427258ms ago: executing program 2 (id=2092): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) clock_adjtime(0x3, 0x0) 83.590068ms ago: executing program 1 (id=2093): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 68.504688ms ago: executing program 5 (id=2094): r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100c93a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) poll(0x0, 0x0, 0x8) lseek(r0, 0x2000, 0x0) 29.605099ms ago: executing program 2 (id=2095): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 0s ago: executing program 5 (id=2096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): m0: entered promiscuous mode [ 42.086658][ T4193] team_slave_0: entered promiscuous mode [ 42.092468][ T4193] team_slave_1: entered promiscuous mode [ 42.099096][ T4192] team0: left promiscuous mode [ 42.104047][ T4192] team_slave_0: left promiscuous mode [ 42.109774][ T4192] team_slave_1: left promiscuous mode [ 42.115413][ T4192] batadv_slave_0: left promiscuous mode [ 42.238434][ T4197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 42.427933][ T4222] loop3: detected capacity change from 0 to 1024 [ 42.435153][ T4222] EXT4-fs: Ignoring removed i_version option [ 42.448617][ T4222] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.493069][ T4222] EXT4-fs: Ignoring removed nobh option [ 42.498831][ T4222] EXT4-fs: Ignoring removed bh option [ 42.531897][ T4224] ALSA: seq fatal error: cannot create timer (-19) [ 42.556761][ T4222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.716321][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.844558][ T4244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 42.853780][ T4244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.253'. [ 42.862703][ T4244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 42.884691][ T4244] netlink: 'syz.4.253': attribute type 6 has an invalid length. [ 43.002266][ T4258] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 43.151008][ T4267] SELinux: unknown common  [ 43.164081][ T4267] SELinux: failed to load policy [ 43.185494][ T4270] loop2: detected capacity change from 0 to 1024 [ 43.210407][ T4270] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 43.226921][ T4270] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.253949][ T4270] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 43.273146][ T4270] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.325704][ T4270] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.264: Inode bitmap for bg 0 marked uninitialized [ 43.344182][ T4270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.374283][ T4270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.421975][ T4296] loop3: detected capacity change from 0 to 512 [ 43.449178][ T4296] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.499054][ T4296] EXT4-fs (loop3): 1 truncate cleaned up [ 43.524299][ T4296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.558537][ T4296] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 43.678918][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 43.678932][ T29] audit: type=1400 audit(1748371428.623:470): avc: denied { mount } for pid=4308 comm="syz.1.279" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.708452][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.738570][ T29] audit: type=1400 audit(1748371428.643:471): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.758242][ T29] audit: type=1400 audit(1748371428.653:472): avc: denied { unmount } for pid=4308 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.796264][ T4316] loop1: detected capacity change from 0 to 512 [ 43.814784][ T4316] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.862387][ T4316] EXT4-fs (loop1): 1 truncate cleaned up [ 43.870232][ T4316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.896885][ T29] audit: type=1400 audit(1748371428.843:473): avc: denied { remount } for pid=4314 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.916644][ T4316] EXT4-fs: Ignoring removed orlov option [ 43.922449][ T29] audit: type=1400 audit(1748371428.863:474): avc: denied { sqpoll } for pid=4320 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.942010][ T4316] EXT4-fs (loop1): can't enable nombcache during remount [ 44.027068][ T4334] loop3: detected capacity change from 0 to 1024 [ 44.034835][ T4334] EXT4-fs: Ignoring removed orlov option [ 44.040811][ T4334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.053856][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.137254][ T29] audit: type=1400 audit(1748371429.073:475): avc: denied { create } for pid=4336 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.175814][ T4334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.204280][ T29] audit: type=1400 audit(1748371429.113:476): avc: denied { write } for pid=4336 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.224934][ T29] audit: type=1400 audit(1748371429.133:477): avc: denied { mounton } for pid=4333 comm="syz.3.289" path="/58/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.248639][ T29] audit: type=1400 audit(1748371429.133:478): avc: denied { mount } for pid=4333 comm="syz.3.289" name="/" dev="configfs" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 44.271386][ T29] audit: type=1400 audit(1748371429.133:479): avc: denied { search } for pid=4333 comm="syz.3.289" name="/" dev="configfs" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.325722][ T4347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.337641][ T4347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.350249][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.653486][ T4361] loop0: detected capacity change from 0 to 128 [ 44.707790][ T110] kworker/u8:4: attempt to access beyond end of device [ 44.707790][ T110] loop0: rw=1, sector=137, nr_sectors = 8 limit=128 [ 44.721416][ T110] kworker/u8:4: attempt to access beyond end of device [ 44.721416][ T110] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 44.735168][ T110] kworker/u8:4: attempt to access beyond end of device [ 44.735168][ T110] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 44.748594][ T110] kworker/u8:4: attempt to access beyond end of device [ 44.748594][ T110] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 44.762296][ T110] kworker/u8:4: attempt to access beyond end of device [ 44.762296][ T110] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 44.775815][ T110] kworker/u8:4: attempt to access beyond end of device [ 44.775815][ T110] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 44.789278][ T110] kworker/u8:4: attempt to access beyond end of device [ 44.789278][ T110] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 44.802802][ T110] kworker/u8:4: attempt to access beyond end of device [ 44.802802][ T110] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 44.817388][ T110] kworker/u8:4: attempt to access beyond end of device [ 44.817388][ T110] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 44.831106][ T110] kworker/u8:4: attempt to access beyond end of device [ 44.831106][ T110] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 44.909727][ T4375] loop3: detected capacity change from 0 to 512 [ 44.919835][ T4375] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 44.949360][ T4375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 44.975145][ T4384] Zero length message leads to an empty skb [ 44.985019][ T4375] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.308: corrupted in-inode xattr: e_value size too large [ 45.009303][ T4375] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.308: couldn't read orphan inode 15 (err -117) [ 45.026097][ T4375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.060965][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.084914][ T4398] __nla_validate_parse: 2 callbacks suppressed [ 45.084931][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 45.100248][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 45.111249][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 45.208448][ T4411] bridge0: port 3(vlan2) entered blocking state [ 45.215081][ T4411] bridge0: port 3(vlan2) entered disabled state [ 45.221682][ T4415] loop3: detected capacity change from 0 to 1024 [ 45.222104][ T4411] vlan2: entered allmulticast mode [ 45.233739][ T4411] bridge0: entered allmulticast mode [ 45.242049][ T4411] vlan2: left allmulticast mode [ 45.247180][ T4411] bridge0: left allmulticast mode [ 45.256034][ T4415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.328466][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c406a00: rx timeout, send abort [ 45.328524][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c406600: rx timeout, send abort [ 45.328705][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811c406a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 45.328766][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811c406600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 45.381130][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.442454][ T4434] loop1: detected capacity change from 0 to 1024 [ 45.485908][ T4434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.624526][ T4451] lo speed is unknown, defaulting to 1000 [ 45.817244][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.872604][ T4477] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.202389][ T4511] netlink: 'syz.0.367': attribute type 10 has an invalid length. [ 46.210700][ T4511] team0: Device dummy0 is up. Set it down before adding it as a team port [ 46.238925][ T4513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.368'. [ 46.442229][ T4482] Set syz1 is full, maxelem 65536 reached [ 46.550728][ T4532] loop1: detected capacity change from 0 to 512 [ 46.558059][ T4532] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 46.569075][ T4532] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 46.577682][ T4532] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.375: corrupted in-inode xattr: e_value size too large [ 46.592963][ T4532] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.375: couldn't read orphan inode 15 (err -117) [ 46.606974][ T4532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.635736][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.775761][ T4561] loop0: detected capacity change from 0 to 128 [ 46.791465][ T4565] loop3: detected capacity change from 0 to 2048 [ 46.863206][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.870990][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.878479][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.885958][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.893971][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.901658][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.909299][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.917073][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.924557][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.932130][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.940518][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.948194][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.955982][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.963624][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.971182][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.980257][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.987736][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.995221][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.002631][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.010160][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.017588][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.025039][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.032542][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.039987][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.047546][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.055067][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.062537][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.070961][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.079847][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.088777][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 47.240339][ T4608] loop0: detected capacity change from 0 to 2048 [ 47.252688][ T4610] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.326809][ T4610] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.326983][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119c22c00: rx timeout, send abort [ 47.398433][ T4610] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.420954][ T4625] netlink: 2 bytes leftover after parsing attributes in process `syz.0.409'. [ 47.435471][ T4610] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.447044][ T4625] batadv_slave_1: entered promiscuous mode [ 47.543939][ T4610] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.567130][ T4610] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.588163][ T4610] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.615176][ T4610] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.836645][ T4684] netlink: 'syz.2.427': attribute type 10 has an invalid length. [ 47.845523][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119c22c00: abort rx timeout. Force session deactivation [ 47.858399][ T4684] batman_adv: batadv0: Adding interface: team0 [ 47.864726][ T4684] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.890130][ T4684] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 47.904910][ T4692] netlink: 'syz.2.427': attribute type 10 has an invalid length. [ 47.912806][ T4692] netlink: 2 bytes leftover after parsing attributes in process `syz.2.427'. [ 47.938783][ T4692] team0: entered promiscuous mode [ 47.944291][ T4692] team_slave_0: entered promiscuous mode [ 47.950143][ T4692] team_slave_1: entered promiscuous mode [ 47.961860][ T4692] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.969305][ T4692] batman_adv: batadv0: Interface activated: team0 [ 47.975845][ T4692] batman_adv: batadv0: Interface deactivated: team0 [ 47.982742][ T4692] batman_adv: batadv0: Removing interface: team0 [ 47.991316][ T4692] bridge0: port 3(team0) entered blocking state [ 47.997949][ T4692] bridge0: port 3(team0) entered disabled state [ 48.004681][ T4692] team0: entered allmulticast mode [ 48.010144][ T4692] team_slave_0: entered allmulticast mode [ 48.016089][ T4692] team_slave_1: entered allmulticast mode [ 48.023445][ T4692] bridge0: port 3(team0) entered blocking state [ 48.029975][ T4692] bridge0: port 3(team0) entered forwarding state [ 48.097431][ T4713] loop4: detected capacity change from 0 to 512 [ 48.116135][ T4713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.129579][ T4713] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.235557][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.677231][ T4814] SELinux: failed to load policy [ 48.712260][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 48.712310][ T29] audit: type=1400 audit(1748375528.653:748): avc: denied { map } for pid=4823 comm="syz.1.451" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.740924][ T4822] loop4: detected capacity change from 0 to 8192 [ 48.742668][ T29] audit: type=1400 audit(1748375528.653:749): avc: denied { read write } for pid=4823 comm="syz.1.451" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.774655][ T29] audit: type=1400 audit(1748375528.703:750): avc: denied { mounton } for pid=4818 comm="syz.4.448" path="/67/file0" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.797394][ T29] audit: type=1400 audit(1748375528.703:751): avc: denied { mount } for pid=4818 comm="syz.4.448" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 48.819570][ T29] audit: type=1400 audit(1748375528.703:752): avc: denied { mounton } for pid=4818 comm="syz.4.448" path="/67/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 48.842007][ T29] audit: type=1400 audit(1748375528.703:753): avc: denied { mount } for pid=4818 comm="syz.4.448" name="/" dev="configfs" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 48.864754][ T29] audit: type=1400 audit(1748375528.703:754): avc: denied { create } for pid=4818 comm="syz.4.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.884522][ T29] audit: type=1400 audit(1748375528.703:755): avc: denied { getopt } for pid=4818 comm="syz.4.448" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.904904][ T29] audit: type=1400 audit(1748375528.703:756): avc: denied { setattr } for pid=4818 comm="syz.4.448" name="/" dev="configfs" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.933010][ T29] audit: type=1400 audit(1748375528.803:757): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 48.986105][ T4827] Cannot find set identified by id 0 to match [ 49.051970][ T4847] loop2: detected capacity change from 0 to 512 [ 49.058756][ T4847] EXT4-fs: Ignoring removed orlov option [ 49.065136][ T4847] ext4: Unknown parameter 'uid>00000000000000000000' [ 49.096003][ T36] kernel read not supported for file /203/oom_adj (pid: 36 comm: kworker/1:1) [ 49.246752][ T4874] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 49.279178][ T4878] loop4: detected capacity change from 0 to 512 [ 49.302733][ T4878] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.476: casefold flag without casefold feature [ 49.315940][ T4878] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.476: couldn't read orphan inode 15 (err -117) [ 49.334931][ T4878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.437578][ T4890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 49.505735][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.571534][ T4902] netlink: 16 bytes leftover after parsing attributes in process `syz.4.485'. [ 49.811699][ T4914] loop1: detected capacity change from 0 to 128 [ 50.070408][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 50.079777][ T4926] netlink: 32 bytes leftover after parsing attributes in process `syz.3.495'. [ 50.127533][ T4930] hsr0: entered promiscuous mode [ 50.234836][ T4944] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 50.249509][ T4941] IPVS: stopping master sync thread 4944 ... [ 50.286596][ T4950] loop2: detected capacity change from 0 to 164 [ 50.294451][ T4950] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 50.385824][ T4960] netlink: 'syz.0.510': attribute type 10 has an invalid length. [ 50.408704][ T4960] batman_adv: batadv0: Adding interface: team0 [ 50.414986][ T4960] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.440341][ T4960] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 50.454023][ T4963] netlink: 'syz.0.510': attribute type 10 has an invalid length. [ 50.461919][ T4963] netlink: 2 bytes leftover after parsing attributes in process `syz.0.510'. [ 50.472173][ T4963] team0: entered promiscuous mode [ 50.498744][ T4958] vhci_hcd: invalid port number 96 [ 50.503994][ T4958] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 50.512864][ T4963] team_slave_0: entered promiscuous mode [ 50.518709][ T4963] team_slave_1: entered promiscuous mode [ 50.530883][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 50.542043][ T4963] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.549650][ T4963] batman_adv: batadv0: Interface activated: team0 [ 50.556278][ T4963] batman_adv: batadv0: Interface deactivated: team0 [ 50.562964][ T4963] batman_adv: batadv0: Removing interface: team0 [ 50.572058][ T4963] bridge0: port 3(team0) entered blocking state [ 50.578698][ T4963] bridge0: port 3(team0) entered disabled state [ 50.585647][ T4963] team0: entered allmulticast mode [ 50.590862][ T4963] team_slave_0: entered allmulticast mode [ 50.596749][ T4963] team_slave_1: entered allmulticast mode [ 50.605491][ T4963] bridge0: port 3(team0) entered blocking state [ 50.611842][ T4963] bridge0: port 3(team0) entered forwarding state [ 50.648387][ T4973] loop3: detected capacity change from 0 to 1024 [ 50.665388][ T4973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.677158][ T4978] mmap: syz.2.519 (4978) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.678209][ T4973] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.721351][ T4973] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 50.739510][ T4984] loop0: detected capacity change from 0 to 128 [ 50.805921][ T4990] loop2: detected capacity change from 0 to 512 [ 50.824380][ T4992] netlink: 72 bytes leftover after parsing attributes in process `syz.0.524'. [ 50.837078][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.849582][ T4990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.872640][ T4990] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.877911][ T5000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 50.901709][ T5002] loop1: detected capacity change from 0 to 128 [ 50.908656][ T4990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.932337][ T5004] hsr0: entered promiscuous mode [ 50.975905][ T5006] loop2: detected capacity change from 0 to 128 [ 51.084537][ T5012] loop3: detected capacity change from 0 to 512 [ 51.119769][ T5012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.150741][ T5012] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.164444][ T5019] vhci_hcd: invalid port number 96 [ 51.169632][ T5019] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 51.263952][ T5037] loop2: detected capacity change from 0 to 128 [ 51.274981][ T5038] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 51.304616][ T5035] IPVS: stopping master sync thread 5038 ... [ 51.329580][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.383398][ T5041] hsr0: entered promiscuous mode [ 51.450322][ T5046] batadv1: entered allmulticast mode [ 51.468511][ T5046] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 51.598196][ T5054] SELinux: failed to load policy [ 51.669029][ T5072] netlink: 'syz.1.559': attribute type 10 has an invalid length. [ 51.695111][ T5072] netlink: 'syz.1.559': attribute type 10 has an invalid length. [ 51.703144][ T5072] netlink: 2 bytes leftover after parsing attributes in process `syz.1.559'. [ 51.718791][ T5072] team0: entered promiscuous mode [ 51.726294][ T5072] team_slave_0: entered promiscuous mode [ 51.732075][ T5072] team_slave_1: entered promiscuous mode [ 51.739879][ T5072] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.747365][ T5072] batman_adv: batadv0: Interface activated: team0 [ 51.754004][ T5072] batman_adv: batadv0: Interface deactivated: team0 [ 51.760708][ T5072] batman_adv: batadv0: Removing interface: team0 [ 51.767893][ T5072] bridge0: port 3(team0) entered blocking state [ 51.774265][ T5072] bridge0: port 3(team0) entered disabled state [ 51.781360][ T5072] team0: entered allmulticast mode [ 51.787855][ T5072] team_slave_0: entered allmulticast mode [ 51.793700][ T5072] team_slave_1: entered allmulticast mode [ 51.800966][ T5072] bridge0: port 3(team0) entered blocking state [ 51.807306][ T5072] bridge0: port 3(team0) entered forwarding state [ 51.858659][ T5088] loop1: detected capacity change from 0 to 164 [ 51.866178][ T5088] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.996133][ T5102] loop2: detected capacity change from 0 to 128 [ 52.011716][ T5104] hsr0: entered promiscuous mode [ 52.038527][ T5107] netlink: 256 bytes leftover after parsing attributes in process `syz.2.578'. [ 52.053764][ T5109] SELinux: Context system_u:object is not valid (left unmapped). [ 52.094825][ T5115] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5115 comm=syz.1.581 [ 52.107351][ T5115] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5115 comm=syz.1.581 [ 52.207828][ T5129] loop1: detected capacity change from 0 to 512 [ 52.217554][ T5129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.244666][ T5129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.257545][ T5129] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.303428][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.528510][ T5148] hsr0: entered promiscuous mode [ 52.617188][ T5152] vlan2: entered allmulticast mode [ 52.622428][ T5152] bridge_slave_0: entered allmulticast mode [ 52.732978][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.758845][ T3401] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.825967][ T5175] ip6gretap1: entered allmulticast mode [ 52.911168][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 53.132816][ T5202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.248862][ T5219] vcan0: entered allmulticast mode [ 53.260709][ T5219] vcan0: left allmulticast mode [ 53.304489][ T5224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 53.318579][ T5227] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 53.326378][ T5227] netlink: 224 bytes leftover after parsing attributes in process `syz.4.631'. [ 53.366312][ T5233] loop1: detected capacity change from 0 to 128 [ 53.407113][ T5239] loop1: detected capacity change from 0 to 512 [ 53.437496][ T5239] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec01c, mo2=0002] [ 53.450511][ T5239] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 53.467486][ T5239] EXT4-fs (loop1): mount failed [ 53.524067][ T5254] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 53.554997][ T5258] loop0: detected capacity change from 0 to 128 [ 53.567513][ T5258] EXT4-fs: Ignoring removed nobh option [ 53.578432][ T5258] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.638178][ T5258] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.721237][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 53.721257][ T29] audit: type=1400 audit(1748375789.660:1054): avc: denied { accept } for pid=5274 comm="syz.3.653" lport=42189 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.750781][ T29] audit: type=1400 audit(1748375789.660:1055): avc: denied { setopt } for pid=5274 comm="syz.3.653" lport=42189 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 53.774520][ T29] audit: type=1400 audit(1748375789.660:1056): avc: denied { getopt } for pid=5274 comm="syz.3.653" lport=42189 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 53.796664][ T5282] loop1: detected capacity change from 0 to 512 [ 53.814004][ T29] audit: type=1400 audit(1748375789.670:1057): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.834020][ T29] audit: type=1400 audit(1748375789.750:1058): avc: denied { map } for pid=5257 comm="syz.0.644" path="/162/mnt/cpuset.effective_mems" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.857833][ T29] audit: type=1400 audit(1748375789.750:1059): avc: denied { write } for pid=5257 comm="syz.0.644" path="/162/mnt/cpuset.effective_mems" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.899742][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.910397][ T5282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.924251][ T5282] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.999051][ T29] audit: type=1400 audit(1748375789.930:1060): avc: denied { ioctl } for pid=5281 comm="syz.1.657" path="/124/file0/file1" dev="loop1" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.051658][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.082569][ T29] audit: type=1400 audit(1748375789.980:1061): avc: denied { write } for pid=5303 comm="syz.3.665" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 54.185010][ T29] audit: type=1326 audit(1748375790.110:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350737e969 code=0x7ffc0000 [ 54.206538][ T5323] sctp: [Deprecated]: syz.0.674 (pid 5323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.206538][ T5323] Use struct sctp_sack_info instead [ 54.208599][ T29] audit: type=1326 audit(1748375790.110:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f350737e969 code=0x7ffc0000 [ 54.251988][ T5319] vlan2: entered allmulticast mode [ 54.313937][ T5329] IPv6: NLM_F_CREATE should be specified when creating new route [ 54.395982][ T5337] SELinux: policydb version 0 does not match my version range 15-34 [ 54.428678][ T5337] SELinux: failed to load policy [ 54.436345][ T5342] netlink: 96 bytes leftover after parsing attributes in process `syz.1.683'. [ 54.474540][ T5349] program syz.3.686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.544190][ T5361] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5361 comm=syz.3.691 [ 54.637711][ C0] hrtimer: interrupt took 68634 ns [ 54.689271][ T5383] loop4: detected capacity change from 0 to 128 [ 54.728690][ T5383] bio_check_eod: 39 callbacks suppressed [ 54.728712][ T5383] syz.4.702: attempt to access beyond end of device [ 54.728712][ T5383] loop4: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 54.751239][ T5383] syz.4.702: attempt to access beyond end of device [ 54.751239][ T5383] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 54.764770][ T5383] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 54.778083][ T5393] xt_hashlimit: max too large, truncated to 1048576 [ 54.785118][ T5383] syz.4.702: attempt to access beyond end of device [ 54.785118][ T5383] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 54.798563][ T5383] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 54.807293][ T5383] syz.4.702: attempt to access beyond end of device [ 54.807293][ T5383] loop4: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 54.820664][ T5383] Buffer I/O error on dev loop4, logical block 158, lost async page write [ 54.830105][ T5383] syz.4.702: attempt to access beyond end of device [ 54.830105][ T5383] loop4: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 54.843558][ T5383] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 54.863827][ T5383] syz.4.702: attempt to access beyond end of device [ 54.863827][ T5383] loop4: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 54.877243][ T5383] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 54.888873][ T5383] syz.4.702: attempt to access beyond end of device [ 54.888873][ T5383] loop4: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 54.902401][ T5383] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 54.912282][ T5383] syz.4.702: attempt to access beyond end of device [ 54.912282][ T5383] loop4: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 54.925779][ T5383] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 54.934876][ T5383] syz.4.702: attempt to access beyond end of device [ 54.934876][ T5383] loop4: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 54.948457][ T5383] Buffer I/O error on dev loop4, logical block 133, lost async page write [ 54.957609][ T5383] syz.4.702: attempt to access beyond end of device [ 54.957609][ T5383] loop4: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 54.971068][ T5383] Buffer I/O error on dev loop4, logical block 150, lost async page write [ 54.985910][ T5383] Buffer I/O error on dev loop4, logical block 151, lost async page write [ 55.030375][ T5406] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 55.041617][ T5405] IPVS: stopping master sync thread 5406 ... [ 55.095677][ T5414] loop3: detected capacity change from 0 to 1024 [ 55.135043][ T5414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.165785][ T5426] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5426 comm=syz.2.723 [ 55.173900][ T5414] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.178271][ T5426] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5426 comm=syz.2.723 [ 55.206562][ T5428] loop4: detected capacity change from 0 to 512 [ 55.219333][ T5414] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #15: block 3: comm syz.3.717: lblock 3 mapped to illegal pblock 3 (length 13) [ 55.237258][ T5414] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 55.249879][ T5414] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.249879][ T5414] [ 55.268104][ T5428] EXT4-fs (loop4): too many log groups per flexible block group [ 55.275932][ T5428] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 55.286774][ T5414] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.717: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.294556][ T5428] EXT4-fs (loop4): mount failed [ 55.303578][ T5414] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.717: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.322024][ T5414] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.717: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.337741][ T5414] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.717: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.363677][ T5414] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.717: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.403139][ T5414] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.717: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.410240][ T5440] syz.4.728 (5440) used greatest stack depth: 9400 bytes left [ 55.418849][ T5414] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.717: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.440158][ T5414] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.717: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.456254][ T5414] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #15: block 3: comm syz.3.717: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.498946][ T3466] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.557627][ T3466] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.626175][ T5455] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.633543][ T5455] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.696564][ T5455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.706658][ T5455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.723163][ T5455] hsr0: left promiscuous mode [ 55.747434][ T5455] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.756500][ T5455] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.765440][ T5455] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.774373][ T5455] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.792622][ T3466] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.837129][ T3466] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.905793][ T3466] team0: left allmulticast mode [ 55.910767][ T3466] team_slave_0: left allmulticast mode [ 55.916441][ T3466] team_slave_1: left allmulticast mode [ 55.922074][ T3466] bridge0: port 3(team0) entered disabled state [ 55.929946][ T3466] bridge_slave_1: left allmulticast mode [ 55.935777][ T3466] bridge_slave_1: left promiscuous mode [ 55.941540][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.973959][ T3466] bridge_slave_0: left allmulticast mode [ 55.979724][ T3466] bridge_slave_0: left promiscuous mode [ 55.985791][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.020581][ T5475] SELinux: failed to load policy [ 56.062409][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.122770][ T3466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.133883][ T3466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.147392][ T3466] bond0 (unregistering): Released all slaves [ 56.202548][ T3466] hsr_slave_0: left promiscuous mode [ 56.208746][ T3466] hsr_slave_1: left promiscuous mode [ 56.215424][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.222961][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.234584][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.242050][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.261061][ T3466] veth1_macvtap: left promiscuous mode [ 56.273532][ T3466] veth0_macvtap: left promiscuous mode [ 56.284832][ T3466] veth1_vlan: left promiscuous mode [ 56.291625][ T3466] veth0_vlan: left promiscuous mode [ 56.320960][ T5512] loop4: detected capacity change from 0 to 1024 [ 56.328059][ T5512] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.335536][ T5512] EXT4-fs: Ignoring removed nobh option [ 56.341135][ T5512] EXT4-fs: Ignoring removed bh option [ 56.363782][ T5512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.400030][ T5512] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.757: inode #327696: comm syz.4.757: iget: illegal inode # [ 56.415292][ T5512] EXT4-fs (loop4): Remounting filesystem read-only [ 56.421892][ T5512] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.4.757: cleanup dec ref error -30 [ 56.433284][ T3466] team_slave_1 (unregistering): left promiscuous mode [ 56.436203][ T5512] EXT4-fs warning (device loop4): ext4_xattr_block_set:2190: inode #18: comm syz.4.757: dec ref error=-30 [ 56.453923][ T3466] team0 (unregistering): Port device team_slave_1 removed [ 56.464159][ T3466] team_slave_0 (unregistering): left promiscuous mode [ 56.472390][ T3466] team0 (unregistering): Port device team_slave_0 removed [ 56.499775][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.525768][ T3401] lo speed is unknown, defaulting to 1000 [ 56.531559][ T3401] infiniband syz0: ib_query_port failed (-19) [ 56.636961][ T5456] chnl_net:caif_netlink_parms(): no params data found [ 56.708859][ T5456] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.716106][ T5456] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.724986][ T5456] bridge_slave_0: entered allmulticast mode [ 56.737347][ T5456] bridge_slave_0: entered promiscuous mode [ 56.747172][ T5456] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.754426][ T5456] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.763455][ T5456] bridge_slave_1: entered allmulticast mode [ 56.770316][ T5456] bridge_slave_1: entered promiscuous mode [ 56.796309][ T5456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.818746][ T5456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.869879][ T5456] team0: Port device team_slave_0 added [ 56.877169][ T5456] team0: Port device team_slave_1 added [ 56.904668][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.911671][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.937771][ T5456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.949396][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.956389][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.982612][ T5456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.028108][ T5456] hsr_slave_0: entered promiscuous mode [ 57.034333][ T5456] hsr_slave_1: entered promiscuous mode [ 57.129313][ T5456] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.145757][ T5456] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 57.164233][ T5456] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.176185][ T5456] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.193266][ T5456] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.200494][ T5456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.207827][ T5456] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.214912][ T5456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.263450][ T5456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.295589][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.306238][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.324589][ T5593] loop4: detected capacity change from 0 to 1024 [ 57.331480][ T5593] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.357271][ T5456] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.361205][ T5599] loop2: detected capacity change from 0 to 128 [ 57.370676][ T5599] EXT4-fs: Ignoring removed nobh option [ 57.380114][ T5599] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.393291][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.400431][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.409530][ T5593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.421967][ T5599] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.432980][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.440168][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.480405][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.525275][ T5609] 9pnet: p9_errstr2errno: server reported unknown error [ 57.525477][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.582028][ T5616] loop4: detected capacity change from 0 to 2048 [ 57.614478][ T5616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.615942][ T5456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.760665][ T5456] veth0_vlan: entered promiscuous mode [ 57.769659][ T5456] veth1_vlan: entered promiscuous mode [ 57.787903][ T5456] veth0_macvtap: entered promiscuous mode [ 57.796230][ T5456] veth1_macvtap: entered promiscuous mode [ 57.808528][ T5456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.820270][ T5456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.831572][ T5456] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.840630][ T5456] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.849465][ T5456] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.858362][ T5456] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.869283][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.900596][ T5642] loop4: detected capacity change from 0 to 1024 [ 57.937229][ T5642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.950066][ T5642] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.986192][ T5642] EXT4-fs error (device loop4): ext4_map_blocks:709: inode #15: block 3: comm syz.4.802: lblock 3 mapped to illegal pblock 3 (length 13) [ 58.035698][ T5659] loop3: detected capacity change from 0 to 2048 [ 58.039471][ T5642] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 58.054599][ T5642] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.054599][ T5642] [ 58.065998][ T5661] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 58.065998][ T5661] program syz.1.809 not setting count and/or reply_len properly [ 58.067233][ T5662] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #15: block 3: comm syz.4.802: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.102650][ T5662] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #15: block 3: comm syz.4.802: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.125588][ T5659] loop3: p1 < > p4 [ 58.125676][ T5662] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #15: block 3: comm syz.4.802: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.130062][ T5659] loop3: p4 size 8388608 extends beyond EOD, truncated [ 58.145130][ T5662] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #15: block 3: comm syz.4.802: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.167122][ T5662] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #15: block 3: comm syz.4.802: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.168294][ T5668] capability: warning: `syz.5.812' uses deprecated v2 capabilities in a way that may be insecure [ 58.182656][ T5662] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #15: block 3: comm syz.4.802: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.208610][ T5662] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #15: block 3: comm syz.4.802: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.223045][ T5662] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #15: block 3: comm syz.4.802: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.249571][ T5662] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #15: block 3: comm syz.4.802: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.299361][ T5677] loop3: detected capacity change from 0 to 512 [ 58.306088][ T5675] loop1: detected capacity change from 0 to 2048 [ 58.306429][ T5677] EXT4-fs: Ignoring removed nobh option [ 58.320975][ T5677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.347558][ T5675] loop1: p1 < > p4 [ 58.353386][ T5675] loop1: p4 size 8388608 extends beyond EOD, truncated [ 58.361278][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.384298][ T5680] netlink: 33912 bytes leftover after parsing attributes in process `syz.3.818'. [ 58.455258][ T5688] loop1: detected capacity change from 0 to 512 [ 58.477809][ T5688] EXT4-fs (loop1): 1 orphan inode deleted [ 58.494812][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 58.507764][ T5688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.534917][ T5688] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.551809][ T5688] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.625482][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.644889][ T5704] loop1: detected capacity change from 0 to 128 [ 58.681901][ T5710] loop3: detected capacity change from 0 to 128 [ 58.696978][ T5710] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.716981][ T5710] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.738177][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 58.738199][ T29] audit: type=1400 audit(1748375794.680:1201): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 58.777883][ T29] audit: type=1400 audit(1748375794.710:1202): avc: denied { write } for pid=5709 comm="syz.3.831" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.799921][ T29] audit: type=1400 audit(1748375794.710:1203): avc: denied { add_name } for pid=5709 comm="syz.3.831" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.820787][ T29] audit: type=1400 audit(1748375794.710:1204): avc: denied { create } for pid=5709 comm="syz.3.831" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.841171][ T29] audit: type=1400 audit(1748375794.710:1205): avc: denied { read write open } for pid=5709 comm="syz.3.831" path="/188/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.869088][ T29] audit: type=1400 audit(1748375794.750:1206): avc: denied { prog_load } for pid=5712 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 58.888770][ T29] audit: type=1400 audit(1748375794.750:1207): avc: denied { bpf } for pid=5712 comm="syz.1.832" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.909361][ T29] audit: type=1400 audit(1748375794.750:1208): avc: denied { perfmon } for pid=5712 comm="syz.1.832" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.930273][ T29] audit: type=1400 audit(1748375794.770:1209): avc: denied { prog_run } for pid=5712 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 58.949462][ T29] audit: type=1400 audit(1748375794.810:1210): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.970654][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.973180][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.177245][ T5738] netlink: 144 bytes leftover after parsing attributes in process `syz.5.844'. [ 59.213664][ T5744] loop1: detected capacity change from 0 to 512 [ 59.220690][ T5744] EXT4-fs: dax option not supported [ 59.362662][ T5763] netlink: 76 bytes leftover after parsing attributes in process `syz.1.856'. [ 59.415924][ T5771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.860'. [ 59.481059][ T5774] No source specified [ 59.503395][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.862'. [ 59.525727][ T5778] loop2: detected capacity change from 0 to 1024 [ 59.536746][ T5778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.555356][ T5778] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 59.567845][ T5778] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.567845][ T5778] [ 59.577717][ T5778] EXT4-fs (loop2): Total free blocks count 0 [ 59.583836][ T5778] EXT4-fs (loop2): Free/Dirty block details [ 59.589751][ T5778] EXT4-fs (loop2): free_blocks=0 [ 59.594722][ T5778] EXT4-fs (loop2): dirty_blocks=0 [ 59.599753][ T5778] EXT4-fs (loop2): Block reservation details [ 59.605792][ T5778] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 59.627739][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.787076][ T5802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.873'. [ 59.796353][ T5802] netlink: 108 bytes leftover after parsing attributes in process `syz.1.873'. [ 59.817194][ T5802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.873'. [ 59.820338][ T5806] loop2: detected capacity change from 0 to 1024 [ 59.826610][ T5802] netlink: 108 bytes leftover after parsing attributes in process `syz.1.873'. [ 59.835000][ T5806] EXT4-fs: Ignoring removed orlov option [ 59.841799][ T5802] netlink: 84 bytes leftover after parsing attributes in process `syz.1.873'. [ 59.983702][ T5816] netlink: 'syz.4.879': attribute type 10 has an invalid length. [ 59.999472][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.007791][ T5816] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 60.216717][ T5834] program syz.1.888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.363382][ T3401] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 60.370873][ T3401] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 60.382241][ T3401] hid-generic 0000:0003:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 [ 60.457441][ T5844] batadv_slave_1: entered promiscuous mode [ 60.468290][ T5846] loop3: detected capacity change from 0 to 164 [ 60.477925][ T5843] batadv_slave_1: left promiscuous mode [ 60.487467][ T5846] bio_check_eod: 28 callbacks suppressed [ 60.487486][ T5846] syz.3.893: attempt to access beyond end of device [ 60.487486][ T5846] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 60.509277][ T5846] syz.3.893: attempt to access beyond end of device [ 60.509277][ T5846] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 60.832717][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.844501][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.146620][ T5904] netlink: 'syz.4.919': attribute type 2 has an invalid length. [ 61.237455][ T5911] loop5: detected capacity change from 0 to 512 [ 61.246513][ T5911] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 61.506074][ T5942] loop5: detected capacity change from 0 to 128 [ 61.593994][ T5953] vhci_hcd: invalid port number 96 [ 61.599163][ T5953] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 61.682974][ T5970] loop3: detected capacity change from 0 to 512 [ 61.710774][ T5974] netlink: 'syz.1.951': attribute type 1 has an invalid length. [ 61.722043][ T5970] EXT4-fs (loop3): too many log groups per flexible block group [ 61.729798][ T5970] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 61.752531][ T5970] EXT4-fs (loop3): mount failed [ 61.927253][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.934690][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.997322][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.008347][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.040982][ T5999] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.050061][ T5999] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.059112][ T5999] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.068496][ T5999] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.140233][ T6014] loop4: detected capacity change from 0 to 512 [ 62.166351][ T6014] EXT4-fs (loop4): too many log groups per flexible block group [ 62.174210][ T6014] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 62.185420][ T6014] EXT4-fs (loop4): mount failed [ 62.375928][ T6042] loop4: detected capacity change from 0 to 1024 [ 62.402561][ T6042] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 62.415266][ T6042] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.415266][ T6042] [ 62.425373][ T6042] EXT4-fs (loop4): Total free blocks count 0 [ 62.431549][ T6042] EXT4-fs (loop4): Free/Dirty block details [ 62.437562][ T6042] EXT4-fs (loop4): free_blocks=0 [ 62.442783][ T6042] EXT4-fs (loop4): dirty_blocks=0 [ 62.447888][ T6042] EXT4-fs (loop4): Block reservation details [ 62.454021][ T6042] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 62.481873][ T6052] ALSA: seq fatal error: cannot create timer (-19) [ 62.578511][ T6072] program syz.3.986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.683075][ T6088] rdma_op ffff888122137d80 conn xmit_rdma 0000000000000000 [ 62.778203][ T6105] loop4: detected capacity change from 0 to 1024 [ 62.795930][ T6103] xt_CT: No such helper "snmp_trap" [ 62.796425][ T6105] EXT4-fs: Ignoring removed orlov option [ 62.808806][ T6105] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 62.820196][ T6110] loop1: detected capacity change from 0 to 1024 [ 62.833381][ T6105] EXT4-fs error (device loop4): ext4_find_dest_de:2054: inode #12: block 7: comm syz.4.995: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 62.855476][ T6105] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.995: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 62.883310][ T6110] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 62.895892][ T6110] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.895892][ T6110] [ 62.905709][ T6110] EXT4-fs (loop1): Total free blocks count 0 [ 62.911720][ T6110] EXT4-fs (loop1): Free/Dirty block details [ 62.917881][ T6110] EXT4-fs (loop1): free_blocks=0 [ 62.922966][ T6110] EXT4-fs (loop1): dirty_blocks=0 [ 62.928043][ T6110] EXT4-fs (loop1): Block reservation details [ 62.934269][ T6110] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 62.946936][ T6118] SELinux: failed to load policy [ 62.996579][ T6130] loop1: detected capacity change from 0 to 512 [ 63.026010][ T6130] EXT4-fs (loop1): too many log groups per flexible block group [ 63.034489][ T6130] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 63.049380][ T6130] EXT4-fs (loop1): mount failed [ 63.076301][ T6141] loop4: detected capacity change from 0 to 128 [ 63.111336][ T6139] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 63.119545][ T6139] FAT-fs (loop4): Filesystem has been set read-only [ 63.132632][ T6139] syz.4.1000: attempt to access beyond end of device [ 63.132632][ T6139] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 63.153072][ T6139] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 63.161171][ T6139] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 63.183937][ T6139] syz.4.1000: attempt to access beyond end of device [ 63.183937][ T6139] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.198074][ T6139] syz.4.1000: attempt to access beyond end of device [ 63.198074][ T6139] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.214019][ T6151] bridge0: port 3(team0) entered disabled state [ 63.220464][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.227807][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.244325][ T6141] syz.4.1000: attempt to access beyond end of device [ 63.244325][ T6141] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.272514][ T6141] syz.4.1000: attempt to access beyond end of device [ 63.272514][ T6141] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.304015][ T6141] syz.4.1000: attempt to access beyond end of device [ 63.304015][ T6141] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.331888][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.349308][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.385510][ T6151] hsr0: left promiscuous mode [ 63.418900][ T6151] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.427534][ T6151] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.436079][ T6151] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.444599][ T6151] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.546327][ T6188] loop1: detected capacity change from 0 to 1024 [ 63.558872][ T6188] EXT4-fs: Ignoring removed orlov option [ 63.575347][ T6188] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 63.707427][ T6218] loop3: detected capacity change from 0 to 2048 [ 63.734992][ T6218] EXT4-fs (loop3): failed to initialize system zone (-117) [ 63.745679][ T6218] EXT4-fs (loop3): mount failed [ 63.778869][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 63.778887][ T29] audit: type=1326 audit(1748375799.720:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966af9e969 code=0x7ffc0000 [ 63.808932][ T29] audit: type=1326 audit(1748375799.720:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966af9e969 code=0x7ffc0000 [ 63.848901][ T29] audit: type=1326 audit(1748375799.720:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f966af9e969 code=0x7ffc0000 [ 63.872374][ T29] audit: type=1326 audit(1748375799.720:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966af9e969 code=0x7ffc0000 [ 63.896155][ T29] audit: type=1326 audit(1748375799.720:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966af9e969 code=0x7ffc0000 [ 63.920011][ T29] audit: type=1326 audit(1748375799.720:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f966af9e969 code=0x7ffc0000 [ 63.944007][ T29] audit: type=1326 audit(1748375799.720:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966af9e969 code=0x7ffc0000 [ 63.968476][ T29] audit: type=1326 audit(1748375799.720:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966af9e969 code=0x7ffc0000 [ 63.993204][ T29] audit: type=1326 audit(1748375799.720:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f966af9e969 code=0x7ffc0000 [ 64.016816][ T29] audit: type=1326 audit(1748375799.730:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966af9e969 code=0x7ffc0000 [ 64.047034][ T6241] netem: incorrect gi model size [ 64.052050][ T6241] netem: change failed [ 64.196702][ T6264] sd 0:0:1:0: device reset [ 64.246649][ T6270] __nla_validate_parse: 15 callbacks suppressed [ 64.246672][ T6270] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1026'. [ 64.515686][ T6306] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 65.089602][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1065'. [ 65.143055][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1066'. [ 65.455988][ T6385] syzkaller0: entered allmulticast mode [ 65.537935][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1075'. [ 65.560363][ T6387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.671454][ T6398] loop5: detected capacity change from 0 to 512 [ 65.714320][ T6398] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.761604][ T6398] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.895280][ T6419] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1089'. [ 65.912353][ T6421] loop5: detected capacity change from 0 to 512 [ 65.944412][ T6421] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.953702][ T6421] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 65.998376][ T6421] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 66.017850][ T6421] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 66.027919][ T6421] System zones: 0-2, 18-18, 34-34 [ 66.033726][ T6421] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 66.048568][ T6421] EXT4-fs (loop5): 1 truncate cleaned up [ 66.162034][ T6458] netlink: zone id is out of range [ 66.167652][ T6461] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 66.167652][ T6461] The task syz.4.1100 (6461) triggered the difference, watch for misbehavior. [ 66.201254][ T6458] netlink: zone id is out of range [ 66.214236][ T6458] netlink: zone id is out of range [ 66.230920][ T6458] netlink: zone id is out of range [ 66.237369][ T6458] netlink: zone id is out of range [ 66.245241][ T6458] netlink: zone id is out of range [ 66.250402][ T6458] netlink: zone id is out of range [ 66.255754][ T6458] netlink: zone id is out of range [ 66.261557][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 66.270666][ T6467] ref_ctr_offset mismatch. inode: 0x4a7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x2000000004c0 [ 66.270888][ T6458] netlink: zone id is out of range [ 66.293596][ T6458] netlink: zone id is out of range [ 66.294916][ T6469] bond1: entered promiscuous mode [ 66.303829][ T6469] bond1: entered allmulticast mode [ 66.310489][ T6469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.352670][ T6472] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1113'. [ 66.555760][ T6503] loop3: detected capacity change from 0 to 512 [ 66.569977][ T6503] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.703360][ T6510] infiniband syz!: set down [ 66.708013][ T6510] infiniband syz!: added team_slave_0 [ 66.722941][ T6510] RDS/IB: syz!: added [ 66.727507][ T6510] smc: adding ib device syz! with port count 1 [ 66.733876][ T6510] smc: ib device syz! port 1 has pnetid [ 66.747889][ T6525] loop5: detected capacity change from 0 to 164 [ 66.761020][ T6525] syz.5.1138: attempt to access beyond end of device [ 66.761020][ T6525] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 66.780712][ T6525] syz.5.1138: attempt to access beyond end of device [ 66.780712][ T6525] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 66.817044][ T6529] loop5: detected capacity change from 0 to 512 [ 66.824319][ T6529] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 66.835494][ T6529] EXT4-fs (loop5): 1 truncate cleaned up [ 66.960295][ T6545] lo: entered promiscuous mode [ 66.966517][ T6545] tunl0: entered promiscuous mode [ 66.972739][ T6545] gre0: entered promiscuous mode [ 66.979281][ T6545] gretap0: entered promiscuous mode [ 66.989034][ T6545] erspan0: entered promiscuous mode [ 66.996496][ T6545] ip_vti0: entered promiscuous mode [ 67.003204][ T6545] ip6_vti0: entered promiscuous mode [ 67.011446][ T6545] sit0: entered promiscuous mode [ 67.023855][ T6545] ip6tnl0: entered promiscuous mode [ 67.032072][ T6545] ip6gre0: entered promiscuous mode [ 67.038379][ T6545] syz_tun: entered promiscuous mode [ 67.044962][ T6545] ip6gretap0: entered promiscuous mode [ 67.051950][ T6545] bridge0: entered promiscuous mode [ 67.061557][ T6545] vcan0: entered promiscuous mode [ 67.068491][ T6545] bond0: entered promiscuous mode [ 67.073621][ T6545] bond_slave_0: entered promiscuous mode [ 67.079440][ T6545] bond_slave_1: entered promiscuous mode [ 67.085279][ T6545] batadv0: entered promiscuous mode [ 67.091178][ T6545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.099633][ T6545] team0: entered promiscuous mode [ 67.104917][ T6545] team_slave_0: entered promiscuous mode [ 67.110713][ T6545] team_slave_1: entered promiscuous mode [ 67.117112][ T6545] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.125421][ T6545] dummy0: entered promiscuous mode [ 67.131763][ T6545] nlmon0: entered promiscuous mode [ 67.142169][ T6545] caif0: entered promiscuous mode [ 67.152002][ T6557] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 67.396476][ T6585] loop5: detected capacity change from 0 to 128 [ 67.403508][ T6585] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.436702][ T3466] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.606552][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 67.641682][ T10] IPVS: starting estimator thread 0... [ 67.668065][ T6620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1178'. [ 67.677238][ T6620] netem: change failed [ 67.691155][ T6622] netlink: 'syz.1.1179': attribute type 5 has an invalid length. [ 67.704551][ T6625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1180'. [ 67.720487][ T6625] netem: change failed [ 67.756224][ T6618] IPVS: using max 2400 ests per chain, 120000 per kthread [ 67.839147][ T6642] SELinux: policydb version 0 does not match my version range 15-34 [ 67.847703][ T6642] SELinux: failed to load policy [ 68.058959][ T6662] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.135182][ T6662] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.207925][ T6662] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.261902][ T6662] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.351169][ T6662] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.364022][ T6662] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.380269][ T6662] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.417452][ T6662] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.429074][ T6682] vlan2: entered allmulticast mode [ 68.434865][ T6682] dummy0: entered allmulticast mode [ 68.567208][ T6700] vhci_hcd: invalid port number 224 [ 68.736935][ T6714] 9pnet_fd: Insufficient options for proto=fd [ 68.824451][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 68.824508][ T29] audit: type=1326 audit(1748375804.770:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.2.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 68.825039][ T29] audit: type=1326 audit(1748375804.770:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.2.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 68.825126][ T29] audit: type=1326 audit(1748375804.770:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.2.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 68.831857][ T29] audit: type=1326 audit(1748375804.770:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.2.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 69.269195][ T6743] tipc: Failed to remove unknown binding: 66,1,1/0:3637530012/3637530014 [ 69.269226][ T6743] tipc: Failed to remove unknown binding: 66,1,1/0:3637530012/3637530014 [ 69.335280][ T6750] __nla_validate_parse: 3 callbacks suppressed [ 69.335328][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1236'. [ 69.338265][ T6750] vlan2: entered promiscuous mode [ 69.356471][ T6750] veth0_virt_wifi: entered promiscuous mode [ 69.412511][ T29] audit: type=1400 audit(1748375805.350:1650): avc: denied { getopt } for pid=6751 comm="syz.4.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.502421][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 69.587773][ T6772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1247'. [ 69.616529][ T29] audit: type=1400 audit(1748375805.560:1651): avc: denied { listen } for pid=6738 comm="syz.2.1231" lport=48300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.689765][ T6779] netlink: 'syz.3.1249': attribute type 10 has an invalid length. [ 69.698014][ T6779] veth0_vlan: entered allmulticast mode [ 69.747479][ T6779] veth0_vlan: left promiscuous mode [ 69.753975][ T29] audit: type=1326 audit(1748375805.690:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966af9e969 code=0x7ffc0000 [ 69.777698][ T29] audit: type=1326 audit(1748375805.690:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966af9e969 code=0x7ffc0000 [ 69.801256][ T29] audit: type=1326 audit(1748375805.690:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f966af9e969 code=0x7ffc0000 [ 69.825391][ T29] audit: type=1326 audit(1748375805.690:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966af9e969 code=0x7ffc0000 [ 69.874041][ T6779] veth0_vlan: entered promiscuous mode [ 69.882160][ T6779] team0: Device veth0_vlan failed to register rx_handler [ 69.920323][ T6781] netem: incorrect ge model size [ 69.925524][ T6781] netem: change failed [ 69.939566][ T6791] loop5: detected capacity change from 0 to 164 [ 69.979512][ T6791] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 70.008485][ T6791] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 70.163751][ T6811] loop3: detected capacity change from 0 to 2048 [ 70.204195][ T6811] Alternate GPT is invalid, using primary GPT. [ 70.210591][ T6811] loop3: p1 p2 p3 [ 70.519663][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.527923][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.536127][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.544406][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.552627][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.560932][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.569296][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.577442][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.585759][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.594049][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.602140][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.610261][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.618376][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.626523][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.634766][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.642927][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.651091][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.659338][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.667653][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.675949][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.684059][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.692326][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.700420][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.708631][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.716809][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.724970][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.733136][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.741273][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.749399][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: unknown main item tag 0x0 [ 70.758072][ T1038] hid-generic FFFF:FFFFFFFC:20000001.0004: hidraw0: HID va0.69 Device [syz0] on syz1 [ 70.780620][ T6829] 9pnet_fd: Insufficient options for proto=fd [ 70.807071][ T6831] loop2: detected capacity change from 0 to 1764 [ 70.880028][ T6842] loop2: detected capacity change from 0 to 512 [ 70.905854][ T6842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.937985][ T6842] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1277: bad orphan inode 11 [ 70.949782][ T6842] ext4_test_bit(bit=10, block=4) = 1 [ 70.955328][ T6842] is_bad_inode(inode)=0 [ 70.959561][ T6842] NEXT_ORPHAN(inode)=2080374784 [ 70.964561][ T6842] max_ino=32 [ 70.967769][ T6842] i_nlink=0 [ 70.971213][ T6842] EXT4-fs (loop2): 1 truncate cleaned up [ 70.977494][ T6842] EXT4-fs mount: 18 callbacks suppressed [ 70.977507][ T6842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.024485][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.069243][ T6853] ip6tnl1: entered promiscuous mode [ 71.093149][ T6855] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1281'. [ 71.099798][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1279'. [ 71.389170][ T6879] sd 0:0:1:0: device reset [ 71.952162][ T6907] netlink: 'syz.5.1301': attribute type 1 has an invalid length. [ 71.986382][ T6907] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.012121][ T6907] bond2: (slave gretap1): making interface the new active one [ 72.024679][ T6907] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 72.263112][ T6927] vhci_hcd: invalid port number 23 [ 72.866984][ T6974] syzkaller0: entered allmulticast mode [ 73.160417][ T6984] vlan2: entered allmulticast mode [ 73.381753][ T7019] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 73.403849][ T7019] bridge0: port 3(team0) entered disabled state [ 73.412314][ T7019] team0 (unregistering): left allmulticast mode [ 73.418929][ T7019] team_slave_0: left allmulticast mode [ 73.424482][ T7019] team_slave_1: left allmulticast mode [ 73.430008][ T7019] bridge0: port 3(team0) entered disabled state [ 73.437426][ T7019] team_slave_0: left promiscuous mode [ 73.444801][ T7019] team0 (unregistering): Port device team_slave_0 removed [ 73.452237][ T7019] team_slave_1: left promiscuous mode [ 73.459722][ T7019] team0 (unregistering): Port device team_slave_1 removed [ 73.561973][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1354'. [ 73.848186][ T7057] : renamed from pim6reg1 [ 73.912645][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 74.080760][ T7074] ref_ctr_offset mismatch. inode: 0x5fa offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x2000000004c0 [ 74.138184][ T7078] loop4: detected capacity change from 0 to 512 [ 74.146229][ T7078] ext4: Unknown parameter 'obj_type' [ 74.238113][ T7092] : renamed from vlan1 [ 74.268786][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'. [ 74.324974][ T7100] netlink: 'syz.3.1385': attribute type 1 has an invalid length. [ 74.339838][ T7100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.363082][ T7100] bond1: (slave gretap1): making interface the new active one [ 74.371384][ T7100] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 74.433239][ T7105] loop3: detected capacity change from 0 to 2048 [ 74.440175][ T7105] EXT4-fs: Ignoring removed bh option [ 74.459111][ T7105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.491927][ T7110] ref_ctr_offset mismatch. inode: 0x5a6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x2000000004c0 [ 74.733776][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.881971][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 74.881988][ T29] audit: type=1400 audit(1748375810.820:1714): avc: denied { setattr } for pid=7104 comm="syz.3.1387" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.911085][ T7108] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.922737][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.970575][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 74.983086][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.983086][ T51] [ 74.992956][ T51] EXT4-fs (loop3): Total free blocks count 0 [ 74.998995][ T51] EXT4-fs (loop3): Free/Dirty block details [ 75.004921][ T51] EXT4-fs (loop3): free_blocks=2415919104 [ 75.010651][ T51] EXT4-fs (loop3): dirty_blocks=8224 [ 75.016053][ T51] EXT4-fs (loop3): Block reservation details [ 75.022061][ T51] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 75.049324][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 75.082322][ T7130] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 75.094898][ T7130] team_slave_0: left promiscuous mode [ 75.114358][ T7130] team0 (unregistering): Port device team_slave_0 removed [ 75.125119][ T7130] team_slave_1: left promiscuous mode [ 75.141676][ T7130] team0 (unregistering): Port device team_slave_1 removed [ 75.176463][ T29] audit: type=1326 audit(1748375811.120:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 75.200005][ T29] audit: type=1326 audit(1748375811.120:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 75.224937][ T29] audit: type=1326 audit(1748375811.170:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 75.248480][ T29] audit: type=1326 audit(1748375811.170:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 75.272316][ T29] audit: type=1326 audit(1748375811.170:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 75.295831][ T29] audit: type=1326 audit(1748375811.170:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 75.319548][ T29] audit: type=1326 audit(1748375811.170:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 75.391707][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.399203][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.400965][ T29] audit: type=1400 audit(1748375811.330:1722): avc: denied { mounton } for pid=7139 comm="syz.1.1404" path="/bus" dev="ramfs" ino=15762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=fifo_file permissive=1 [ 75.406780][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.438569][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.446185][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.453662][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.461130][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.468587][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.476033][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.483438][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.490944][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.498393][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.505836][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.513350][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.523896][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 75.533082][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.540550][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.548018][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.555612][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.563037][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.570739][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.578180][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.585625][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.593122][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.600583][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.608167][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.615697][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.623094][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.631087][ T3401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 75.645012][ T7144] bond1: entered promiscuous mode [ 75.650117][ T7144] bond1: entered allmulticast mode [ 75.655748][ T7144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.670965][ T3401] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 75.708598][ T29] audit: type=1326 audit(1748375811.650:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7150 comm="syz.3.1408" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f429134e969 code=0x0 [ 75.969024][ T7163] SELinux: failed to load policy [ 76.075403][ T7172] : renamed from pim6reg1 [ 76.146376][ T7174] veth0_vlan: entered allmulticast mode [ 76.162987][ T7174] : renamed from vlan1 [ 76.240346][ T7181] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1419'. [ 76.847082][ T7217] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 77.959593][ T7268] SELinux: security_context_str_to_sid () failed with errno=-22 [ 78.378904][ T7296] tipc: Failed to remove unknown binding: 66,1,1/0:2517891550/2517891552 [ 78.387608][ T7296] tipc: Failed to remove unknown binding: 66,1,1/0:2517891550/2517891552 [ 78.715292][ T7335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1488'. [ 78.812788][ T7348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1494'. [ 78.822290][ T7348] netem: change failed [ 79.007990][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1505'. [ 79.019192][ T7373] loop9: detected capacity change from 0 to 7 [ 79.026004][ T7373] buffer_io_error: 26 callbacks suppressed [ 79.026022][ T7373] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.040989][ T7373] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.049002][ T7373] loop9: unable to read partition table [ 79.054863][ T7373] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 79.054863][ T7373] U) failed (rc=-5) [ 79.099358][ T7378] loop3: detected capacity change from 0 to 1024 [ 79.109650][ T7378] EXT4-fs: Ignoring removed orlov option [ 79.122302][ T7378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.214583][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'. [ 79.389461][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1524'. [ 79.424291][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1524'. [ 79.644074][ T7432] net_ratelimit: 39 callbacks suppressed [ 79.644092][ T7432] openvswitch: netlink: Message has 6 unknown bytes. [ 79.713194][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 79.751586][ T7434] veth0_macvtap: left promiscuous mode [ 79.764492][ T7434] macvtap0: refused to change device tx_queue_len [ 80.028273][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 80.028338][ T29] audit: type=1326 audit(1748375815.970:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 80.058963][ T29] audit: type=1326 audit(1748375815.970:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 80.082686][ T29] audit: type=1326 audit(1748375816.000:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 80.106624][ T29] audit: type=1326 audit(1748375816.000:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 80.130199][ T29] audit: type=1326 audit(1748375816.000:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 80.154412][ T29] audit: type=1326 audit(1748375816.000:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 80.177944][ T29] audit: type=1326 audit(1748375816.000:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 80.201420][ T29] audit: type=1326 audit(1748375816.000:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 80.224926][ T29] audit: type=1326 audit(1748375816.000:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 80.248354][ T29] audit: type=1326 audit(1748375816.000:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.1.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6f751e969 code=0x7ffc0000 [ 80.287885][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.339222][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1550'. [ 80.697436][ T7522] loop4: detected capacity change from 0 to 512 [ 80.719830][ T7522] EXT4-fs: Ignoring removed i_version option [ 80.727321][ T7522] ext4: Bad value for 'auto_da_alloc' [ 80.834893][ T7540] ref_ctr_offset mismatch. inode: 0x644 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 80.902487][ T7551] geneve0: entered allmulticast mode [ 80.954775][ T7559] loop3: detected capacity change from 0 to 512 [ 80.976713][ T7559] EXT4-fs: Ignoring removed i_version option [ 80.993799][ T7559] ext4: Bad value for 'auto_da_alloc' [ 81.073088][ T7575] $H: renamed from bond0 [ 81.089738][ T7575] $H: entered promiscuous mode [ 81.094936][ T7575] bond_slave_0: entered promiscuous mode [ 81.100714][ T7575] bond_slave_1: entered promiscuous mode [ 81.191405][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 81.212187][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 82.211728][ T7643] geneve0: entered allmulticast mode [ 82.272701][ T7651] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 82.425876][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1626'. [ 82.518164][ T7680] hub 2-0:1.0: USB hub found [ 82.527537][ T7680] hub 2-0:1.0: 8 ports detected [ 82.558086][ T7689] netlink: 'syz.3.1631': attribute type 298 has an invalid length. [ 82.725720][ T7722] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.998675][ T7762] block device autoloading is deprecated and will be removed. [ 83.016090][ T7769] Illegal XDP return value 7769 on prog (id 1199) dev N/A, expect packet loss! [ 83.057776][ T7767] pim6reg: entered allmulticast mode [ 83.083400][ T7767] pim6reg: left allmulticast mode [ 83.117027][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1667'. [ 83.358877][ T7815] loop3: detected capacity change from 0 to 512 [ 83.377596][ T7815] EXT4-fs (loop3): orphan cleanup on readonly fs [ 83.385221][ T7815] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1675: bg 0: block 248: padding at end of block bitmap is not set [ 83.405121][ T7815] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1675: Failed to acquire dquot type 1 [ 83.418053][ T7815] EXT4-fs (loop3): 1 truncate cleaned up [ 83.438318][ T7815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.464616][ T7815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.521301][ T7815] syz.3.1675 (7815) used greatest stack depth: 9320 bytes left [ 83.531065][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1680'. [ 83.555576][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1680'. [ 83.598970][ T7838] netlink: 'syz.2.1685': attribute type 1 has an invalid length. [ 83.607365][ T7838] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1685'. [ 83.617103][ T7838] NCSI netlink: No device for ifindex 540032357 [ 83.765991][ T7859] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1695'. [ 83.775496][ T7859] netlink: 'syz.1.1695': attribute type 5 has an invalid length. [ 83.783421][ T7859] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1695'. [ 83.799887][ T7861] loop4: detected capacity change from 0 to 512 [ 83.816270][ T7861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.829062][ T7861] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.879332][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.308363][ T7940] loop3: detected capacity change from 0 to 1024 [ 84.326006][ T7940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.341665][ T7940] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1718: bg 0: block 88: padding at end of block bitmap is not set [ 84.371850][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.801594][ T8012] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 85.681711][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 85.681731][ T29] audit: type=1326 audit(1748376334.622:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 85.720027][ T29] audit: type=1326 audit(1748376334.652:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 85.743796][ T29] audit: type=1326 audit(1748376334.662:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 85.767522][ T29] audit: type=1326 audit(1748376334.662:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 85.791225][ T29] audit: type=1326 audit(1748376334.662:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 85.814837][ T29] audit: type=1326 audit(1748376334.662:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 85.838331][ T29] audit: type=1326 audit(1748376334.662:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 85.862736][ T29] audit: type=1326 audit(1748376334.662:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 85.886595][ T29] audit: type=1326 audit(1748376334.662:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 85.910091][ T29] audit: type=1326 audit(1748376334.662:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 85.996041][ T8073] __nla_validate_parse: 1 callbacks suppressed [ 85.996060][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'. [ 86.028672][ T8076] netlink: 'syz.5.1736': attribute type 4 has an invalid length. [ 86.036835][ T8076] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1736'. [ 86.057289][ T8078] macvlan2: entered promiscuous mode [ 86.063802][ T8078] macvlan2: entered allmulticast mode [ 86.069645][ T8078] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 86.240486][ T8106] dvmrp1: entered allmulticast mode [ 86.257797][ T8106] dvmrp1: left allmulticast mode [ 86.313474][ T8115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1754'. [ 86.475673][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 86.486092][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 86.565303][ T8145] SELinux: ebitmap: truncated map [ 86.571644][ T8145] SELinux: failed to load policy [ 86.578494][ T8146] netlink: 'syz.5.1771': attribute type 7 has an invalid length. [ 86.586324][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1771'. [ 86.589005][ T8150] syzkaller1: entered promiscuous mode [ 86.600737][ T8150] syzkaller1: entered allmulticast mode [ 86.852244][ T8188] netlink: 'syz.2.1791': attribute type 13 has an invalid length. [ 86.952098][ T8188] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.959517][ T8188] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.038954][ T8188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.050311][ T8188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.060633][ T8212] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1802'. [ 87.066282][ T8188] hsr0: left promiscuous mode [ 87.092042][ T8188] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.100725][ T8188] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.109266][ T8188] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.117766][ T8188] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.132203][ T8198] vlan2: entered allmulticast mode [ 87.141940][ T8212] 0XD: renamed from gretap0 [ 87.148863][ T8212] 0XD: entered allmulticast mode [ 87.156222][ T8212] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 87.420073][ T8255] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 87.447311][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'. [ 87.456840][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'. [ 87.483044][ T8260] loop4: detected capacity change from 0 to 512 [ 87.489790][ T8260] EXT4-fs: Ignoring removed oldalloc option [ 87.496405][ T8260] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.505698][ T8260] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 88.009003][ T8295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1840'. [ 88.382406][ T8324] unsupported nla_type 52263 [ 88.714785][ T8401] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 89.080205][ T8435] loop4: detected capacity change from 0 to 1024 [ 89.105650][ T8441] smc: net device bond0 applied user defined pnetid SYZ2 [ 89.131446][ T8435] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 89.142206][ T8441] smc: net device bond0 erased user defined pnetid SYZ2 [ 89.159680][ T8435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.252749][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.317109][ T8451] xt_hashlimit: size too large, truncated to 1048576 [ 89.374857][ T8455] C: renamed from lo (while UP) [ 89.489683][ T8455] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 89.785526][ T8484] SELinux: syz.4.1896 (8484) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 90.077522][ T8516] loop3: detected capacity change from 0 to 1024 [ 90.084634][ T8516] EXT4-fs: Ignoring removed nobh option [ 90.090231][ T8516] EXT4-fs: Ignoring removed bh option [ 90.109850][ T8516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.192206][ T8532] loop4: detected capacity change from 0 to 512 [ 90.205125][ T8532] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.218108][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.236691][ T8532] EXT4-fs (loop4): 1 truncate cleaned up [ 90.245480][ T8532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.322810][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.341377][ T8549] loop2: detected capacity change from 0 to 256 [ 90.575376][ T8583] unsupported nlmsg_type 40 [ 91.401219][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 91.401236][ T29] audit: type=1400 audit(1748376340.342:2292): avc: denied { create } for pid=8622 comm="syz.2.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.486536][ T8625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8625 comm=syz.2.1958 [ 91.614710][ T8632] loop2: detected capacity change from 0 to 128 [ 91.669636][ T8632] syz.2.1961: attempt to access beyond end of device [ 91.669636][ T8632] loop2: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 91.683276][ T8632] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 91.708697][ T8632] syz.2.1961: attempt to access beyond end of device [ 91.708697][ T8632] loop2: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 91.722202][ T8632] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 91.751228][ T8632] syz.2.1961: attempt to access beyond end of device [ 91.751228][ T8632] loop2: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 91.764893][ T8632] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 91.783705][ T8632] syz.2.1961: attempt to access beyond end of device [ 91.783705][ T8632] loop2: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 91.797433][ T8632] Buffer I/O error on dev loop2, logical block 134, lost async page write [ 91.824521][ T8632] syz.2.1961: attempt to access beyond end of device [ 91.824521][ T8632] loop2: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 91.838262][ T8632] Buffer I/O error on dev loop2, logical block 135, lost async page write [ 91.882099][ T8632] syz.2.1961: attempt to access beyond end of device [ 91.882099][ T8632] loop2: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 91.895876][ T8632] Buffer I/O error on dev loop2, logical block 136, lost async page write [ 91.925800][ T8632] syz.2.1961: attempt to access beyond end of device [ 91.925800][ T8632] loop2: rw=2049, sector=137, nr_sectors = 64 limit=128 [ 91.930982][ T8630] loop3: detected capacity change from 0 to 512 [ 91.947871][ T8632] syz.2.1961: attempt to access beyond end of device [ 91.947871][ T8632] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 91.961684][ T8632] syz.2.1961: attempt to access beyond end of device [ 91.961684][ T8632] loop2: rw=2049, sector=225, nr_sectors = 9 limit=128 [ 91.976180][ T8630] EXT4-fs: Ignoring removed i_version option [ 91.982318][ T8630] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.994693][ T8630] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.1959: inode #13: comm syz.3.1959: iget: illegal inode # [ 92.043798][ T8630] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1959: couldn't read orphan inode 13 (err -117) [ 92.090330][ T29] audit: type=1326 audit(1748376341.022:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 92.091000][ T8630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.113950][ T29] audit: type=1326 audit(1748376341.032:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 92.149605][ T29] audit: type=1326 audit(1748376341.032:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 92.173360][ T29] audit: type=1326 audit(1748376341.032:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 92.196704][ T29] audit: type=1326 audit(1748376341.032:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 92.220225][ T29] audit: type=1326 audit(1748376341.032:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 92.243588][ T29] audit: type=1326 audit(1748376341.032:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 92.267215][ T29] audit: type=1326 audit(1748376341.032:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7feddfc4e969 code=0x7ffc0000 [ 92.290954][ T29] audit: type=1326 audit(1748376341.032:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feddfc4e9a3 code=0x7ffc0000 [ 92.324255][ T8646] loop2: detected capacity change from 0 to 2048 [ 92.390017][ T8646] loop2: p1 < > p4 [ 92.401879][ T8646] loop2: p4 size 8388608 extends beyond EOD, truncated [ 92.413244][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 92.421015][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 92.442677][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 92.450452][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 92.458206][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 92.465936][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 92.473632][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 92.481354][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 92.489079][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 92.496771][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 92.502981][ T8655] loop4: detected capacity change from 0 to 2048 [ 92.504608][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 92.518539][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 92.526268][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 92.528655][ T8655] EXT4-fs: Ignoring removed bh option [ 92.534028][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 92.534056][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 92.534084][ T3401] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 92.567819][ T3401] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 92.600032][ T8655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.644413][ T8655] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.674685][ T8655] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 92.686960][ T8655] EXT4-fs (loop4): This should not happen!! Data will be lost [ 92.686960][ T8655] [ 92.696755][ T8655] EXT4-fs (loop4): Total free blocks count 0 [ 92.702846][ T8655] EXT4-fs (loop4): Free/Dirty block details [ 92.708929][ T8655] EXT4-fs (loop4): free_blocks=2415919104 [ 92.714802][ T8655] EXT4-fs (loop4): dirty_blocks=16 [ 92.719933][ T8655] EXT4-fs (loop4): Block reservation details [ 92.726040][ T8655] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 92.734540][ T8666] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 92.735183][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.199118][ T2970] kernel read not supported for file /vga_arbiter (pid: 2970 comm: kworker/1:2) [ 93.252584][ T8700] loop3: detected capacity change from 0 to 512 [ 93.285762][ T8700] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.1989: corrupted in-inode xattr: invalid ea_ino [ 93.311591][ T8700] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1989: couldn't read orphan inode 15 (err -117) [ 93.344218][ T8700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.415429][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.526021][ T8728] __nla_validate_parse: 7 callbacks suppressed [ 93.526042][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2002'. [ 93.663811][ T8740] openvswitch: netlink: Message has 6 unknown bytes. [ 94.454638][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2016'. [ 95.190301][ T8785] loop3: detected capacity change from 0 to 2048 [ 95.198931][ T8785] EXT4-fs: Ignoring removed bh option [ 95.226221][ T8785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.253301][ T8785] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.269130][ T8785] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 95.281490][ T8785] EXT4-fs (loop3): This should not happen!! Data will be lost [ 95.281490][ T8785] [ 95.291487][ T8785] EXT4-fs (loop3): Total free blocks count 0 [ 95.297529][ T8785] EXT4-fs (loop3): Free/Dirty block details [ 95.303580][ T8785] EXT4-fs (loop3): free_blocks=2415919104 [ 95.309396][ T8785] EXT4-fs (loop3): dirty_blocks=16 [ 95.314610][ T8785] EXT4-fs (loop3): Block reservation details [ 95.320669][ T8785] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 95.331427][ T8797] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 95.411595][ T2970] kernel read not supported for file /vga_arbiter (pid: 2970 comm: kworker/1:2) [ 95.490249][ T8816] bridge0: port 3(gretap0) entered blocking state [ 95.496873][ T8816] bridge0: port 3(gretap0) entered disabled state [ 95.504052][ T8816] gretap0: entered allmulticast mode [ 95.510045][ T8816] bridge0: port 3(gretap0) entered blocking state [ 95.516764][ T8816] bridge0: port 3(gretap0) entered forwarding state [ 95.790391][ T8814] Set syz1 is full, maxelem 65536 reached [ 95.841849][ T8821] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 96.106085][ T8843] 9pnet_fd: Insufficient options for proto=fd [ 96.142265][ T8849] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 96.177291][ T8851] loop2: detected capacity change from 0 to 1024 [ 96.184609][ T8851] EXT4-fs: Ignoring removed nobh option [ 96.190223][ T8851] EXT4-fs: Ignoring removed bh option [ 96.206226][ T8851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.223093][ T8851] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.2054: Allocating blocks 385-513 which overlap fs metadata [ 96.239024][ T8850] EXT4-fs (loop2): pa ffff888106d18310: logic 16, phys. 129, len 24 [ 96.247109][ T8850] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 96.270244][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.473310][ T8847] Set syz1 is full, maxelem 65536 reached [ 96.742865][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 96.742881][ T29] audit: type=1326 audit(1748376345.682:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.3.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429134e969 code=0x7ffc0000 [ 96.772668][ T29] audit: type=1326 audit(1748376345.682:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.3.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429134e969 code=0x7ffc0000 [ 96.797374][ T8888] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 96.804676][ T29] audit: type=1326 audit(1748376345.682:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.3.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f429134e969 code=0x7ffc0000 [ 96.830108][ T29] audit: type=1326 audit(1748376345.682:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.3.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429134e969 code=0x7ffc0000 [ 96.853819][ T29] audit: type=1326 audit(1748376345.682:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.3.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429134e969 code=0x7ffc0000 [ 96.882922][ T8890] loop3: detected capacity change from 0 to 2048 [ 96.889925][ T29] audit: type=1326 audit(1748376345.752:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.3.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f429134e969 code=0x7ffc0000 [ 96.913704][ T29] audit: type=1326 audit(1748376345.752:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.3.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429134e969 code=0x7ffc0000 [ 96.937496][ T29] audit: type=1326 audit(1748376345.752:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.3.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429134e969 code=0x7ffc0000 [ 96.961714][ T29] audit: type=1326 audit(1748376345.752:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.3.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f429134e969 code=0x7ffc0000 [ 96.985399][ T29] audit: type=1326 audit(1748376345.752:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.3.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429134e969 code=0x7ffc0000 [ 97.049990][ T8890] loop3: p1 < > p4 [ 97.054445][ T8890] loop3: p4 size 8388608 extends beyond EOD, truncated [ 97.250804][ T8923] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 97.272011][ T8919] loop3: detected capacity change from 0 to 8192 [ 97.370665][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2089'. [ 97.619832][ T8919] ================================================================== [ 97.627992][ T8919] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 97.635134][ T8919] [ 97.637479][ T8919] write to 0xffff88811c9c6708 of 2 bytes by task 8935 on cpu 1: [ 97.645143][ T8919] fat16_ent_put+0x28/0x60 [ 97.650047][ T8919] fat_alloc_clusters+0x4d1/0xa80 [ 97.655704][ T8919] fat_get_block+0x258/0x5e0 [ 97.660493][ T8919] __block_write_begin_int+0x400/0xf90 [ 97.665983][ T8919] cont_write_begin+0x5fc/0x970 [ 97.670853][ T8919] fat_write_begin+0x4f/0xe0 [ 97.675456][ T8919] generic_perform_write+0x184/0x490 [ 97.680764][ T8919] __generic_file_write_iter+0x9e/0x120 [ 97.686341][ T8919] generic_file_write_iter+0x8d/0x2f0 [ 97.691737][ T8919] do_iter_readv_writev+0x3ee/0x4b0 [ 97.696957][ T8919] vfs_writev+0x2c9/0x870 [ 97.701298][ T8919] __se_sys_pwritev2+0xfc/0x1c0 [ 97.706181][ T8919] __x64_sys_pwritev2+0x67/0x80 [ 97.711055][ T8919] x64_sys_call+0x1cea/0x2fb0 [ 97.715743][ T8919] do_syscall_64+0xd2/0x200 [ 97.720258][ T8919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.726249][ T8919] [ 97.728607][ T8919] read to 0xffff88811c9c6600 of 512 bytes by task 8919 on cpu 0: [ 97.736806][ T8919] fat_mirror_bhs+0x1df/0x320 [ 97.741519][ T8919] fat_ent_write+0xd0/0xe0 [ 97.746049][ T8919] fat_chain_add+0x15b/0x3f0 [ 97.750659][ T8919] fat_get_block+0x46c/0x5e0 [ 97.755449][ T8919] __block_write_begin_int+0x400/0xf90 [ 97.760930][ T8919] cont_write_begin+0x5fc/0x970 [ 97.765807][ T8919] fat_write_begin+0x4f/0xe0 [ 97.770411][ T8919] cont_write_begin+0x1b0/0x970 [ 97.775282][ T8919] fat_write_begin+0x4f/0xe0 [ 97.779890][ T8919] generic_cont_expand_simple+0xad/0x150 [ 97.785636][ T8919] fat_cont_expand+0x3e/0x170 [ 97.790324][ T8919] fat_setattr+0x2a5/0x8a0 [ 97.794752][ T8919] notify_change+0x809/0x890 [ 97.799362][ T8919] do_ftruncate+0x34b/0x450 [ 97.803886][ T8919] __x64_sys_ftruncate+0x68/0xc0 [ 97.808844][ T8919] x64_sys_call+0xd65/0x2fb0 [ 97.813450][ T8919] do_syscall_64+0xd2/0x200 [ 97.817969][ T8919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.824402][ T8919] [ 97.826734][ T8919] Reported by Kernel Concurrency Sanitizer on: [ 97.832902][ T8919] CPU: 0 UID: 0 PID: 8919 Comm: syz.3.2082 Not tainted 6.15.0-syzkaller-02245-gdd3922cf9d4d #0 PREEMPT(voluntary) [ 97.845072][ T8919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.855309][ T8919] ==================================================================