last executing test programs: 59.242858048s ago: executing program 0 (id=320): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 59.105246841s ago: executing program 0 (id=321): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a341", 0x7, 0x4000080, 0x0, 0x0) 59.100823861s ago: executing program 0 (id=322): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 58.295673945s ago: executing program 0 (id=331): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000180)) 57.971703092s ago: executing program 0 (id=347): r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911052000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) 53.669086261s ago: executing program 0 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 53.659816751s ago: executing program 32 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 51.54486101s ago: executing program 4 (id=466): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r2, 0x0, 0x80000001}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) 51.53758817s ago: executing program 4 (id=467): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0x2, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) 51.452128032s ago: executing program 4 (id=468): bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) fadvise64(0xffffffffffffffff, 0x2, 0x80, 0x4) openat(0xffffffffffffff9c, 0x0, 0xe02, 0x1c0) r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 51.308739644s ago: executing program 4 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 51.261926515s ago: executing program 4 (id=472): socket$inet6(0xa, 0x80a, 0x0) r0 = mq_open(&(0x7f0000000280)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x1e}) pipe2$9p(&(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) 51.00914543s ago: executing program 4 (id=477): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x402) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) 51.00779222s ago: executing program 33 (id=477): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x402) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) 2.238986339s ago: executing program 5 (id=1447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) 2.238791199s ago: executing program 1 (id=1448): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.17770849s ago: executing program 3 (id=1452): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}}) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 2.136854781s ago: executing program 3 (id=1455): syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000008000000080000009000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.026142353s ago: executing program 5 (id=1458): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x2, 0x285}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0x0, 0x0, 0xa1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) dup3(r2, r0, 0x80000) 1.877419315s ago: executing program 3 (id=1459): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, &(0x7f0000001d40)=""/4079, 0xfdef) 1.867565516s ago: executing program 5 (id=1460): symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x7}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x100, {0x0, 0xa}, {0x3}, @const={0x0, {0x1, 0x8, 0x4, 0x881}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.595418811s ago: executing program 3 (id=1461): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0xe4c}}, 0x0) r2 = gettid() poll(0x0, 0x0, 0xffffffffffbffff8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x12) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 1.378277385s ago: executing program 1 (id=1466): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.368119435s ago: executing program 2 (id=1467): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000140)=""/49) close(0xffffffffffffffff) 1.347670375s ago: executing program 1 (id=1468): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x104, 0x1) r3 = inotify_init1(0x80000) getdents(r2, &(0x7f0000000340)=""/61, 0x3d) inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0x60000726) getdents64(r2, 0x0, 0x4f) 1.345928746s ago: executing program 2 (id=1469): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x2, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1.295943596s ago: executing program 6 (id=1470): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 1.294700226s ago: executing program 1 (id=1481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000140)={r5, 0x3, r2}) 1.268614057s ago: executing program 2 (id=1471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.242898947s ago: executing program 2 (id=1473): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) 1.226290568s ago: executing program 6 (id=1474): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x517a20f7, 0x8040000000000000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0x400008bf) close_range(r1, 0xffffffffffffffff, 0x0) 1.223946868s ago: executing program 1 (id=1475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x24044092) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x2, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x40}}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.204680338s ago: executing program 6 (id=1476): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 1.188227148s ago: executing program 6 (id=1477): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) 1.08738605s ago: executing program 2 (id=1478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) 1.08609275s ago: executing program 6 (id=1489): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r4, 0x0, 0xeffd) 372.056713ms ago: executing program 1 (id=1479): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 371.800393ms ago: executing program 2 (id=1480): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b", 0x11) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 371.611013ms ago: executing program 3 (id=1482): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0x0, 0x0, 0x0) dup3(r3, r0, 0x80000) 369.423203ms ago: executing program 5 (id=1491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000400), &(0x7f00000004c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10) io_setup(0x3, &(0x7f0000000340)) 343.697614ms ago: executing program 6 (id=1483): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800004e9d00047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) 224.964226ms ago: executing program 3 (id=1484): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8000, 0x6, 0x6910, 0x840, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x4000f}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x4}, 0x2012, 0x0, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) 181.274337ms ago: executing program 5 (id=1485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x3, 0x6, @random="cea0300a1672"}, 0x10) dup2(r2, r3) 0s ago: executing program 5 (id=1486): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.1.327'. [ 55.972945][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.991198][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.009875][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.032745][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.117979][ T4487] loop0: detected capacity change from 0 to 1024 [ 56.132098][ T4487] EXT4-fs: Ignoring removed nobh option [ 56.137732][ T4487] EXT4-fs: Ignoring removed bh option [ 56.196970][ T4487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.321994][ T4515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.343'. [ 56.380730][ T4487] loop0: detected capacity change from 1024 to 64 [ 56.414842][ T3309] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 56.460666][ T3309] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 56.511914][ T3309] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 56.526240][ T3309] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 56.541199][ T3309] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 56.558555][ T3309] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 56.669829][ T3309] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 56.730631][ T3309] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 56.792827][ T4531] wg2: entered promiscuous mode [ 56.797771][ T4531] wg2: entered allmulticast mode [ 56.812177][ T4533] loop3: detected capacity change from 0 to 512 [ 56.820133][ T3309] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 56.867723][ T4533] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.351: bad orphan inode 11862016 [ 56.890519][ T3309] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 56.914394][ T4533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 56.965014][ T4533] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.144142][ T4542] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.351: corrupted inode contents [ 57.166870][ T4544] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 57.184837][ T4542] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #19: comm syz.3.351: mark_inode_dirty error [ 57.208772][ T4542] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.351: corrupted inode contents [ 57.240833][ T4544] bond1: entered promiscuous mode [ 57.246099][ T4544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.355784][ T4542] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.351: mark_inode_dirty error [ 57.362356][ T4544] netlink: 3 bytes leftover after parsing attributes in process `syz.1.355'. [ 57.390275][ T4542] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.351: mark inode dirty (error -117) [ 57.404645][ T4542] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 57.422968][ T4544] batadv1: entered promiscuous mode [ 57.428256][ T4544] batadv1: entered allmulticast mode [ 57.448866][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 57.461264][ T4544] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 57.468483][ T4546] netlink: 3 bytes leftover after parsing attributes in process `syz.1.355'. [ 57.480914][ T4544] bond1: (slave batadv1): making interface the new active one [ 57.489403][ T4544] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 57.513533][ T4546] batadv2: entered promiscuous mode [ 57.518824][ T4546] batadv2: entered allmulticast mode [ 57.573219][ T4546] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 57.594036][ T4546] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 57.667773][ T4553] loop4: detected capacity change from 0 to 1024 [ 57.691928][ T4553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.765310][ T4553] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.358: Allocating blocks 449-513 which overlap fs metadata [ 57.829254][ T4553] SELinux: Context @ is not valid (left unmapped). [ 57.838622][ T4553] EXT4-fs (loop4): pa ffff888106a90700: logic 48, phys. 177, len 21 [ 57.846764][ T4553] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 57.886769][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.906296][ T4559] loop3: detected capacity change from 0 to 1024 [ 57.963197][ T4559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.997431][ T4559] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.027249][ T4567] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.052483][ T4559] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.360: bg 0: block 393: padding at end of block bitmap is not set [ 58.067354][ T4559] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 58.079912][ T4559] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.079912][ T4559] [ 58.089755][ T4559] EXT4-fs (loop3): Total free blocks count 0 [ 58.095827][ T4559] EXT4-fs (loop3): Free/Dirty block details [ 58.101925][ T4559] EXT4-fs (loop3): free_blocks=0 [ 58.106908][ T4559] EXT4-fs (loop3): dirty_blocks=16 [ 58.112086][ T4559] EXT4-fs (loop3): Block reservation details [ 58.118288][ T4559] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 58.138017][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.167815][ T4573] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.222238][ T4573] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.262384][ T4584] serio: Serial port ptm0 [ 58.345492][ T4573] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.382413][ T4594] loop2: detected capacity change from 0 to 512 [ 58.403832][ T4596] syz_tun: entered allmulticast mode [ 58.412820][ T4596] pimreg: entered allmulticast mode [ 58.414966][ T4594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.421580][ T4595] syz_tun: left allmulticast mode [ 58.433097][ T4594] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.453777][ T4573] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.541602][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.560550][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.574527][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.604595][ T1796] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.632566][ T1796] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.752147][ T4626] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.809228][ T4632] loop2: detected capacity change from 0 to 128 [ 58.816684][ T4632] EXT4-fs: Ignoring removed nobh option [ 58.827096][ T4634] loop1: detected capacity change from 0 to 512 [ 58.833775][ T4631] Falling back ldisc for ttyS3. [ 58.848446][ T4632] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.863062][ T4632] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.899259][ T4634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.917212][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.926820][ T4634] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.975550][ T4643] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.017074][ T4648] wireguard0: entered promiscuous mode [ 59.022658][ T4648] wireguard0: entered allmulticast mode [ 59.043041][ T4643] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.043209][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.112773][ T4643] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.171377][ T4661] loop1: detected capacity change from 0 to 128 [ 59.182601][ T4643] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.209436][ T4663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4663 comm=syz.3.404 [ 59.287870][ T4665] loop2: detected capacity change from 0 to 1024 [ 59.294838][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.319600][ T4667] loop3: detected capacity change from 0 to 512 [ 59.335235][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.343985][ T379] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.344802][ T4665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.370464][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.415511][ T4667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.432852][ T4667] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.439022][ T4665] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.406: Allocating blocks 449-513 which overlap fs metadata [ 59.480226][ T4674] netlink: 256 bytes leftover after parsing attributes in process `syz.4.407'. [ 59.501428][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.575512][ T4664] EXT4-fs (loop2): pa ffff888106a907e0: logic 48, phys. 177, len 21 [ 59.583637][ T4664] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 59.645964][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.665580][ T4687] loop3: detected capacity change from 0 to 512 [ 59.680555][ T4687] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 59.718287][ T4687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 59.733258][ T4687] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.408: corrupted in-inode xattr: e_value size too large [ 59.764195][ T4687] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.408: couldn't read orphan inode 15 (err -117) [ 59.768506][ T4697] VFS: Mount too revealing [ 59.787135][ T4687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.937212][ T4706] loop2: detected capacity change from 0 to 736 [ 60.413520][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.465221][ T4720] loop3: detected capacity change from 0 to 1024 [ 60.492787][ T4720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.535485][ T4720] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.423: Allocating blocks 449-513 which overlap fs metadata [ 60.568023][ T4720] EXT4-fs (loop3): pa ffff8881007f11c0: logic 48, phys. 177, len 21 [ 60.576104][ T4720] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 60.586173][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 60.586190][ T29] audit: type=1400 audit(1758187404.147:1798): avc: denied { read } for pid=4726 comm="syz.1.426" path="socket:[11663]" dev="sockfs" ino=11663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.606865][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.629219][ T31] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.643031][ T4499] kmmpd-loop0: attempt to access beyond end of device [ 60.643031][ T4499] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 60.643458][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.656630][ T4499] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 60.693212][ T4731] loop3: detected capacity change from 0 to 512 [ 60.703829][ T31] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.727997][ T4731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.742338][ T4731] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.763934][ T31] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.804820][ T29] audit: type=1400 audit(1758187404.387:1799): avc: denied { mounton } for pid=4737 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 60.832070][ T31] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.856260][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.943683][ T31] bridge_slave_1: left allmulticast mode [ 60.949479][ T31] bridge_slave_1: left promiscuous mode [ 60.955294][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.968453][ T31] bridge_slave_0: left allmulticast mode [ 60.974295][ T31] bridge_slave_0: left promiscuous mode [ 60.980049][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.050484][ T29] audit: type=1400 audit(1758187404.617:1800): avc: denied { getopt } for pid=4754 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.150496][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.180878][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.192105][ T31] bond0 (unregistering): Released all slaves [ 61.269494][ T29] audit: type=1400 audit(1758187404.847:1801): avc: denied { read open } for pid=4770 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.294981][ T29] audit: type=1400 audit(1758187404.847:1802): avc: denied { getattr } for pid=4770 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.373138][ T29] audit: type=1326 audit(1758187404.947:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 61.396609][ T29] audit: type=1326 audit(1758187404.947:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 61.435059][ T31] hsr_slave_0: left promiscuous mode [ 61.444124][ T31] hsr_slave_1: left promiscuous mode [ 61.449893][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.457510][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.474924][ T29] audit: type=1326 audit(1758187404.957:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 61.498679][ T29] audit: type=1326 audit(1758187404.957:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 61.522377][ T29] audit: type=1326 audit(1758187404.957:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 61.546352][ T4781] IPv6: Can't replace route, no match found [ 61.555383][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.562866][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.597345][ T31] veth1_macvtap: left promiscuous mode [ 61.605227][ T31] veth0_macvtap: left promiscuous mode [ 61.613425][ T31] veth1_vlan: left promiscuous mode [ 61.636268][ T31] veth0_vlan: left promiscuous mode [ 61.797813][ T31] team0 (unregistering): Port device team_slave_1 removed [ 61.812087][ T31] team0 (unregistering): Port device team_slave_0 removed [ 61.878845][ T4800] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.965267][ T4800] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.082639][ T4800] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.144852][ T4737] chnl_net:caif_netlink_parms(): no params data found [ 62.179106][ T4800] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.270139][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.277301][ T4737] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.287086][ T4737] bridge_slave_0: entered allmulticast mode [ 62.293803][ T4737] bridge_slave_0: entered promiscuous mode [ 62.302453][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.324496][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.331647][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.338950][ T4737] bridge_slave_1: entered allmulticast mode [ 62.349517][ T4737] bridge_slave_1: entered promiscuous mode [ 62.361679][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.370063][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.391168][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.413108][ T4737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.443847][ T4737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.489366][ T4737] team0: Port device team_slave_0 added [ 62.503962][ T4737] team0: Port device team_slave_1 added [ 62.562027][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.569071][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.595190][ T4737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.661388][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.668402][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.694408][ T4737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.755107][ T4737] hsr_slave_0: entered promiscuous mode [ 62.761669][ T4737] hsr_slave_1: entered promiscuous mode [ 62.767489][ T4737] debugfs: 'hsr0' already exists in 'hsr' [ 62.773317][ T4737] Cannot create hsr debugfs directory [ 62.965831][ T4895] netlink: 96 bytes leftover after parsing attributes in process `syz.4.468'. [ 63.048533][ T4737] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.108329][ T4737] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.146704][ T4737] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.197117][ T4737] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.316040][ T4737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.346412][ T4737] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.368681][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.419794][ T1796] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.426945][ T1796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.462902][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.482949][ T4948] loop3: detected capacity change from 0 to 4096 [ 63.500690][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.507797][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.532193][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.551773][ T4948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.592752][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.703063][ T4737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.760594][ T12] bridge_slave_1: left allmulticast mode [ 63.766313][ T12] bridge_slave_1: left promiscuous mode [ 63.772044][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.795597][ T12] bridge_slave_0: left allmulticast mode [ 63.798139][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.801378][ T12] bridge_slave_0: left promiscuous mode [ 63.816050][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.993381][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.004114][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.014363][ T12] bond0 (unregistering): Released all slaves [ 64.078645][ T12] hsr_slave_0: left promiscuous mode [ 64.097352][ T12] hsr_slave_1: left promiscuous mode [ 64.118073][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.125581][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.157788][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.165282][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.198874][ T12] veth1_macvtap: left promiscuous mode [ 64.210545][ T12] veth0_macvtap: left promiscuous mode [ 64.226363][ T12] veth1_vlan: left promiscuous mode [ 64.240549][ T12] veth0_vlan: left promiscuous mode [ 64.391387][ T12] pimreg (unregistering): left allmulticast mode [ 64.485352][ T12] team0 (unregistering): Port device team_slave_1 removed [ 64.497463][ T12] team0 (unregistering): Port device team_slave_0 removed [ 64.701537][ T4949] chnl_net:caif_netlink_parms(): no params data found [ 64.807146][ T4949] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.814475][ T4949] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.855748][ T4949] bridge_slave_0: entered allmulticast mode [ 64.869880][ T4949] bridge_slave_0: entered promiscuous mode [ 64.892073][ T4949] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.899220][ T4949] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.920999][ T4949] bridge_slave_1: entered allmulticast mode [ 64.931201][ T4949] bridge_slave_1: entered promiscuous mode [ 64.957241][ T4737] veth0_vlan: entered promiscuous mode [ 64.988522][ T4737] veth1_vlan: entered promiscuous mode [ 65.002483][ T4949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.023262][ T4949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.037637][ T4737] veth0_macvtap: entered promiscuous mode [ 65.056089][ T4737] veth1_macvtap: entered promiscuous mode [ 65.081894][ T4949] team0: Port device team_slave_0 added [ 65.093075][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.101288][ T4949] team0: Port device team_slave_1 added [ 65.127314][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.154653][ T4949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.161667][ T4949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.187714][ T4949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.207652][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.216661][ T4949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.223872][ T4949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.249908][ T4949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.266984][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.297255][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.350206][ T4949] hsr_slave_0: entered promiscuous mode [ 65.362782][ T5159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 65.374249][ T4949] hsr_slave_1: entered promiscuous mode [ 65.380184][ T4949] debugfs: 'hsr0' already exists in 'hsr' [ 65.385988][ T4949] Cannot create hsr debugfs directory [ 65.393495][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.430833][ T5161] netlink: 'syz.1.496': attribute type 13 has an invalid length. [ 65.469094][ T5161] gretap0: refused to change device tx_queue_len [ 65.487512][ T5161] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 65.649289][ T5183] netlink: 96 bytes leftover after parsing attributes in process `syz.3.500'. [ 65.678995][ T4949] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 65.710640][ T4949] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 65.726962][ T4949] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 65.746789][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 65.746804][ T29] audit: type=1326 audit(1758187409.327:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 65.787453][ T4949] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 65.835424][ T29] audit: type=1326 audit(1758187409.327:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 65.859012][ T29] audit: type=1326 audit(1758187409.327:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 65.882497][ T29] audit: type=1326 audit(1758187409.327:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 65.906096][ T29] audit: type=1326 audit(1758187409.327:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 65.929543][ T29] audit: type=1326 audit(1758187409.327:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 65.952911][ T29] audit: type=1326 audit(1758187409.327:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 65.976351][ T29] audit: type=1326 audit(1758187409.327:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 65.999903][ T29] audit: type=1326 audit(1758187409.327:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 66.023441][ T29] audit: type=1326 audit(1758187409.327:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 66.079195][ T5209] loop3: detected capacity change from 0 to 4096 [ 66.107219][ T5209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.177610][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.181663][ T4949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.216861][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.234606][ T5225] loop2: detected capacity change from 0 to 512 [ 66.272501][ T5223] fido_id[5223]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 66.295011][ T4949] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.314087][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.321281][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.325979][ T5230] loop5: detected capacity change from 0 to 128 [ 66.354175][ T5209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.378253][ T4949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.388927][ T4949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.443397][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.450538][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.560867][ T4949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.778121][ T4949] veth0_vlan: entered promiscuous mode [ 66.787095][ T4949] veth1_vlan: entered promiscuous mode [ 66.829699][ T4949] veth0_macvtap: entered promiscuous mode [ 66.848236][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.871833][ T5234] syz_tun: entered allmulticast mode [ 66.885158][ T4949] veth1_macvtap: entered promiscuous mode [ 66.941491][ T4949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.953041][ T4949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.973013][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.013479][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.057382][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.082342][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.267336][ T5277] netlink: 36 bytes leftover after parsing attributes in process `syz.5.518'. [ 67.276344][ T5277] netlink: 16 bytes leftover after parsing attributes in process `syz.5.518'. [ 67.285478][ T5277] netlink: 36 bytes leftover after parsing attributes in process `syz.5.518'. [ 67.313587][ T5277] netlink: 36 bytes leftover after parsing attributes in process `syz.5.518'. [ 67.387523][ T5292] loop5: detected capacity change from 0 to 256 [ 67.397880][ T5292] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.418207][ T5292] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.461988][ T5297] tipc: Started in network mode [ 67.467058][ T5297] tipc: Node identity 6abdc86cb414, cluster identity 4711 [ 67.474398][ T5297] tipc: Enabled bearer , priority 0 [ 67.485136][ T5297] tipc: Disabling bearer [ 67.892763][ T5322] loop3: detected capacity change from 0 to 1024 [ 67.905152][ T5324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 67.933000][ T5322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.962116][ T5322] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.538: Allocating blocks 385-513 which overlap fs metadata [ 67.978427][ T5322] EXT4-fs (loop3): pa ffff888106a90930: logic 16, phys. 129, len 24 [ 67.986551][ T5322] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 68.010829][ T5333] tipc: Started in network mode [ 68.015832][ T5333] tipc: Node identity a2ff716300de, cluster identity 4711 [ 68.023032][ T5333] tipc: Enabled bearer , priority 0 [ 68.033553][ T5333] tipc: Disabling bearer [ 68.048873][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.145753][ T5346] netlink: 'syz.6.548': attribute type 25 has an invalid length. [ 68.212087][ T5350] loop5: detected capacity change from 0 to 164 [ 68.230057][ T5350] Unable to read rock-ridge attributes [ 68.249160][ T5350] Unable to read rock-ridge attributes [ 68.274795][ T5352] pim6reg1: entered promiscuous mode [ 68.280164][ T5352] pim6reg1: entered allmulticast mode [ 68.281179][ T5350] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 68.459729][ T5367] tipc: Started in network mode [ 68.464716][ T5367] tipc: Node identity ba2b547c3d13, cluster identity 4711 [ 68.472168][ T5367] tipc: Enabled bearer , priority 0 [ 68.488132][ T5367] tipc: Disabling bearer [ 68.490269][ T5364] loop2: detected capacity change from 0 to 4096 [ 68.503135][ T5370] netlink: 36 bytes leftover after parsing attributes in process `syz.6.561'. [ 68.512172][ T5370] netlink: 16 bytes leftover after parsing attributes in process `syz.6.561'. [ 68.514570][ T5364] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.521127][ T5370] netlink: 36 bytes leftover after parsing attributes in process `syz.6.561'. [ 68.541184][ T5370] netlink: 36 bytes leftover after parsing attributes in process `syz.6.561'. [ 68.585858][ T5364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.622288][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.633925][ T5380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.665974][ T5380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.769609][ T5395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5395 comm=syz.3.569 [ 68.785416][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 69.214615][ T5419] loop6: detected capacity change from 0 to 4096 [ 69.221488][ T5419] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.334756][ T5423] loop1: detected capacity change from 0 to 1024 [ 69.353960][ T5423] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.580: Failed to acquire dquot type 0 [ 69.368036][ T5423] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 69.385470][ T5423] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.580: corrupted inode contents [ 69.397984][ T5423] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.580: mark_inode_dirty error [ 69.410230][ T5423] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.580: corrupted inode contents [ 69.423722][ T5423] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.580: mark_inode_dirty error [ 69.439069][ T5423] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.580: corrupted inode contents [ 69.453901][ T5423] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 69.463972][ T5423] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.580: corrupted inode contents [ 69.464264][ T5426] netlink: 'syz.3.581': attribute type 25 has an invalid length. [ 69.477819][ T5423] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.580: mark_inode_dirty error [ 69.503069][ T5423] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 69.513677][ T5423] EXT4-fs (loop1): 1 truncate cleaned up [ 70.047289][ T5456] netlink: 'syz.5.594': attribute type 25 has an invalid length. [ 70.217914][ T5471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.600'. [ 70.226923][ T5471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.600'. [ 70.235973][ T5471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.600'. [ 70.245739][ T5471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.600'. [ 70.254717][ T5471] netlink: 'syz.3.600': attribute type 6 has an invalid length. [ 70.342019][ T5480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.604'. [ 70.622408][ T5502] loop1: detected capacity change from 0 to 512 [ 70.731310][ T5507] netlink: 'syz.3.614': attribute type 1 has an invalid length. [ 70.838502][ T29] kauditd_printk_skb: 680 callbacks suppressed [ 70.838517][ T29] audit: type=1326 audit(1758187414.417:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 70.883920][ T29] audit: type=1326 audit(1758187414.457:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 70.907342][ T29] audit: type=1326 audit(1758187414.457:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 70.931023][ T29] audit: type=1326 audit(1758187414.457:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 70.954491][ T29] audit: type=1326 audit(1758187414.457:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 70.978039][ T29] audit: type=1326 audit(1758187414.457:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 71.001409][ T29] audit: type=1326 audit(1758187414.457:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 71.024936][ T29] audit: type=1326 audit(1758187414.457:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 71.048323][ T29] audit: type=1326 audit(1758187414.457:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 71.071909][ T29] audit: type=1326 audit(1758187414.457:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.5.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 71.482964][ T5528] loop5: detected capacity change from 0 to 128 [ 71.494817][ T5528] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 71.502794][ T5528] FAT-fs (loop5): Filesystem has been set read-only [ 71.525964][ T5528] syz.5.622: attempt to access beyond end of device [ 71.525964][ T5528] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 71.550044][ T5528] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 71.558041][ T5528] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 71.576502][ T5533] syz.5.622: attempt to access beyond end of device [ 71.576502][ T5533] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 71.589750][ T5533] Buffer I/O error on dev loop5, logical block 2065, async page read [ 71.614673][ T5533] syz.5.622: attempt to access beyond end of device [ 71.614673][ T5533] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 71.627928][ T5533] Buffer I/O error on dev loop5, logical block 2066, async page read [ 71.680080][ T5533] syz.5.622: attempt to access beyond end of device [ 71.680080][ T5533] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 71.693414][ T5533] Buffer I/O error on dev loop5, logical block 2067, async page read [ 71.738289][ T5533] syz.5.622: attempt to access beyond end of device [ 71.738289][ T5533] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 71.751657][ T5533] Buffer I/O error on dev loop5, logical block 2068, async page read [ 71.770610][ T5545] loop6: detected capacity change from 0 to 1024 [ 71.777557][ T5533] syz.5.622: attempt to access beyond end of device [ 71.777557][ T5533] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 71.790888][ T5533] Buffer I/O error on dev loop5, logical block 2069, async page read [ 71.799636][ T5533] syz.5.622: attempt to access beyond end of device [ 71.799636][ T5533] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 71.812834][ T5533] Buffer I/O error on dev loop5, logical block 2070, async page read [ 71.823009][ T5533] syz.5.622: attempt to access beyond end of device [ 71.823009][ T5533] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 71.836401][ T5533] Buffer I/O error on dev loop5, logical block 2071, async page read [ 71.846655][ T5533] syz.5.622: attempt to access beyond end of device [ 71.846655][ T5533] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 71.859940][ T5533] Buffer I/O error on dev loop5, logical block 2072, async page read [ 71.870092][ T5528] syz.5.622: attempt to access beyond end of device [ 71.870092][ T5528] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 71.883379][ T5528] Buffer I/O error on dev loop5, logical block 2065, async page read [ 71.902508][ T5545] EXT4-fs mount: 4 callbacks suppressed [ 71.902529][ T5545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.920452][ T5528] Buffer I/O error on dev loop5, logical block 2066, async page read [ 71.936361][ T5545] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.940013][ T5558] netlink: zone id is out of range [ 71.959805][ T5560] loop1: detected capacity change from 0 to 512 [ 71.975288][ T5558] netlink: zone id is out of range [ 71.990231][ T5558] netlink: zone id is out of range [ 71.995801][ T5558] netlink: zone id is out of range [ 72.009527][ T31] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 393: padding at end of block bitmap is not set [ 72.034530][ T5558] netlink: zone id is out of range [ 72.041787][ T5558] netlink: zone id is out of range [ 72.047152][ T31] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 72.049851][ T5558] netlink: zone id is out of range [ 72.059802][ T31] EXT4-fs (loop6): This should not happen!! Data will be lost [ 72.059802][ T31] [ 72.065122][ T5558] netlink: zone id is out of range [ 72.084362][ T5558] netlink: zone id is out of range [ 72.089594][ T5558] netlink: zone id is out of range [ 72.097025][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.198186][ T5567] loop6: detected capacity change from 0 to 512 [ 72.460128][ T5578] loop3: detected capacity change from 0 to 4096 [ 72.467509][ T5578] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.480206][ T5578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.904849][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.084933][ T5612] SELinux: security_context_str_to_sid () failed with errno=-22 [ 73.169856][ T5614] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.243484][ T5622] netlink: 'syz.6.656': attribute type 1 has an invalid length. [ 73.279026][ T5614] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.409790][ T5614] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.517774][ T5614] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.564580][ T5650] loop5: detected capacity change from 0 to 512 [ 73.756365][ T5670] loop6: detected capacity change from 0 to 128 [ 73.763377][ T5672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.788312][ T5672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.845078][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.888946][ T5682] loop3: detected capacity change from 0 to 2048 [ 73.933326][ T5682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.955522][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.976210][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.073868][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.215073][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.238213][ T5711] __nla_validate_parse: 7 callbacks suppressed [ 74.238228][ T5711] netlink: 44 bytes leftover after parsing attributes in process `syz.6.675'. [ 74.260223][ T5711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.675'. [ 74.269228][ T5711] netlink: 32 bytes leftover after parsing attributes in process `syz.6.675'. [ 74.348966][ T5717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.676'. [ 74.358125][ T5717] netlink: 28 bytes leftover after parsing attributes in process `syz.6.676'. [ 74.367061][ T5717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.676'. [ 74.390918][ T5715] vhci_hcd: invalid port number 255 [ 74.396453][ T5715] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 74.418655][ T5717] netlink: 28 bytes leftover after parsing attributes in process `syz.6.676'. [ 74.427775][ T5717] netlink: 'syz.6.676': attribute type 6 has an invalid length. [ 74.466070][ T5726] netlink: 14528 bytes leftover after parsing attributes in process `syz.6.680'. [ 74.484947][ T5728] netlink: 'syz.5.681': attribute type 1 has an invalid length. [ 74.499432][ T5731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.682'. [ 74.502015][ T5728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.517402][ T5731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.527050][ T5728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.681'. [ 74.539308][ T5731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.557018][ T5728] bond1 (unregistering): Released all slaves [ 74.574738][ T5737] usb usb1: usbfs: process 5737 (syz.3.684) did not claim interface 0 before use [ 74.673084][ T5745] vhci_hcd: invalid port number 255 [ 74.678360][ T5745] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 74.828469][ T5757] loop3: detected capacity change from 0 to 512 [ 74.841236][ T5759] loop6: detected capacity change from 0 to 512 [ 74.848742][ T5759] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.856427][ T5759] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 74.857944][ T5756] team1: entered promiscuous mode [ 74.871566][ T5756] team1: entered allmulticast mode [ 74.880956][ T5759] EXT4-fs (loop6): 1 truncate cleaned up [ 74.887145][ T5759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.235146][ T5768] loop2: detected capacity change from 0 to 8192 [ 75.314809][ T5787] loop5: detected capacity change from 0 to 512 [ 75.345775][ T5787] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.385404][ T5787] EXT4-fs (loop5): 1 truncate cleaned up [ 75.408067][ T5787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.085281][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.170479][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 76.170497][ T29] audit: type=1326 audit(1758187419.747:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5797 comm="syz.3.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 76.283086][ T4737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.300631][ T29] audit: type=1326 audit(1758187419.787:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5797 comm="syz.3.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 76.324316][ T29] audit: type=1326 audit(1758187419.787:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5797 comm="syz.3.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 76.347811][ T29] audit: type=1326 audit(1758187419.787:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5797 comm="syz.3.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 76.371171][ T29] audit: type=1326 audit(1758187419.787:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5797 comm="syz.3.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 76.414003][ T5812] netlink: 'syz.5.706': attribute type 6 has an invalid length. [ 76.457449][ T5819] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 76.474373][ T29] audit: type=1400 audit(1758187420.057:3172): avc: denied { setopt } for pid=5818 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.498602][ T5829] netlink: 'syz.2.712': attribute type 3 has an invalid length. [ 76.507042][ T5829] netlink: 'syz.2.712': attribute type 3 has an invalid length. [ 76.556712][ T5836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5836 comm=syz.2.715 [ 76.583056][ T5834] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.638994][ T5845] loop2: detected capacity change from 0 to 128 [ 76.652607][ T5834] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.701442][ T5834] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.742659][ T5834] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.797125][ T29] audit: type=1326 audit(1758187420.377:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.2.719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4e457eba9 code=0x0 [ 76.868974][ T379] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.902821][ T379] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.920534][ T379] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.942048][ T379] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.958658][ T29] audit: type=1400 audit(1758187420.537:3174): avc: denied { write } for pid=5865 comm="syz.1.721" name="ip_vs" dev="proc" ino=4026532494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 76.997130][ T29] audit: type=1400 audit(1758187420.567:3175): avc: denied { listen } for pid=5865 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.176543][ T5872] wg2: entered promiscuous mode [ 77.181573][ T5872] wg2: entered allmulticast mode [ 77.188228][ T29] audit: type=1400 audit(1758187420.757:3176): avc: denied { name_bind } for pid=5870 comm="syz.3.724" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 77.224904][ T5876] netlink: 'syz.3.726': attribute type 3 has an invalid length. [ 77.232725][ T5876] netlink: 'syz.3.726': attribute type 3 has an invalid length. [ 77.494476][ T5902] loop6: detected capacity change from 0 to 512 [ 77.505538][ T5902] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.525512][ T5902] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.736: Failed to acquire dquot type 1 [ 77.538424][ T5902] EXT4-fs (loop6): 1 truncate cleaned up [ 77.547449][ T5902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.587702][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.668696][ T5919] wg2: entered promiscuous mode [ 77.673678][ T5919] wg2: entered allmulticast mode [ 77.736014][ T5925] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 78.219438][ T5971] loop6: detected capacity change from 0 to 256 [ 78.528621][ T5996] atomic_op ffff888109ee6d28 conn xmit_atomic 0000000000000000 [ 78.563476][ T5998] tipc: Started in network mode [ 78.568406][ T5998] tipc: Node identity 425703dec74b, cluster identity 4711 [ 78.575793][ T5998] tipc: Enabled bearer , priority 0 [ 78.587434][ T5998] tipc: Disabling bearer [ 78.643484][ T6002] netlink: 'syz.6.767': attribute type 1 has an invalid length. [ 78.659048][ T6002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.675263][ T6002] bond1 (unregistering): Released all slaves [ 78.745238][ T6008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6008 comm=syz.6.769 [ 78.847674][ T6013] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.885539][ T6013] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.924546][ T6013] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.974873][ T6013] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.043445][ T133] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.065914][ T133] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.077977][ T133] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.090294][ T37] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.141517][ T6025] loop6: detected capacity change from 0 to 2048 [ 79.152241][ T6025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.372682][ T6042] syzkaller0: refused to change device tx_queue_len [ 79.432200][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.448712][ T6039] loop5: detected capacity change from 0 to 8192 [ 80.250363][ T6064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6064 comm=syz.6.791 [ 80.352138][ T6070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.359397][ T6070] IPv6: NLM_F_CREATE should be set when creating new route [ 80.366807][ T6070] IPv6: NLM_F_CREATE should be set when creating new route [ 80.497855][ T6075] __nla_validate_parse: 13 callbacks suppressed [ 80.497871][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 80.530983][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.797'. [ 80.675976][ T6095] netlink: 'syz.5.806': attribute type 7 has an invalid length. [ 80.683752][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.806'. [ 81.242850][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 81.242866][ T29] audit: type=1400 audit(1758187424.827:3232): avc: denied { setopt } for pid=6140 comm="syz.2.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.244516][ T6141] net_ratelimit: 1 callbacks suppressed [ 81.244534][ T6141] openvswitch: netlink: Message has 6 unknown bytes. [ 81.378173][ T29] audit: type=1400 audit(1758187424.957:3233): avc: denied { mounton } for pid=6147 comm="syz.2.828" path="/proc/372/task" dev="proc" ino=16632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 81.550249][ T6153] bridge0: entered promiscuous mode [ 81.555738][ T6153] macvtap1: entered allmulticast mode [ 81.561177][ T6153] bridge0: entered allmulticast mode [ 81.567912][ T6153] bridge0: port 3(macvtap1) entered blocking state [ 81.574553][ T6153] bridge0: port 3(macvtap1) entered disabled state [ 81.583398][ T6153] bridge0: left allmulticast mode [ 81.588476][ T6153] bridge0: left promiscuous mode [ 81.603773][ T29] audit: type=1400 audit(1758187425.187:3234): avc: denied { sqpoll } for pid=6154 comm="syz.1.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.799950][ T6169] loop1: detected capacity change from 0 to 128 [ 82.020131][ T6175] loop6: detected capacity change from 0 to 512 [ 82.027117][ T6175] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 82.039302][ T6175] EXT4-fs (loop6): 1 truncate cleaned up [ 82.045501][ T6175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.583356][ T29] audit: type=1400 audit(1758187426.167:3235): avc: denied { read } for pid=6194 comm="syz.2.845" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.606836][ T29] audit: type=1400 audit(1758187426.167:3236): avc: denied { open } for pid=6194 comm="syz.2.845" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.638312][ T29] audit: type=1400 audit(1758187426.217:3237): avc: denied { ioctl } for pid=6194 comm="syz.2.845" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.663743][ T29] audit: type=1400 audit(1758187426.217:3238): avc: denied { write } for pid=6194 comm="syz.2.845" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 82.744448][ T29] audit: type=1326 audit(1758187426.217:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 82.767989][ T29] audit: type=1326 audit(1758187426.217:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 82.791378][ T29] audit: type=1326 audit(1758187426.217:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 82.899612][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.406579][ T6229] loop3: detected capacity change from 0 to 512 [ 83.426420][ T6229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.439188][ T6229] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.509707][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.546123][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 83.654995][ T6252] netlink: 24 bytes leftover after parsing attributes in process `syz.6.862'. [ 83.778363][ T6264] bridge: RTM_NEWNEIGH with invalid ether address [ 83.835993][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 83.845115][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.852559][ T6268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.885346][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.892782][ T6268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.944433][ T6270] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.973394][ T6274] serio: Serial port ptm0 [ 83.978813][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a842600: rx timeout, send abort [ 83.987140][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a842600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 83.990690][ T6272] tipc: Enabled bearer , priority 0 [ 84.011989][ T6271] tipc: Resetting bearer [ 84.036676][ T6271] tipc: Disabling bearer [ 84.070096][ T6280] loop3: detected capacity change from 0 to 2048 [ 84.083723][ T6270] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.098996][ T6280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.191990][ T6270] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.296539][ T6270] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.335022][ T6296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.886'. [ 84.385581][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.456902][ T6306] loop3: detected capacity change from 0 to 512 [ 84.485114][ T6306] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.890: bg 0: block 5: invalid block bitmap [ 84.507055][ T6306] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 84.539302][ T6306] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.890: invalid indirect mapped block 3 (level 2) [ 84.572415][ T6306] EXT4-fs (loop3): 2 truncates cleaned up [ 84.578679][ T6306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.627745][ T379] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.653031][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.701972][ T379] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.745611][ T270] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.759434][ T270] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.789727][ T6322] pimreg: entered allmulticast mode [ 84.867040][ T6334] loop6: detected capacity change from 0 to 512 [ 84.889758][ T6334] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 84.926150][ T6334] EXT4-fs (loop6): 1 truncate cleaned up [ 84.942690][ T6334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.962887][ T6334] EXT4-fs (loop6): shut down requested (2) [ 85.011586][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.026444][ T6340] bridge_slave_1: left allmulticast mode [ 85.032267][ T6340] bridge_slave_1: left promiscuous mode [ 85.038042][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.050132][ T6340] bridge_slave_0: left allmulticast mode [ 85.055849][ T6340] bridge_slave_0: left promiscuous mode [ 85.061628][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.167092][ T6357] loop6: detected capacity change from 0 to 1024 [ 85.174826][ T6357] EXT4-fs: Mount option(s) incompatible with ext2 [ 85.209095][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.6.914'. [ 85.275426][ T6372] netlink: 25 bytes leftover after parsing attributes in process `syz.5.918'. [ 85.417927][ T6387] netlink: 24 bytes leftover after parsing attributes in process `syz.6.923'. [ 85.583021][ T6391] loop2: detected capacity change from 0 to 736 [ 85.628227][ T6398] __nla_validate_parse: 1 callbacks suppressed [ 85.628245][ T6398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.928'. [ 85.691776][ T6403] loop2: detected capacity change from 0 to 4096 [ 85.703440][ T6403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.731495][ T6410] bond2: entered promiscuous mode [ 85.736584][ T6410] bond2: entered allmulticast mode [ 85.742046][ T6410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.752341][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.762869][ T6410] bond2 (unregistering): Released all slaves [ 85.772837][ T6412] : renamed from vlan1 (while UP) [ 85.782134][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 85.814468][ T6420] loop2: detected capacity change from 0 to 512 [ 85.852080][ T6423] loop6: detected capacity change from 0 to 512 [ 85.876143][ T6423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.879548][ T6420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.901464][ T6423] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.946374][ T6420] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.074175][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.230237][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.331263][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 86.331277][ T29] audit: type=1326 audit(1758187429.917:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe211ddeba9 code=0x7ffc0000 [ 86.360939][ T29] audit: type=1326 audit(1758187429.917:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe211ddeba9 code=0x7ffc0000 [ 86.391043][ T29] audit: type=1326 audit(1758187429.977:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe211ddeba9 code=0x7ffc0000 [ 86.456429][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.948'. [ 86.465354][ T29] audit: type=1326 audit(1758187429.977:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe211ddeba9 code=0x7ffc0000 [ 86.488727][ T29] audit: type=1326 audit(1758187429.977:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe211ddeba9 code=0x7ffc0000 [ 86.512353][ T29] audit: type=1326 audit(1758187429.997:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe211ddeba9 code=0x7ffc0000 [ 86.535872][ T29] audit: type=1326 audit(1758187429.997:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe211ddeba9 code=0x7ffc0000 [ 86.559425][ T29] audit: type=1326 audit(1758187429.997:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe211ddeba9 code=0x7ffc0000 [ 86.582858][ T29] audit: type=1326 audit(1758187430.017:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe211ddeba9 code=0x7ffc0000 [ 86.606179][ T29] audit: type=1326 audit(1758187430.017:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe211ddeba9 code=0x7ffc0000 [ 86.773746][ T6472] loop1: detected capacity change from 0 to 1024 [ 86.780824][ T6472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.803656][ T6472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.846653][ T6482] loop6: detected capacity change from 0 to 512 [ 86.860597][ T6482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.877544][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 86.887031][ T6484] hsr_slave_0: left promiscuous mode [ 86.893820][ T6484] hsr_slave_1: left promiscuous mode [ 86.895967][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.960'. [ 86.935047][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.968444][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.006537][ T6487] loop3: detected capacity change from 0 to 8192 [ 87.237175][ T6515] loop2: detected capacity change from 0 to 1024 [ 87.244561][ T6515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.265041][ T6515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.312204][ T6521] loop1: detected capacity change from 0 to 512 [ 87.332251][ T6521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.350707][ T6521] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.430433][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.465519][ T6525] 9pnet: p9_errstr2errno: server reported unknown error [ 87.479639][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.624101][ T6534] loop6: detected capacity change from 0 to 512 [ 87.653664][ T6534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.677013][ T6534] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.733522][ T6530] loop1: detected capacity change from 0 to 8192 [ 87.873097][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.083631][ T6549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.982'. [ 88.351832][ T6559] loop2: detected capacity change from 0 to 512 [ 88.363845][ T6559] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.986: bg 0: block 5: invalid block bitmap [ 88.402334][ T6559] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 88.423132][ T6559] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.986: invalid indirect mapped block 3 (level 2) [ 88.428179][ T6562] pimreg: entered allmulticast mode [ 88.460379][ T6559] EXT4-fs (loop2): 2 truncates cleaned up [ 88.473933][ T6559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.501668][ T6568] loop3: detected capacity change from 0 to 1024 [ 88.513293][ T6568] EXT4-fs: Mount option(s) incompatible with ext2 [ 88.540435][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.677500][ T6586] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.730878][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.6.999'. [ 88.739794][ T6593] hsr_slave_0: left promiscuous mode [ 88.745858][ T6593] hsr_slave_1: left promiscuous mode [ 88.762375][ T6586] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.864632][ T6586] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.903265][ T6603] loop6: detected capacity change from 0 to 1024 [ 88.916244][ T6603] EXT4-fs: Ignoring removed nobh option [ 88.921923][ T6603] EXT4-fs: Ignoring removed bh option [ 88.927340][ T6603] EXT4-fs: Ignoring removed nobh option [ 88.943344][ T6603] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.968720][ T6586] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.981427][ T6603] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 89.031182][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.172404][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.259694][ T270] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.320117][ T270] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.383378][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.603596][ T6645] loop5: detected capacity change from 0 to 128 [ 89.630486][ T6645] bio_check_eod: 27320 callbacks suppressed [ 89.630506][ T6645] syz.5.1017: attempt to access beyond end of device [ 89.630506][ T6645] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 89.650613][ T6645] syz.5.1017: attempt to access beyond end of device [ 89.650613][ T6645] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 89.664075][ T6645] buffer_io_error: 27318 callbacks suppressed [ 89.664092][ T6645] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 89.678895][ T6645] syz.5.1017: attempt to access beyond end of device [ 89.678895][ T6645] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 89.692397][ T6645] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 89.701219][ T6645] syz.5.1017: attempt to access beyond end of device [ 89.701219][ T6645] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 89.715173][ T6645] syz.5.1017: attempt to access beyond end of device [ 89.715173][ T6645] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 89.728649][ T6645] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 89.754022][ T6645] syz.5.1017: attempt to access beyond end of device [ 89.754022][ T6645] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 89.767504][ T6645] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 89.777253][ T6645] syz.5.1017: attempt to access beyond end of device [ 89.777253][ T6645] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 89.792063][ T6645] syz.5.1017: attempt to access beyond end of device [ 89.792063][ T6645] loop5: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 89.805647][ T6645] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 89.814331][ T6645] syz.5.1017: attempt to access beyond end of device [ 89.814331][ T6645] loop5: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 89.827786][ T6645] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 89.837023][ T6645] syz.5.1017: attempt to access beyond end of device [ 89.837023][ T6645] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 89.851316][ T6645] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 89.859927][ T6645] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 89.873771][ T6645] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 89.891675][ T6645] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 89.927231][ T6647] loop6: detected capacity change from 0 to 512 [ 89.950005][ T6647] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1018: error while reading EA inode 32 err=-116 [ 89.969013][ T6647] EXT4-fs (loop6): Remounting filesystem read-only [ 89.978641][ T6647] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 89.992711][ T6647] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 90.004489][ T6647] EXT4-fs (loop6): 1 orphan inode deleted [ 90.016677][ T6647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.066606][ T6647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.449580][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 90.473092][ T6724] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1028'. [ 90.999590][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1051'. [ 91.154885][ T6771] wg2: left promiscuous mode [ 91.159630][ T6771] wg2: left allmulticast mode [ 91.217118][ T6771] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 91.317036][ T6721] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.334445][ T6721] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.354373][ T6721] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.413249][ T6721] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.427042][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 91.427052][ T6783] SELinux: failed to load policy [ 91.427059][ T29] audit: type=1400 audit(1758187435.007:3622): avc: denied { load_policy } for pid=6782 comm="syz.3.1054" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 91.593163][ T29] audit: type=1326 audit(1758187435.167:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 91.616645][ T29] audit: type=1326 audit(1758187435.167:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 91.640072][ T29] audit: type=1326 audit(1758187435.177:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 91.663519][ T29] audit: type=1326 audit(1758187435.177:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 91.686938][ T29] audit: type=1326 audit(1758187435.177:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 91.716587][ T29] audit: type=1326 audit(1758187435.247:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 91.740139][ T29] audit: type=1326 audit(1758187435.247:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 91.764317][ T29] audit: type=1326 audit(1758187435.247:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.3.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 91.824474][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1066'. [ 91.833735][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1066'. [ 91.870269][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1066'. [ 91.879364][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1066'. [ 91.935091][ T6802] netlink: 'syz.5.1061': attribute type 30 has an invalid length. [ 91.943293][ T29] audit: type=1326 audit(1758187435.517:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.3.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 91.986981][ T6804] pimreg: entered allmulticast mode [ 92.006144][ T6808] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1063'. [ 92.061257][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 92.090306][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1067'. [ 92.211047][ T6819] loop3: detected capacity change from 0 to 4096 [ 92.247594][ T6819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.382886][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.492641][ T6829] loop2: detected capacity change from 0 to 1024 [ 92.514424][ T6829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.710354][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 92.718193][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 92.733629][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 92.741526][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 92.749431][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 92.757218][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 92.764969][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 92.772663][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 92.780316][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 92.788029][ T36] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 92.801468][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.901018][ T36] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 92.931167][ T23] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 93.042279][ T6856] loop1: detected capacity change from 0 to 2048 [ 93.074044][ T6856] EXT4-fs (loop1): failed to initialize system zone (-117) [ 93.089494][ T6856] EXT4-fs (loop1): mount failed [ 93.118689][ T6856] geneve2: entered promiscuous mode [ 93.189740][ T6865] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 93.215459][ T6865] loop5: detected capacity change from 0 to 1024 [ 93.228026][ T6865] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 93.365317][ T6878] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 93.372385][ T6877] IPVS: stopping master sync thread 6878 ... [ 93.378192][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1089'. [ 93.391227][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1089'. [ 93.492126][ T6891] 9pnet: p9_errstr2errno: server reported unknown error [ 93.544484][ T6895] loop3: detected capacity change from 0 to 1024 [ 93.551717][ T6895] EXT4-fs: Ignoring removed nobh option [ 93.558948][ T6895] EXT4-fs: Ignoring removed bh option [ 93.564671][ T6895] EXT4-fs: Ignoring removed nobh option [ 93.584377][ T6895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.608074][ T6895] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 93.644446][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.802130][ T6915] loop2: detected capacity change from 0 to 128 [ 94.098241][ T6934] loop1: detected capacity change from 0 to 512 [ 94.141605][ T6934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 94.170603][ T6934] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.193388][ T6934] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.1112: corrupted inode contents [ 94.236142][ T6939] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.264576][ T6934] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #18: comm syz.1.1112: mark_inode_dirty error [ 94.310228][ T6934] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.1112: corrupted inode contents [ 94.336714][ T6934] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.1112: mark_inode_dirty error [ 94.363509][ T6939] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.379170][ T6934] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.1112: mark inode dirty (error -117) [ 94.404412][ T6934] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 94.434199][ T6939] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.451283][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 94.516457][ T6939] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.594523][ T133] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.624358][ T133] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.656294][ T133] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.697398][ T6952] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.764002][ T133] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.772550][ T6960] netlink: 'syz.2.1122': attribute type 30 has an invalid length. [ 94.820559][ T6952] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.907019][ T6952] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.019125][ T6952] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.249188][ T6721] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.332778][ T37] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.411228][ T37] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.493936][ T6711] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.578950][ T6989] loop6: detected capacity change from 0 to 512 [ 95.613144][ T6989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.662801][ T6989] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.743696][ T6996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6996 comm=syz.5.1135 [ 95.788139][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.077932][ T7009] netlink: 'syz.3.1140': attribute type 30 has an invalid length. [ 96.186541][ T7015] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.243041][ T7024] __nla_validate_parse: 1 callbacks suppressed [ 96.243054][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1144'. [ 96.303371][ T7015] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.425714][ T7040] loop3: detected capacity change from 0 to 4096 [ 96.450082][ T7040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.485900][ T7015] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.522834][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.552826][ T7052] loop3: detected capacity change from 0 to 164 [ 96.564175][ T7052] bio_check_eod: 32 callbacks suppressed [ 96.564193][ T7052] syz.3.1158: attempt to access beyond end of device [ 96.564193][ T7052] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 96.586438][ T7052] syz.3.1158: attempt to access beyond end of device [ 96.586438][ T7052] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 96.667130][ T7059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.674423][ T7059] IPv6: NLM_F_CREATE should be set when creating new route [ 96.674713][ T7015] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.740063][ T7063] loop1: detected capacity change from 0 to 512 [ 96.756201][ T7065] loop3: detected capacity change from 0 to 512 [ 96.772533][ T7065] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.780173][ T7063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.789833][ T7065] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.806534][ T7063] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.810819][ T7065] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 96.826344][ T7065] System zones: 1-12 [ 96.830699][ T7065] EXT4-fs (loop3): 1 truncate cleaned up [ 96.836942][ T7065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.868004][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.976270][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 96.976285][ T29] audit: type=1400 audit(1758187440.557:3705): avc: denied { accept } for pid=7071 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.983812][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1165'. [ 97.023314][ T6722] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.043111][ T6722] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.056149][ T6722] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.067279][ T6722] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.189417][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1170'. [ 97.375606][ T7094] netlink: zone id is out of range [ 97.382565][ T7094] netlink: zone id is out of range [ 97.418307][ T29] audit: type=1400 audit(1758187440.997:3706): avc: denied { read } for pid=7095 comm="syz.5.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.418827][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1176'. [ 97.535603][ T7101] loop1: detected capacity change from 0 to 1024 [ 97.542939][ T7101] EXT4-fs: Ignoring removed orlov option [ 97.553405][ T7101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.566356][ T7104] loop5: detected capacity change from 0 to 4096 [ 97.582624][ T7104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.619804][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.662160][ T7110] 9pnet: p9_errstr2errno: server reported unknown error [ 97.673486][ T7112] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1181'. [ 97.847431][ T29] audit: type=1400 audit(1758187441.427:3707): avc: denied { relabelfrom } for pid=7117 comm="syz.6.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.867416][ T29] audit: type=1400 audit(1758187441.427:3708): avc: denied { relabelto } for pid=7117 comm="syz.6.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 98.243853][ T29] audit: type=1400 audit(1758187441.827:3709): avc: denied { getopt } for pid=7143 comm="syz.1.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.666376][ T29] audit: type=1326 audit(1758187442.247:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd4e4575b67 code=0x7ffc0000 [ 98.723351][ T29] audit: type=1326 audit(1758187442.277:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd4e451ada9 code=0x7ffc0000 [ 98.746939][ T29] audit: type=1326 audit(1758187442.277:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd4e4575b67 code=0x7ffc0000 [ 98.770310][ T29] audit: type=1326 audit(1758187442.277:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd4e451ada9 code=0x7ffc0000 [ 98.793958][ T29] audit: type=1326 audit(1758187442.277:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.2.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e457eba9 code=0x7ffc0000 [ 98.938014][ T7164] loop2: detected capacity change from 0 to 164 [ 98.962206][ T7164] syz.2.1201: attempt to access beyond end of device [ 98.962206][ T7164] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 98.990004][ T7168] loop3: detected capacity change from 0 to 512 [ 98.990481][ T7164] syz.2.1201: attempt to access beyond end of device [ 98.990481][ T7164] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 99.022030][ T7168] EXT4-fs (loop3): orphan cleanup on readonly fs [ 99.037921][ T7168] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1203: bad orphan inode 13 [ 99.058328][ T7168] ext4_test_bit(bit=12, block=18) = 1 [ 99.063845][ T7168] is_bad_inode(inode)=0 [ 99.068051][ T7168] NEXT_ORPHAN(inode)=2130706432 [ 99.073191][ T7168] max_ino=32 [ 99.076415][ T7168] i_nlink=1 [ 99.173515][ T7188] : renamed from bond0 (while UP) [ 100.269179][ T7239] syzkaller0: entered allmulticast mode [ 100.285250][ T7239] syzkaller0: entered promiscuous mode [ 100.296851][ T7239] syzkaller0 (unregistering): left allmulticast mode [ 100.303694][ T7239] syzkaller0 (unregistering): left promiscuous mode [ 100.429126][ T7245] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.672453][ T7245] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.957088][ T7245] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.134970][ T7245] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.274729][ T379] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.293335][ T6666] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.340678][ T6666] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.376966][ T6666] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.850289][ T7286] loop3: detected capacity change from 0 to 256 [ 102.459430][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 102.459449][ T29] audit: type=1326 audit(1758187446.037:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 102.530720][ T29] audit: type=1326 audit(1758187446.037:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 102.554368][ T29] audit: type=1326 audit(1758187446.037:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 102.577868][ T29] audit: type=1326 audit(1758187446.037:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 102.601300][ T29] audit: type=1326 audit(1758187446.037:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 102.624782][ T29] audit: type=1326 audit(1758187446.037:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 102.648241][ T29] audit: type=1326 audit(1758187446.037:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 102.671686][ T29] audit: type=1326 audit(1758187446.037:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 102.695337][ T29] audit: type=1326 audit(1758187446.037:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 102.719049][ T29] audit: type=1326 audit(1758187446.037:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.5.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c367eba9 code=0x7ffc0000 [ 103.129315][ T7325] loop6: detected capacity change from 0 to 128 [ 103.157507][ T7325] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1263'. [ 103.189654][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813140b200: rx timeout, send abort [ 103.197929][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813140a800: rx timeout, send abort [ 103.206214][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88813140b200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.220534][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88813140a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.259947][ T7337] loop6: detected capacity change from 0 to 512 [ 103.267348][ T7337] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 103.281690][ T7337] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 103.289965][ T7337] System zones: 1-12 [ 103.295821][ T7337] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.1268: corrupted in-inode xattr: e_value size too large [ 103.310272][ T7337] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1268: couldn't read orphan inode 15 (err -117) [ 103.324341][ T7337] EXT4-fs mount: 4 callbacks suppressed [ 103.324358][ T7337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.359214][ T7346] loop5: detected capacity change from 0 to 512 [ 103.367973][ T7346] EXT4-fs: Ignoring removed nobh option [ 103.374496][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.378481][ T7350] loop1: detected capacity change from 0 to 1024 [ 103.385675][ T7346] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.390335][ T7350] EXT4-fs: Ignoring removed bh option [ 103.404897][ T7350] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 103.416885][ T7346] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1272: iget: bad i_size value: 38620345925642 [ 103.430224][ T7346] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1272: couldn't read orphan inode 15 (err -117) [ 103.443959][ T7346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.445482][ T7350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.487497][ T4737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.520818][ T7359] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1276'. [ 103.530013][ T7359] tipc: Enabling of bearer rejected, failed to enable media [ 103.609341][ T7363] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.737386][ T7363] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.856831][ T7363] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.879485][ T7373] loop6: detected capacity change from 0 to 512 [ 103.888046][ T7373] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 103.902626][ T7373] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 103.921020][ T7373] EXT4-fs (loop6): 1 truncate cleaned up [ 103.927282][ T7373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.971274][ T7363] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.276513][ T379] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.307158][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.359197][ T7390] loop6: detected capacity change from 0 to 512 [ 104.395804][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.406277][ T270] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.418885][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1290'. [ 104.423115][ T7390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.450806][ T7390] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.496285][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.537869][ T6721] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.546292][ T6721] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.024124][ T7418] bridge_slave_0: left allmulticast mode [ 105.029829][ T7418] bridge_slave_0: left promiscuous mode [ 105.035615][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.302401][ T7418] bridge_slave_1: left allmulticast mode [ 105.308131][ T7418] bridge_slave_1: left promiscuous mode [ 105.313925][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.402889][ T7418] bond0: (slave bond_slave_0): Releasing backup interface [ 105.414374][ T7418] bond0: (slave bond_slave_1): Releasing backup interface [ 105.427450][ T7418] team0: Port device team_slave_0 removed [ 105.494848][ T7429] loop5: detected capacity change from 0 to 512 [ 105.513515][ T7418] team0: Port device team_slave_1 removed [ 105.520315][ T7418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.527785][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.550534][ T7429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.570843][ T7429] EXT4-fs (loop5): orphan cleanup on readonly fs [ 105.577716][ T7429] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1302: Failed to acquire dquot type 1 [ 105.621841][ T7429] EXT4-fs (loop5): 1 truncate cleaned up [ 105.628268][ T7429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.678658][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1302'. [ 105.751552][ T4737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.833823][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1307'. [ 105.976938][ T7450] syzkaller0: entered allmulticast mode [ 105.987433][ T7450] syzkaller0: entered promiscuous mode [ 106.002979][ T7450] syzkaller0 (unregistering): left allmulticast mode [ 106.009910][ T7450] syzkaller0 (unregistering): left promiscuous mode [ 106.079012][ T7456] siw: device registration error -23 [ 106.453832][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 106.544642][ T7471] wg2: entered promiscuous mode [ 106.544658][ T7471] wg2: entered allmulticast mode [ 106.651117][ T7479] loop6: detected capacity change from 0 to 512 [ 106.668355][ T7479] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 106.681824][ T7479] EXT4-fs (loop6): invalid journal inode [ 106.697697][ T7479] EXT4-fs (loop6): can't get journal size [ 106.709047][ T7479] EXT4-fs (loop6): 1 truncate cleaned up [ 106.721722][ T7479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.749520][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1322'. [ 106.817309][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.904502][ T7499] loop6: detected capacity change from 0 to 1024 [ 106.915091][ T7499] EXT4-fs: Ignoring removed bh option [ 106.920883][ T7499] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 106.949902][ T7499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.597724][ T7538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1344'. [ 107.852930][ T7541] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 107.992515][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.028502][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 108.028516][ T29] audit: type=1400 audit(1758187451.607:3869): avc: denied { mounton } for pid=7550 comm="syz.5.1350" path="/173/file0" dev="tmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 108.217842][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.236288][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.322309][ T7580] loop1: detected capacity change from 0 to 512 [ 108.336998][ T29] audit: type=1326 audit(1758187451.917:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7581 comm="syz.5.1364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25c367eba9 code=0x0 [ 108.363362][ T7580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.376366][ T7580] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.583205][ T29] audit: type=1400 audit(1758187452.167:3871): avc: denied { write } for pid=7586 comm="syz.3.1365" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 108.602879][ T29] audit: type=1400 audit(1758187452.167:3872): avc: denied { read } for pid=7586 comm="syz.3.1365" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 108.645277][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.682519][ T7592] syzkaller0: entered promiscuous mode [ 108.688056][ T7592] syzkaller0: entered allmulticast mode [ 108.781463][ T29] audit: type=1326 audit(1758187452.367:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe211ddeba9 code=0x7ffc0000 [ 108.805221][ T29] audit: type=1326 audit(1758187452.367:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe211ddeba9 code=0x7ffc0000 [ 108.829557][ T29] audit: type=1326 audit(1758187452.417:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe211ddeba9 code=0x7ffc0000 [ 108.853265][ T29] audit: type=1326 audit(1758187452.417:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe211ddebe3 code=0x7ffc0000 [ 108.876703][ T29] audit: type=1326 audit(1758187452.417:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe211ddebe3 code=0x7ffc0000 [ 108.900120][ T29] audit: type=1326 audit(1758187452.417:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe211ddeba9 code=0x7ffc0000 [ 108.972916][ T7598] loop1: detected capacity change from 0 to 512 [ 108.981228][ T7598] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.992602][ T7598] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 109.008375][ T7598] EXT4-fs (loop1): 1 truncate cleaned up [ 109.020748][ T7598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.214455][ T379] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.222899][ T379] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.239742][ T379] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.254478][ T379] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.333993][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.343255][ T7619] loop5: detected capacity change from 0 to 1024 [ 109.376322][ T7619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.418465][ T7617] bridge_slave_0: left allmulticast mode [ 109.421984][ T7619] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1376: Allocating blocks 449-513 which overlap fs metadata [ 109.424352][ T7617] bridge_slave_0: left promiscuous mode [ 109.443861][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.454477][ T7617] bridge_slave_1: left allmulticast mode [ 109.460333][ T7617] bridge_slave_1: left promiscuous mode [ 109.466150][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.475667][ T7618] EXT4-fs (loop5): pa ffff888106a90b60: logic 48, phys. 177, len 21 [ 109.483863][ T7618] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 109.513047][ T4737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.532224][ T7617] : (slave bond_slave_0): Releasing backup interface [ 109.540311][ T7617] bond_slave_0: left promiscuous mode [ 109.548353][ T7617] : (slave bond_slave_1): Releasing backup interface [ 109.556958][ T7617] bond_slave_1: left promiscuous mode [ 109.574361][ T7617] team0: Port device team_slave_0 removed [ 109.585040][ T7617] team0: Port device team_slave_1 removed [ 109.676894][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.704385][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.740525][ T7643] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1385'. [ 109.915943][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1390'. [ 109.978504][ T7660] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1392'. [ 109.995486][ T7660]  (unregistering): left promiscuous mode [ 110.020001][ T7660]  (unregistering): Released all slaves [ 110.185358][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 110.194447][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 110.358287][ T7688] loop1: detected capacity change from 0 to 1024 [ 110.372965][ T7688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.384099][ T7695] loop3: detected capacity change from 0 to 1024 [ 110.397051][ T7688] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1404: Allocating blocks 385-513 which overlap fs metadata [ 110.404103][ T7695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.416684][ T7688] EXT4-fs (loop1): pa ffff8881007f1700: logic 16, phys. 129, len 24 [ 110.431107][ T7688] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 110.444150][ T7688] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 110.456512][ T7688] EXT4-fs (loop1): This should not happen!! Data will be lost [ 110.456512][ T7688] [ 110.461112][ T7695] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1406: Allocating blocks 449-513 which overlap fs metadata [ 110.466296][ T7688] EXT4-fs (loop1): Total free blocks count 0 [ 110.486323][ T7688] EXT4-fs (loop1): Free/Dirty block details [ 110.492306][ T7688] EXT4-fs (loop1): free_blocks=128 [ 110.497483][ T7688] EXT4-fs (loop1): dirty_blocks=0 [ 110.502669][ T7688] EXT4-fs (loop1): Block reservation details [ 110.502738][ T7694] EXT4-fs (loop3): pa ffff8881007f1700: logic 48, phys. 177, len 21 [ 110.508755][ T7688] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 110.522748][ T7694] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 110.544088][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.569280][ T7701] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1408'. [ 110.882833][ T7716] netlink: 'syz.1.1413': attribute type 7 has an invalid length. [ 110.890655][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'. [ 111.033337][ T7724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1417'. [ 111.067115][ T7727] loop1: detected capacity change from 0 to 1024 [ 111.089139][ T7727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.189616][ T7727] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1418: Allocating blocks 449-513 which overlap fs metadata [ 111.248305][ T7726] EXT4-fs (loop1): pa ffff888106a90bd0: logic 48, phys. 177, len 21 [ 111.256517][ T7726] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 111.283954][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.484029][ T7768] loop1: detected capacity change from 0 to 2048 [ 111.514165][ T7768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.526471][ T7768] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.544880][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104af7200: rx timeout, send abort [ 111.616752][ T7778] loop2: detected capacity change from 0 to 1024 [ 111.654832][ T6721] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:57: bg 0: block 345: padding at end of block bitmap is not set [ 111.669741][ T6721] EXT4-fs (loop1): Remounting filesystem read-only [ 111.676486][ T379] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 111.700211][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.712915][ T7778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.762029][ T7778] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1437: Allocating blocks 449-513 which overlap fs metadata [ 111.781329][ T7794] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1443'. [ 111.790990][ T7776] EXT4-fs (loop2): pa ffff8881007f1700: logic 48, phys. 177, len 21 [ 111.799037][ T7776] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 111.827103][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.053189][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104af7200: abort rx timeout. Force session deactivation [ 112.297035][ T7826] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 112.303713][ T7826] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.311319][ T7826] vhci_hcd vhci_hcd.0: Device attached [ 112.331634][ T7826] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1457'. [ 112.358234][ T7827] vhci_hcd: connection closed [ 112.358555][ T379] vhci_hcd: stop threads [ 112.367642][ T379] vhci_hcd: release socket [ 112.372144][ T379] vhci_hcd: disconnect device [ 112.879044][ T7844] loop6: detected capacity change from 0 to 1024 [ 112.902387][ T7844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.936979][ T7844] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1462: Allocating blocks 449-513 which overlap fs metadata [ 112.959496][ T7843] EXT4-fs (loop6): pa ffff8881007f1690: logic 48, phys. 177, len 21 [ 112.967768][ T7843] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 112.991920][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.043753][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 113.043773][ T29] audit: type=1400 audit(1758187456.627:4084): avc: denied { watch } for pid=7860 comm="syz.1.1468" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 113.120443][ T7870] netlink: 'syz.2.1471': attribute type 4 has an invalid length. [ 113.169361][ T7877] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.201714][ T7881] loop6: detected capacity change from 0 to 1024 [ 113.212654][ T7881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.243242][ T7881] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1477: Allocating blocks 449-513 which overlap fs metadata [ 113.266139][ T7880] EXT4-fs (loop6): pa ffff888106a90cb0: logic 48, phys. 177, len 21 [ 113.274301][ T7880] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 113.295843][ T4949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.385227][ T7886] loop9: detected capacity change from 0 to 7 [ 113.391813][ T7886] buffer_io_error: 18 callbacks suppressed [ 113.391831][ T7886] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.405887][ T7886] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.413815][ T7886] loop9: unable to read partition table [ 113.419508][ T7886] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 113.419508][ T7886] ) failed (rc=-5) [ 114.040094][ T7895] loop2: detected capacity change from 0 to 1024 [ 114.050103][ T7895] EXT4-fs: Ignoring removed bh option [ 114.056590][ T7895] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 114.078376][ T29] audit: type=1326 audit(1758187457.657:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.6.1483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef5247eba9 code=0x0 [ 114.104911][ T7895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.138973][ T7897] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.175132][ T29] audit: type=1326 audit(1758187457.757:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.3.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 114.198733][ T29] audit: type=1326 audit(1758187457.757:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.3.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 114.222370][ T29] audit: type=1326 audit(1758187457.757:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.3.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 114.246016][ T29] audit: type=1326 audit(1758187457.757:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.3.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 114.269533][ T29] audit: type=1326 audit(1758187457.757:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.3.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 114.293113][ T29] audit: type=1326 audit(1758187457.757:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.3.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 114.316569][ T29] audit: type=1326 audit(1758187457.757:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.3.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 114.340001][ T29] audit: type=1326 audit(1758187457.757:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.3.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efd5b08eba9 code=0x7ffc0000 [ 114.365215][ T36] Process accounting resumed [ 114.420881][ T7895] ================================================================== [ 114.429009][ T7895] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 114.436343][ T7895] [ 114.438686][ T7895] read to 0xffff888106bf3588 of 8 bytes by task 7909 on cpu 0: [ 114.446241][ T7895] atime_needs_update+0x252/0x3e0 [ 114.451344][ T7895] touch_atime+0x4a/0x340 [ 114.451708][ T7897] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.455735][ T7895] filemap_splice_read+0x6ba/0x740 [ 114.455764][ T7895] ext4_file_splice_read+0x8f/0xb0 [ 114.455803][ T7895] splice_direct_to_actor+0x26c/0x680 [ 114.455828][ T7895] do_splice_direct+0xda/0x150 [ 114.455852][ T7895] do_sendfile+0x380/0x650 [ 114.455889][ T7895] __x64_sys_sendfile64+0x105/0x150 [ 114.455925][ T7895] x64_sys_call+0x2bb0/0x2ff0 [ 114.455951][ T7895] do_syscall_64+0xd2/0x200 [ 114.455989][ T7895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.456015][ T7895] [ 114.456022][ T7895] write to 0xffff888106bf3588 of 8 bytes by task 7895 on cpu 1: [ 114.456042][ T7895] touch_atime+0x1d2/0x340 [ 114.456078][ T7895] filemap_splice_read+0x6ba/0x740 [ 114.456102][ T7895] ext4_file_splice_read+0x8f/0xb0 [ 114.456139][ T7895] splice_direct_to_actor+0x26c/0x680 [ 114.456164][ T7895] do_splice_direct+0xda/0x150 [ 114.456188][ T7895] do_sendfile+0x380/0x650 [ 114.456223][ T7895] __x64_sys_sendfile64+0x105/0x150 [ 114.456258][ T7895] x64_sys_call+0x2bb0/0x2ff0 [ 114.456286][ T7895] do_syscall_64+0xd2/0x200 [ 114.456327][ T7895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.456354][ T7895] [ 114.456360][ T7895] value changed: 0x0000000068cbcfc1 -> 0x0000000068cbcfc2 [ 114.456374][ T7895] [ 114.456378][ T7895] Reported by Kernel Concurrency Sanitizer on: [ 114.456403][ T7895] CPU: 1 UID: 0 PID: 7895 Comm: syz.2.1480 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.598377][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.608445][ T7895] ================================================================== [ 114.727291][ T7897] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.815029][ T7897] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.963112][ T379] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.011309][ T379] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.028683][ T379] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.037179][ T6721] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.041219][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.