last executing test programs: 3.020666905s ago: executing program 0 (id=272): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) 2.754917667s ago: executing program 2 (id=277): clock_gettime(0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000fc0)={0x1, 0x4, 0x7ff, 0x6}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.245641131s ago: executing program 4 (id=284): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.120071923s ago: executing program 4 (id=286): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@errors_remount}, {@bsdgroups}, {@nouid32}, {@jqfmt_vfsv0}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa05aaaaaaaabb88a8000081"], 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2.119692073s ago: executing program 0 (id=287): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x79, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x40) setxattr$incfs_metadata(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340), 0x0, 0x0, 0x3) r3 = creat(0x0, 0x16) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f000000a040)=[{{&(0x7f0000006d00)=@sco={0x1f, @none}, 0x80, 0x0}}], 0x1, 0x4851) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[], 0x144}}, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r11 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'netpci0\x00'}) bind$packet(r5, 0x0, 0x0) fallocate(r11, 0x0, 0x400000000000000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES32=r10], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r8, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r8, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.794189198s ago: executing program 3 (id=289): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 1.71063601s ago: executing program 4 (id=291): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x118}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.70166719s ago: executing program 2 (id=292): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/206, 0xce}, 0x200}], 0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) 1.662784521s ago: executing program 0 (id=293): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000005}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000680)) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) connect$inet(r0, &(0x7f0000000280)={0x2, 0x400, @dev}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0x1}, 0x18) syz_clone3(&(0x7f0000000cc0)={0x2000000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[0x0], 0x1}, 0x58) close(r0) 1.641175761s ago: executing program 3 (id=294): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6d08586dd61bcc1d700006cff0000000000000000000000000000000100000000000000000000000000000001"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 1.566388922s ago: executing program 0 (id=295): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x37, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r4, 0x80085502, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r3}, 0x10) get_mempolicy(&(0x7f0000000040), &(0x7f0000000180), 0x5, &(0x7f0000ffb000/0x4000)=nil, 0x1) setresuid(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) syz_io_uring_setup(0x4cd, &(0x7f0000000100)={0x0, 0x10645c, 0x800, 0x400040, 0x240}, &(0x7f0000000300)=0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0x109}], 0x1}, 0x400c0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_setup(0x76f8, &(0x7f0000000240)={0x0, 0xa4f0, 0x10200, 0x3, 0x1c4, 0x0, r5}, &(0x7f0000000080), &(0x7f0000000380)=0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r11, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r11) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r11, 0x0, &(0x7f0000000040)="2d01ccf928a370dddd03e8dbb62ede", 0xf, 0x11, 0x1, {0x0, r12}}) syz_io_uring_submit(r6, r10, &(0x7f0000000780)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000400)=@in6={0xa, 0x4e23, 0x3ff, @local, 0xb9}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000580)="e134f9adeb73691982be00abb6ea1e732951805bc48f9fc22d315fe3fa701efc3e", 0x21}, {&(0x7f0000000680)="ee0d84c11cca666318749609582e70040f4813d8675737a46139d8a90103315a25ec425b69c016a9c54802d2ec74fdfb229d5960721d2ed5879634a4c0cdda0b12811b1933dbeed47aac414c5d954dfea1636f770e31451b3c214544d0675f466c890e5d98fa26e3ec06298494cdd380d62c", 0x72}, {&(0x7f00000005c0)="dcc706fa6f454ca3454cd8702cf7e8cb8fb37b0c1d9eecff", 0x18}], 0x3}, 0x0, 0x11, 0x1, {0x0, r12}}) 1.566100951s ago: executing program 4 (id=296): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000740), 0xff67) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffb) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ftruncate(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000a7c96d5d00000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='contention_end\x00', r1}, 0x18) 1.511500432s ago: executing program 4 (id=297): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) 1.464220853s ago: executing program 1 (id=299): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b66, &(0x7f0000000040)) socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.393185825s ago: executing program 3 (id=300): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x557, &(0x7f0000000280)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000dc0)='./cgroup\x00', 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) 1.363695795s ago: executing program 1 (id=301): ioperm(0x0, 0xab4a, 0x5) syslog(0x2, 0x0, 0x0) syslog(0x0, 0x0, 0x0) 1.241647247s ago: executing program 3 (id=302): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@errors_remount}, {@bsdgroups}, {@nouid32}, {@jqfmt_vfsv0}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa05aaaaaaaabb88a8000081"], 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.241304517s ago: executing program 1 (id=303): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x79, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x40) setxattr$incfs_metadata(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340), 0x0, 0x0, 0x3) r3 = creat(0x0, 0x16) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f000000a040)=[{{&(0x7f0000006d00)=@sco={0x1f, @none}, 0x80, 0x0}}], 0x1, 0x4851) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[], 0x144}}, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r11 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'netpci0\x00'}) bind$packet(r5, 0x0, 0x0) fallocate(r11, 0x0, 0x400000000000000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES32=r10], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r8, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r8, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.129341238s ago: executing program 3 (id=304): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket(0x2, 0x3, 0xff) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 826.15288ms ago: executing program 4 (id=305): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") setxattr$security_evm(&(0x7f0000001740)='./bus\x00', 0x0, &(0x7f00000027c0)=@v2={0x3, 0x3, 0xa}, 0x9, 0x3) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 822.45874ms ago: executing program 1 (id=306): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0xf4, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x63, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRESHEX=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xa26}, 0x18) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x0, 0x1, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) r10 = dup(r9) r11 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000006c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}]}, &(0x7f0000000180)=0x10) getpeername$packet(r11, 0x0, 0x0) ioctl$TCSETAF(r10, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3f, 0x0, "00efffffff00"}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000400)=0x9) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000100)=0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0xc, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x4, 0x3}, @enum64={0x4, 0x2, 0x0, 0x13, 0x1, 0x2, [{0xa, 0x9}, {0xe, 0x9, 0x8}]}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x4}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x4}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x78, 0x0, 0x2e, 0x6}]}, {0x0, [0x2e, 0x2e, 0x0, 0x2e, 0x0, 0x2e, 0x0, 0x30, 0x61, 0x5f]}}, &(0x7f0000002000)=""/4096, 0x80, 0x1000, 0x0, 0x5, 0x10000, @value=r10}, 0x28) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[]) 772.954809ms ago: executing program 2 (id=307): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r0, &(0x7f0000000740), 0xff67) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0xfffb) fcntl$addseals(r0, 0x409, 0x8) ftruncate(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000a7c96d5d00000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='contention_end\x00', r1}, 0x18) 306.837746ms ago: executing program 2 (id=308): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x4, 0x0, 0x7, 0x1, 0xf0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="adf52f8b471046086ab7851d3931b1c3fd9075924f1f69203a77f043557d74ec6cac0a9429c91d38a2fd7df823d3cb1dffbd8cdf4fb0e4d6136da15c0801ff146913adf63ae99c300cd6a4146d72c2cf8696824cd1845a2686600e92b95ec22621800833b60863b94608e5f7efb63ab7bf6fe8a45662599ac300a68d4387c45254c41340d8e26799e88f4bd1826a8253c86899fc057a66e1b7324a79e9fc505352df4edd6bb78779a66b654844b606f74d8fdb316854477270988d87779d88bf547207fb994f885b0e76450ec2b0c83ba141f926d2a9fe2884ebc884bea630abcd03a3aabfb2944be50f14", 0xeb) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) close(r1) 205.712608ms ago: executing program 0 (id=309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 121.746099ms ago: executing program 2 (id=310): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40004) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20004011, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @empty, 0x5}, 0x1c) 119.949869ms ago: executing program 3 (id=311): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040), 0x13f}}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 66.99931ms ago: executing program 1 (id=312): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 55.4032ms ago: executing program 0 (id=313): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@nombcache}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) 32.69767ms ago: executing program 2 (id=314): socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getuid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x0, 0x2}}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x2890}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x3c}, 0x1, 0x2}, 0x4050) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) sendfile(r6, 0xffffffffffffffff, 0x0, 0x80000001) 0s ago: executing program 1 (id=315): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 25.808605][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 25.808623][ T29] audit: type=1400 audit(1747447483.002:60): avc: denied { transition } for pid=3292 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.844553][ T29] audit: type=1400 audit(1747447483.002:61): avc: denied { noatsecure } for pid=3292 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.866781][ T29] audit: type=1400 audit(1747447483.012:62): avc: denied { write } for pid=3292 comm="sh" path="pipe:[1604]" dev="pipefs" ino=1604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 25.892337][ T29] audit: type=1400 audit(1747447483.012:63): avc: denied { rlimitinh } for pid=3292 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.913541][ T29] audit: type=1400 audit(1747447483.012:64): avc: denied { siginh } for pid=3292 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 34.176087][ T29] audit: type=1400 audit(1747447491.372:65): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.177231][ T3305] cgroup: Unknown subsys name 'net' [ 34.212008][ T29] audit: type=1400 audit(1747447491.372:66): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.241644][ T29] audit: type=1400 audit(1747447491.412:67): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.402070][ T3305] cgroup: Unknown subsys name 'cpuset' [ 34.409314][ T3305] cgroup: Unknown subsys name 'rlimit' [ 34.540449][ T29] audit: type=1400 audit(1747447491.732:68): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.568004][ T29] audit: type=1400 audit(1747447491.732:69): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.591204][ T29] audit: type=1400 audit(1747447491.732:70): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.614398][ T29] audit: type=1400 audit(1747447491.732:71): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.637496][ T29] audit: type=1400 audit(1747447491.732:72): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.646261][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.665682][ T29] audit: type=1400 audit(1747447491.732:73): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.700621][ T29] audit: type=1400 audit(1747447491.872:74): avc: denied { relabelto } for pid=3309 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.737589][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.851355][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.959096][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 36.001599][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.008815][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.016258][ T3315] bridge_slave_0: entered allmulticast mode [ 36.022795][ T3315] bridge_slave_0: entered promiscuous mode [ 36.029574][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.036728][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.044030][ T3315] bridge_slave_1: entered allmulticast mode [ 36.050412][ T3315] bridge_slave_1: entered promiscuous mode [ 36.088699][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.110073][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.118251][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.126469][ T3328] bridge_slave_0: entered allmulticast mode [ 36.133787][ T3328] bridge_slave_0: entered promiscuous mode [ 36.141667][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.148764][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.156206][ T3328] bridge_slave_1: entered allmulticast mode [ 36.162725][ T3328] bridge_slave_1: entered promiscuous mode [ 36.170169][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.191979][ T3315] team0: Port device team_slave_0 added [ 36.198723][ T3315] team0: Port device team_slave_1 added [ 36.238042][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.250071][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.259614][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.266611][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.292858][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.306731][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.314282][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.341042][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.366055][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 36.398514][ T3328] team0: Port device team_slave_0 added [ 36.405686][ T3328] team0: Port device team_slave_1 added [ 36.440907][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.448071][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.474410][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.487587][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.494719][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.520828][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.538435][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 36.547299][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 36.566793][ T3315] hsr_slave_0: entered promiscuous mode [ 36.574061][ T3315] hsr_slave_1: entered promiscuous mode [ 36.633763][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.641074][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.648231][ T3324] bridge_slave_0: entered allmulticast mode [ 36.655055][ T3324] bridge_slave_0: entered promiscuous mode [ 36.663966][ T3328] hsr_slave_0: entered promiscuous mode [ 36.670038][ T3328] hsr_slave_1: entered promiscuous mode [ 36.676776][ T3328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.684609][ T3328] Cannot create hsr debugfs directory [ 36.699741][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.707209][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.714813][ T3324] bridge_slave_1: entered allmulticast mode [ 36.721489][ T3324] bridge_slave_1: entered promiscuous mode [ 36.755304][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.762931][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.770546][ T3325] bridge_slave_0: entered allmulticast mode [ 36.777275][ T3325] bridge_slave_0: entered promiscuous mode [ 36.787846][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.795186][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.803024][ T3325] bridge_slave_1: entered allmulticast mode [ 36.809494][ T3325] bridge_slave_1: entered promiscuous mode [ 36.822846][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.856158][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.867854][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.875147][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.882581][ T3327] bridge_slave_0: entered allmulticast mode [ 36.889054][ T3327] bridge_slave_0: entered promiscuous mode [ 36.915714][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.923157][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.930477][ T3327] bridge_slave_1: entered allmulticast mode [ 36.937258][ T3327] bridge_slave_1: entered promiscuous mode [ 36.945050][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.974508][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.990357][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.001777][ T3324] team0: Port device team_slave_0 added [ 37.011217][ T3324] team0: Port device team_slave_1 added [ 37.031230][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.068869][ T3325] team0: Port device team_slave_0 added [ 37.087154][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.094215][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.120772][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.132315][ T3325] team0: Port device team_slave_1 added [ 37.138362][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.145410][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.171581][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.207590][ T3327] team0: Port device team_slave_0 added [ 37.214481][ T3327] team0: Port device team_slave_1 added [ 37.228752][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.236124][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.263445][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.288311][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.295831][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.322414][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.338445][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.345865][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.372713][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.392206][ T3324] hsr_slave_0: entered promiscuous mode [ 37.398425][ T3324] hsr_slave_1: entered promiscuous mode [ 37.407754][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.415339][ T3324] Cannot create hsr debugfs directory [ 37.432011][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.439040][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.466406][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.498241][ T3325] hsr_slave_0: entered promiscuous mode [ 37.504803][ T3325] hsr_slave_1: entered promiscuous mode [ 37.510845][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.518711][ T3325] Cannot create hsr debugfs directory [ 37.547065][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.556016][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.582503][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.591524][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.602378][ T3327] hsr_slave_0: entered promiscuous mode [ 37.608576][ T3327] hsr_slave_1: entered promiscuous mode [ 37.615070][ T3327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.622792][ T3327] Cannot create hsr debugfs directory [ 37.708291][ T3328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.719094][ T3328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.728847][ T3328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.738699][ T3328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.803426][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.813549][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.822941][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.833049][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.874102][ T3325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.884996][ T3325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.894191][ T3325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.912758][ T3325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.926571][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.962089][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.970978][ T3327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.980225][ T3327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.991476][ T3327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.002169][ T3327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.022291][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.029706][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.039301][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.046545][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.059372][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.103922][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.118347][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.130314][ T390] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.138131][ T390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.156713][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.176161][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.185205][ T390] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.193064][ T390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.210439][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.238645][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.245940][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.256181][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.277006][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.285201][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.296756][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.304455][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.315427][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.323865][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.371686][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.386970][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.422111][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.454202][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.461947][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.483071][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.491115][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.556611][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.600482][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.618171][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.658815][ T3315] veth0_vlan: entered promiscuous mode [ 38.674523][ T3315] veth1_vlan: entered promiscuous mode [ 38.682134][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.752807][ T3315] veth0_macvtap: entered promiscuous mode [ 38.777633][ T3328] veth0_vlan: entered promiscuous mode [ 38.796193][ T3315] veth1_macvtap: entered promiscuous mode [ 38.820628][ T3328] veth1_vlan: entered promiscuous mode [ 38.847436][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.860899][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.874108][ T3325] veth0_vlan: entered promiscuous mode [ 38.888221][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.897840][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.907936][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.917851][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.935747][ T3325] veth1_vlan: entered promiscuous mode [ 38.948744][ T3324] veth0_vlan: entered promiscuous mode [ 38.973959][ T3328] veth0_macvtap: entered promiscuous mode [ 39.000836][ T3325] veth0_macvtap: entered promiscuous mode [ 39.009538][ T3328] veth1_macvtap: entered promiscuous mode [ 39.026914][ T3324] veth1_vlan: entered promiscuous mode [ 39.037025][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.052880][ T3327] veth0_vlan: entered promiscuous mode [ 39.074347][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.083825][ T3327] veth1_vlan: entered promiscuous mode [ 39.096331][ T3325] veth1_macvtap: entered promiscuous mode [ 39.107331][ T3324] veth0_macvtap: entered promiscuous mode [ 39.120921][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.130856][ T3328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.140346][ T3328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.149278][ T3328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.158338][ T3328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.179533][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.194932][ T3324] veth1_macvtap: entered promiscuous mode [ 39.206643][ T3327] veth0_macvtap: entered promiscuous mode [ 39.218652][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.235445][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.249927][ T3327] veth1_macvtap: entered promiscuous mode [ 39.258654][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.272337][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.284923][ T3325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.286307][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 39.286325][ T29] audit: type=1400 audit(1747447496.482:98): avc: denied { create } for pid=3457 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.293724][ T3325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.328982][ T3325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.330971][ T29] audit: type=1400 audit(1747447496.492:99): avc: denied { bind } for pid=3457 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.338438][ T3325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.358458][ T29] audit: type=1400 audit(1747447496.492:100): avc: denied { name_bind } for pid=3457 comm="syz.1.6" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 39.358485][ T29] audit: type=1400 audit(1747447496.492:101): avc: denied { node_bind } for pid=3457 comm="syz.1.6" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 39.358508][ T29] audit: type=1400 audit(1747447496.492:102): avc: denied { write } for pid=3457 comm="syz.1.6" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.358532][ T29] audit: type=1400 audit(1747447496.492:103): avc: denied { connect } for pid=3457 comm="syz.1.6" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.445292][ T3462] netlink: 216 bytes leftover after parsing attributes in process `syz.1.8'. [ 39.456044][ T29] audit: type=1400 audit(1747447496.492:104): avc: denied { name_connect } for pid=3457 comm="syz.1.6" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 39.488461][ T29] audit: type=1400 audit(1747447496.492:105): avc: denied { getopt } for pid=3457 comm="syz.1.6" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.517923][ T3324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.527052][ T3324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.536375][ T3324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.546061][ T3324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.564675][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.583103][ T3327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.592344][ T3327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.601508][ T3327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.610606][ T3327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.695259][ T29] audit: type=1400 audit(1747447496.882:106): avc: denied { setopt } for pid=3466 comm="syz.4.5" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.792856][ T3476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10'. [ 39.811316][ T29] audit: type=1400 audit(1747447496.942:107): avc: denied { ioctl } for pid=3471 comm="syz.4.10" path="socket:[4574]" dev="sockfs" ino=4574 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.946888][ T3479] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 39.953565][ T3479] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 39.961294][ T3479] vhci_hcd vhci_hcd.0: Device attached [ 39.983795][ T3479] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 39.990663][ T3479] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 39.998844][ T3479] vhci_hcd vhci_hcd.0: Device attached [ 40.034080][ T3479] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(18) [ 40.041358][ T3479] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 40.049554][ T3479] vhci_hcd vhci_hcd.0: Device attached [ 40.066417][ T3479] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(20) [ 40.073542][ T3479] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 40.081611][ T3479] vhci_hcd vhci_hcd.0: Device attached [ 40.110525][ T3479] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(22) [ 40.117392][ T3479] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 40.125587][ T3479] vhci_hcd vhci_hcd.0: Device attached [ 40.166825][ T3496] IPv6: Can't replace route, no match found [ 40.177967][ T3479] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 40.202748][ T3479] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 40.221185][ T3477] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 40.236682][ T3501] loop3: detected capacity change from 0 to 512 [ 40.238260][ T3479] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 40.253572][ T3501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.271650][ T3501] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.279268][ T3479] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(30) [ 40.286471][ T3479] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 40.294718][ T3479] vhci_hcd vhci_hcd.0: Device attached [ 40.324508][ T3484] vhci_hcd: connection closed [ 40.324646][ T3480] vhci_hcd: connection reset by peer [ 40.335439][ T3482] vhci_hcd: connection closed [ 40.336522][ T3486] vhci_hcd: connection closed [ 40.344186][ T69] vhci_hcd: stop threads [ 40.353433][ T69] vhci_hcd: release socket [ 40.357988][ T69] vhci_hcd: disconnect device [ 40.363796][ T3489] vhci_hcd: connection closed [ 40.370814][ T3501] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 40.389674][ T69] vhci_hcd: stop threads [ 40.394156][ T69] vhci_hcd: release socket [ 40.399011][ T69] vhci_hcd: disconnect device [ 40.403899][ T3501] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 40.407553][ T69] vhci_hcd: stop threads [ 40.416702][ T69] vhci_hcd: release socket [ 40.421397][ T69] vhci_hcd: disconnect device [ 40.430881][ T69] vhci_hcd: stop threads [ 40.435756][ T69] vhci_hcd: release socket [ 40.440257][ T69] vhci_hcd: disconnect device [ 40.456422][ T3501] EXT4-fs (loop3): 1 truncate cleaned up [ 40.474058][ T69] vhci_hcd: stop threads [ 40.478526][ T69] vhci_hcd: release socket [ 40.483115][ T69] vhci_hcd: disconnect device [ 40.492704][ T3501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.506900][ T3501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.549509][ T3512] netlink: 'syz.2.16': attribute type 10 has an invalid length. [ 40.557277][ T3512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16'. [ 40.591920][ T3512] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 40.612563][ T3512] team0: Failed to send options change via netlink (err -105) [ 40.620140][ T3512] team0: Port device geneve1 added [ 40.633435][ T3501] loop3: detected capacity change from 0 to 512 [ 40.643509][ T3501] EXT4-fs (loop3): orphan cleanup on readonly fs [ 40.650129][ T3501] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 40.659229][ T3501] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 40.679750][ T3501] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.14: attempt to clear invalid blocks 2 len 1 [ 40.693229][ T3501] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.14: invalid indirect mapped block 1819239214 (level 0) [ 40.711112][ T3501] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.14: invalid indirect mapped block 1819239214 (level 1) [ 40.744951][ T3512] syz.2.16 (3512) used greatest stack depth: 10664 bytes left [ 40.759676][ T3501] EXT4-fs (loop3): 1 truncate cleaned up [ 40.805733][ T3501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.826129][ T3519] netlink: 96 bytes leftover after parsing attributes in process `syz.2.17'. [ 40.904988][ T3521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'. [ 40.914940][ T3521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'. [ 40.925630][ T3521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'. [ 40.986776][ T3523] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'. [ 40.996317][ T3523] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'. [ 41.006128][ T3523] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'. [ 41.028997][ T3501] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.14: Abort forced by user [ 41.060856][ T3503] vhci_hcd: connection closed [ 41.063480][ T69] vhci_hcd: stop threads [ 41.072787][ T69] vhci_hcd: release socket [ 41.077391][ T69] vhci_hcd: disconnect device [ 41.102497][ T3501] EXT4-fs (loop3): Remounting filesystem read-only [ 41.109178][ T3501] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 41.223225][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.049838][ T3567] IPVS: length: 72 != 24 [ 42.486114][ T3578] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 42.634357][ T3584] syzkaller1: entered promiscuous mode [ 42.640017][ T3584] syzkaller1: entered allmulticast mode [ 42.692534][ T3595] loop2: detected capacity change from 0 to 512 [ 42.708922][ T3595] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.716041][ T3595] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.743682][ T3595] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 42.756175][ T3595] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 42.767871][ T3595] EXT4-fs (loop2): 1 truncate cleaned up [ 42.774258][ T3595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.792516][ T3595] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.851554][ T3595] loop2: detected capacity change from 0 to 512 [ 42.868414][ T3595] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.874924][ T3595] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 42.911120][ T3595] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 42.926894][ T3595] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.36: attempt to clear invalid blocks 2 len 1 [ 42.961341][ T3595] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.36: invalid indirect mapped block 1819239214 (level 0) [ 42.983585][ T3595] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.36: invalid indirect mapped block 1819239214 (level 1) [ 43.028362][ T3613] xt_CT: No such helper "snmp" [ 43.033931][ T3595] EXT4-fs (loop2): 1 truncate cleaned up [ 43.040267][ T3595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.079778][ T3595] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.36: Abort forced by user [ 43.105348][ T3595] EXT4-fs (loop2): Remounting filesystem read-only [ 43.112458][ T3595] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 43.133730][ T3618] loop1: detected capacity change from 0 to 512 [ 43.191627][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.223136][ T3618] EXT4-fs: Ignoring removed nobh option [ 43.257634][ T3632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.291123][ T3632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.347011][ T3641] syz.4.52 uses obsolete (PF_INET,SOCK_PACKET) [ 43.405448][ T3618] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.43: invalid indirect mapped block 256 (level 2) [ 43.420107][ T3618] EXT4-fs (loop1): 2 truncates cleaned up [ 43.429348][ T3618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.761031][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 44.761051][ T29] audit: type=1400 audit(1747447501.832:164): avc: denied { write } for pid=3617 comm="syz.1.43" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.790614][ T29] audit: type=1400 audit(1747447501.832:165): avc: denied { add_name } for pid=3617 comm="syz.1.43" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.812431][ T29] audit: type=1400 audit(1747447501.832:166): avc: denied { create } for pid=3617 comm="syz.1.43" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.833702][ T29] audit: type=1400 audit(1747447501.832:167): avc: denied { read append open } for pid=3617 comm="syz.1.43" path="/14/file1/memory.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.210713][ T3652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.236811][ T37] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 45.239025][ T3652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.263194][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 45.274237][ T29] audit: type=1400 audit(1747447502.462:168): avc: denied { name_bind } for pid=3655 comm="syz.2.54" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 45.276188][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.276188][ T37] [ 45.309184][ T37] EXT4-fs (loop1): Total free blocks count 0 [ 45.315767][ T37] EXT4-fs (loop1): Free/Dirty block details [ 45.321871][ T37] EXT4-fs (loop1): free_blocks=0 [ 45.322527][ T29] audit: type=1400 audit(1747447502.512:169): avc: denied { write } for pid=3657 comm="syz.2.57" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 45.327162][ T37] EXT4-fs (loop1): dirty_blocks=11200 [ 45.327191][ T37] EXT4-fs (loop1): Block reservation details [ 45.327205][ T37] EXT4-fs (loop1): i_reserved_data_blocks=11200 [ 45.353598][ T29] audit: type=1400 audit(1747447502.512:170): avc: denied { open } for pid=3657 comm="syz.2.57" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 45.402028][ T29] audit: type=1400 audit(1747447502.512:171): avc: denied { ioctl } for pid=3657 comm="syz.2.57" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 45.420623][ T3477] usb 9-1: enqueue for inactive port 0 [ 45.437393][ T3477] usb 9-1: enqueue for inactive port 0 [ 45.459042][ T3431] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 45.485340][ T29] audit: type=1400 audit(1747447502.682:172): avc: denied { write } for pid=3662 comm="syz.2.59" name="xfrm_stat" dev="proc" ino=4026532816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 45.511319][ T3477] vhci_hcd: vhci_device speed not set [ 45.617417][ T29] audit: type=1326 audit(1747447502.812:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3665 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba543be969 code=0x7ffc0000 [ 46.631280][ T3684] tipc: Can't bind to reserved service type 2 [ 46.653063][ T3688] mmap: syz.0.68 (3688) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.677124][ T3690] loop2: detected capacity change from 0 to 128 [ 46.712545][ T3690] ======================================================= [ 46.712545][ T3690] WARNING: The mand mount option has been deprecated and [ 46.712545][ T3690] and is ignored by this kernel. Remove the mand [ 46.712545][ T3690] option from the mount to silence this warning. [ 46.712545][ T3690] ======================================================= [ 47.279607][ T3690] EXT4-fs: test_dummy_encryption option not supported [ 47.351938][ T3700] IPv4: Oversized IP packet from 127.202.26.0 [ 47.628479][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.636415][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.644481][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.652277][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.660155][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.668640][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.677118][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.684966][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.692874][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.700752][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.708795][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.716704][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.724672][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.732458][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.740406][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.748738][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.756532][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.765201][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.773223][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.781152][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.789894][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.797988][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.806159][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.815395][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.825219][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.834638][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.843166][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.851875][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.860988][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.869306][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.869493][ T3717] loop3: detected capacity change from 0 to 512 [ 47.877785][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.877815][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.877842][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.877882][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.877902][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.877932][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.933343][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.941385][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.949466][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.957501][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.965784][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.973816][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.982075][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.989941][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.998213][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 47.999770][ T3717] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.006175][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 48.021140][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 48.022011][ T3717] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.029331][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 48.029362][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 48.051570][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 48.054443][ T3720] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 48.059957][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 48.059991][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 48.083005][ T3720] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 48.083681][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 48.108788][ T3717] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 48.118615][ T3717] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 48.154559][ T3717] EXT4-fs (loop3): 1 truncate cleaned up [ 48.166254][ T3392] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.178248][ T3717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.195253][ T3717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.237465][ T3717] loop3: detected capacity change from 0 to 512 [ 48.288939][ T3717] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.295564][ T3717] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 48.310018][ T3730] fido_id[3730]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 48.313240][ C0] hrtimer: interrupt took 37472 ns [ 48.337501][ T3717] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 48.354114][ T3717] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.77: attempt to clear invalid blocks 2 len 1 [ 48.355517][ T3743] kernel profiling enabled (shift: 9) [ 48.373659][ T3717] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.77: invalid indirect mapped block 1819239214 (level 0) [ 48.392800][ T3717] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.77: invalid indirect mapped block 1819239214 (level 1) [ 48.407161][ T3717] EXT4-fs (loop3): 1 truncate cleaned up [ 48.415065][ T3717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.438612][ T3717] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 48.450426][ T3717] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.77: Abort forced by user [ 48.462177][ T3717] EXT4-fs (loop3): Remounting filesystem read-only [ 48.469139][ T3717] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 48.489374][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.507666][ T3750] loop0: detected capacity change from 0 to 512 [ 48.514538][ T3750] EXT4-fs: Ignoring removed oldalloc option [ 48.523043][ T3750] EXT4-fs (loop0): 1 truncate cleaned up [ 48.529968][ T3750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.572183][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.845183][ T3757] IPv4: Oversized IP packet from 127.202.26.0 [ 48.852826][ T3755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.861659][ T3755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.878389][ T3755] loop0: detected capacity change from 0 to 256 [ 48.903238][ T3755] FAT-fs (loop0): Directory bread(block 64) failed [ 48.910006][ T3755] FAT-fs (loop0): Directory bread(block 65) failed [ 48.921433][ T3755] FAT-fs (loop0): Directory bread(block 66) failed [ 48.928212][ T3755] FAT-fs (loop0): Directory bread(block 67) failed [ 48.942988][ T3762] loop3: detected capacity change from 0 to 512 [ 48.949636][ T3762] EXT4-fs: Ignoring removed i_version option [ 48.957253][ T3755] FAT-fs (loop0): Directory bread(block 68) failed [ 48.965205][ T3755] FAT-fs (loop0): Directory bread(block 69) failed [ 48.973651][ T3762] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.988424][ T3762] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.999243][ T3762] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 49.009678][ T9] usb usb10-port1: attempt power cycle [ 49.015457][ T3755] FAT-fs (loop0): Directory bread(block 70) failed [ 49.023671][ T3755] FAT-fs (loop0): Directory bread(block 71) failed [ 49.030255][ T3755] FAT-fs (loop0): Directory bread(block 72) failed [ 49.037631][ T3755] FAT-fs (loop0): Directory bread(block 73) failed [ 49.250153][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.258709][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.266610][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.275092][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.282908][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.290865][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.299113][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.306921][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.315062][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.323343][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.331179][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.339193][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.347026][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.355166][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.363017][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.371076][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.379047][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.387313][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.396115][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.404543][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.413052][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.422651][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.430888][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.438730][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.447593][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.455905][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.463960][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.472143][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.480006][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.488102][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.496243][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.504743][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.512964][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.521024][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.529080][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.537349][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.546062][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.554120][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.562335][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.570477][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.578388][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.586292][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.594260][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.602219][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.610061][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.618041][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.626279][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.634141][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.641951][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.650397][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.658805][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.666824][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.675067][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.676394][ T3770] loop3: detected capacity change from 0 to 512 [ 50.185919][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 50.185976][ T29] audit: type=1400 audit(1747447507.382:306): avc: denied { unmount } for pid=3328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.245089][ T3770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.260061][ T3392] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.298917][ T3782] loop0: detected capacity change from 0 to 2048 [ 50.301404][ T3770] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.325914][ T3784] fido_id[3784]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.343435][ T3785] loop4: detected capacity change from 0 to 512 [ 50.350614][ T3785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.370012][ T3785] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.382187][ T3785] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 50.394403][ T3785] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 50.407308][ T3788] loop1: detected capacity change from 0 to 512 [ 50.417785][ T29] audit: type=1400 audit(1747447507.602:307): avc: denied { read write } for pid=3769 comm="syz.3.92" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.439299][ T3788] EXT4-fs: Ignoring removed i_version option [ 50.442267][ T29] audit: type=1400 audit(1747447507.602:308): avc: denied { open } for pid=3769 comm="syz.3.92" path="/11/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.471457][ T3788] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.485505][ T3788] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 50.496191][ T3785] EXT4-fs (loop4): 1 truncate cleaned up [ 50.498167][ T3782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.507617][ T3785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.532463][ T29] audit: type=1400 audit(1747447507.712:309): avc: denied { mounton } for pid=3778 comm="syz.0.94" path="/21/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.558295][ T29] audit: type=1400 audit(1747447507.712:310): avc: denied { mount } for pid=3778 comm="syz.0.94" name="/" dev="configfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 50.583235][ T29] audit: type=1400 audit(1747447507.712:311): avc: denied { mounton } for pid=3778 comm="syz.0.94" path="/21/file0/file0" dev="configfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 50.583753][ T3785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.637469][ T3328] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 50.672287][ T29] audit: type=1326 audit(1747447507.752:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba543be969 code=0x7ffc0000 [ 50.697057][ T29] audit: type=1326 audit(1747447507.752:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba543be969 code=0x7ffc0000 [ 50.721399][ T29] audit: type=1326 audit(1747447507.752:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba543be969 code=0x7ffc0000 [ 50.745724][ T29] audit: type=1326 audit(1747447507.752:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba543be969 code=0x7ffc0000 [ 50.786965][ T3785] loop4: detected capacity change from 0 to 512 [ 50.794968][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.807955][ T3770] syz.3.92 (3770) used greatest stack depth: 10576 bytes left [ 50.817765][ T3785] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.824707][ T3785] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 50.836925][ T3785] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 50.865895][ T3785] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.95: attempt to clear invalid blocks 2 len 1 [ 50.894071][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.965881][ T3785] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.95: invalid indirect mapped block 1819239214 (level 0) [ 50.999228][ T3801] syz.1.100 (3801) used greatest stack depth: 10256 bytes left [ 51.033769][ T3785] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.95: invalid indirect mapped block 1819239214 (level 1) [ 51.073294][ T3785] EXT4-fs (loop4): 1 truncate cleaned up [ 51.079723][ T3785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.112344][ T3807] loop1: detected capacity change from 0 to 512 [ 51.120387][ T3785] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 51.133244][ T3807] EXT4-fs: Ignoring removed oldalloc option [ 51.151498][ T3785] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.95: Abort forced by user [ 51.169475][ T3785] EXT4-fs (loop4): Remounting filesystem read-only [ 51.176366][ T3785] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 51.187177][ T9] usb usb10-port1: unable to enumerate USB device [ 51.187877][ T3807] EXT4-fs (loop1): 1 truncate cleaned up [ 51.230167][ T3807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.294076][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.310246][ T3798] loop0: detected capacity change from 0 to 512 [ 51.390899][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.471765][ T3798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.490576][ T3798] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.737025][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.764628][ T3821] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 51.783573][ T3819] IPv4: Oversized IP packet from 127.202.26.0 [ 52.008945][ T3848] __nla_validate_parse: 31 callbacks suppressed [ 52.009020][ T3848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 52.048204][ T3848] siw: device registration error -23 [ 52.152618][ T3828] loop1: detected capacity change from 0 to 512 [ 52.235521][ T3828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.283051][ T3828] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.458550][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.723586][ T3902] loop2: detected capacity change from 0 to 512 [ 52.737676][ T3902] EXT4-fs: Ignoring removed oldalloc option [ 52.771133][ T3902] EXT4-fs (loop2): 1 truncate cleaned up [ 52.785244][ T3902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.846495][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.597819][ T3947] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 53.697786][ T3953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.160'. [ 53.707370][ T3953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.160'. [ 53.716486][ T3953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.160'. [ 53.787563][ T3953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.160'. [ 53.796533][ T3953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.160'. [ 53.805678][ T3953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.160'. [ 53.819363][ T3956] loop2: detected capacity change from 0 to 512 [ 53.831560][ T3956] EXT4-fs: Ignoring removed nobh option [ 53.865629][ T3956] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.162: invalid indirect mapped block 256 (level 2) [ 53.889352][ T3956] EXT4-fs (loop2): 2 truncates cleaned up [ 53.909175][ T3953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.160'. [ 53.918167][ T3953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.160'. [ 53.927497][ T3953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.160'. [ 53.937711][ T3956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.958274][ T3962] loop0: detected capacity change from 0 to 512 [ 54.032586][ T3962] EXT4-fs: Ignoring removed i_version option [ 54.077981][ T3962] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.088141][ T3962] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 54.662563][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 54.678987][ T3952] loop3: detected capacity change from 0 to 512 [ 54.699503][ T3952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.731133][ T3952] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.742979][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 54.755593][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.755593][ T37] [ 54.766964][ T37] EXT4-fs (loop2): Total free blocks count 0 [ 54.773515][ T37] EXT4-fs (loop2): Free/Dirty block details [ 54.780289][ T37] EXT4-fs (loop2): free_blocks=0 [ 54.785942][ T37] EXT4-fs (loop2): dirty_blocks=15384 [ 54.791439][ T37] EXT4-fs (loop2): Block reservation details [ 54.797999][ T37] EXT4-fs (loop2): i_reserved_data_blocks=15384 [ 54.823279][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 54.933557][ T3985] loop4: detected capacity change from 0 to 512 [ 54.955610][ T3985] EXT4-fs: Ignoring removed i_version option [ 54.973592][ T3985] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.984014][ T3985] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 55.006190][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.010834][ T3987] siw: device registration error -23 [ 55.133312][ T3994] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 55.205801][ T4005] loop0: detected capacity change from 0 to 512 [ 55.213060][ T4005] EXT4-fs: Ignoring removed i_version option [ 55.227591][ T4005] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.237520][ T4005] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 55.255884][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 55.255899][ T29] audit: type=1326 audit(1747447512.452:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7de0e969 code=0x7ffc0000 [ 55.308310][ T29] audit: type=1326 audit(1747447512.492:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec7de0e969 code=0x7ffc0000 [ 55.331753][ T29] audit: type=1326 audit(1747447512.492:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7de0e969 code=0x7ffc0000 [ 55.355409][ T29] audit: type=1326 audit(1747447512.492:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec7de0e969 code=0x7ffc0000 [ 55.379807][ T29] audit: type=1326 audit(1747447512.492:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7de0e969 code=0x7ffc0000 [ 55.404319][ T29] audit: type=1326 audit(1747447512.492:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec7de0e969 code=0x7ffc0000 [ 55.427936][ T29] audit: type=1326 audit(1747447512.492:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7de0e969 code=0x7ffc0000 [ 55.451475][ T29] audit: type=1326 audit(1747447512.492:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec7de0e969 code=0x7ffc0000 [ 55.474903][ T29] audit: type=1326 audit(1747447512.492:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7de0e969 code=0x7ffc0000 [ 55.498296][ T29] audit: type=1326 audit(1747447512.492:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fec7de0e969 code=0x7ffc0000 [ 55.605826][ T4018] loop3: detected capacity change from 0 to 512 [ 55.613323][ T4018] EXT4-fs: Ignoring removed i_version option [ 55.620838][ T4018] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.631640][ T4018] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 55.871614][ T4025] loop1: detected capacity change from 0 to 512 [ 55.880235][ T4021] loop3: detected capacity change from 0 to 2048 [ 55.893322][ T4029] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 55.909596][ T4023] loop4: detected capacity change from 0 to 1024 [ 55.909894][ T4025] EXT4-fs: Ignoring removed i_version option [ 55.931485][ T4025] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.941999][ T4025] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 55.973084][ T4023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.973205][ T4021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.065089][ T4040] loop2: detected capacity change from 0 to 512 [ 56.091519][ T4040] EXT4-fs: Ignoring removed i_version option [ 56.101972][ T4023] netlink: '+}[@': attribute type 32 has an invalid length. [ 56.124150][ T4043] loop1: detected capacity change from 0 to 1024 [ 56.145471][ T4040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.155770][ T4040] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 56.170613][ T4043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.202003][ T3325] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 56.234458][ T4043] netlink: '+}[@': attribute type 32 has an invalid length. [ 56.256627][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.324733][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.344514][ T4054] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 56.355824][ T4056] loop2: detected capacity change from 0 to 2048 [ 56.423665][ T4066] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 56.454081][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.464370][ T4056] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 56.469695][ T4056] loop2: partition table partially beyond EOD, truncated [ 56.480278][ T4056] loop2: p1 start 3405774849 is beyond EOD, truncated [ 56.487495][ T4056] loop2: p2 size 5046285 extends beyond EOD, truncated [ 56.522272][ T4073] loop1: detected capacity change from 0 to 512 [ 56.539717][ T4076] loop0: detected capacity change from 0 to 512 [ 56.547705][ T4056] loop2: p5 size 5046285 extends beyond EOD, truncated [ 56.548434][ T4076] EXT4-fs: Ignoring removed i_version option [ 56.561523][ T4073] EXT4-fs: Ignoring removed i_version option [ 56.573354][ T4076] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.584660][ T4076] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 56.604385][ T4073] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.619150][ T4073] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 56.778364][ T3639] udevd[3639]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 56.789173][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 56.801410][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 56.813441][ T3638] udevd[3638]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 56.927283][ T3639] udevd[3639]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 56.963743][ T4099] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 57.082902][ T4103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.157113][ T4106] loop0: detected capacity change from 0 to 512 [ 57.169145][ T4106] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.176037][ T4106] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 57.186056][ T4106] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 57.202386][ T4106] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.218: attempt to clear invalid blocks 2 len 1 [ 57.229117][ T4106] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.218: invalid indirect mapped block 1819239214 (level 0) [ 57.244839][ T4106] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.218: invalid indirect mapped block 1819239214 (level 1) [ 57.263440][ T4106] EXT4-fs (loop0): 1 truncate cleaned up [ 57.281093][ T4106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.309266][ T4108] loop4: detected capacity change from 0 to 512 [ 57.358678][ T4106] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 57.384762][ T4108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.419805][ T4106] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.218: Abort forced by user [ 57.422793][ T4108] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.446853][ T4106] EXT4-fs (loop0): Remounting filesystem read-only [ 57.454136][ T4106] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 57.463839][ T4112] __nla_validate_parse: 11 callbacks suppressed [ 57.463852][ T4112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.219'. [ 57.480464][ T4112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.219'. [ 57.549517][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.569040][ T4112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.219'. [ 57.714933][ T4112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.219'. [ 57.724451][ T4112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.219'. [ 57.749163][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.765282][ T4120] loop2: detected capacity change from 0 to 512 [ 57.772755][ T4112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.219'. [ 57.782623][ T4120] EXT4-fs: Ignoring removed i_version option [ 57.790088][ T4120] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.801125][ T4120] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 57.867974][ T4112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.219'. [ 57.877131][ T4112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.219'. [ 57.917261][ T4131] FAULT_INJECTION: forcing a failure. [ 57.917261][ T4131] name failslab, interval 1, probability 0, space 0, times 1 [ 57.931597][ T4131] CPU: 0 UID: 0 PID: 4131 Comm: syz.4.225 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(voluntary) [ 57.931654][ T4131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 57.931670][ T4131] Call Trace: [ 57.931679][ T4131] [ 57.931688][ T4131] __dump_stack+0x1d/0x30 [ 57.931713][ T4131] dump_stack_lvl+0xe8/0x140 [ 57.931756][ T4131] dump_stack+0x15/0x1b [ 57.931776][ T4131] should_fail_ex+0x265/0x280 [ 57.931813][ T4131] should_failslab+0x8c/0xb0 [ 57.931882][ T4131] kmem_cache_alloc_node_noprof+0x57/0x320 [ 57.931909][ T4131] ? __alloc_skb+0x101/0x320 [ 57.931948][ T4131] __alloc_skb+0x101/0x320 [ 57.932096][ T4131] netlink_alloc_large_skb+0xba/0xf0 [ 57.932134][ T4131] netlink_sendmsg+0x3cf/0x6b0 [ 57.932236][ T4131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.932261][ T4131] __sock_sendmsg+0x142/0x180 [ 57.932343][ T4131] ____sys_sendmsg+0x31e/0x4e0 [ 57.932372][ T4131] ___sys_sendmsg+0x17b/0x1d0 [ 57.932413][ T4131] __x64_sys_sendmsg+0xd4/0x160 [ 57.932495][ T4131] x64_sys_call+0x2999/0x2fb0 [ 57.932516][ T4131] do_syscall_64+0xd0/0x1a0 [ 57.932546][ T4131] ? clear_bhb_loop+0x40/0x90 [ 57.932573][ T4131] ? clear_bhb_loop+0x40/0x90 [ 57.932598][ T4131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.932692][ T4131] RIP: 0033:0x7fc5228ee969 [ 57.932718][ T4131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.932737][ T4131] RSP: 002b:00007fc520f57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.932761][ T4131] RAX: ffffffffffffffda RBX: 00007fc522b15fa0 RCX: 00007fc5228ee969 [ 57.932776][ T4131] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 57.932791][ T4131] RBP: 00007fc520f57090 R08: 0000000000000000 R09: 0000000000000000 [ 57.932806][ T4131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.932853][ T4131] R13: 0000000000000000 R14: 00007fc522b15fa0 R15: 00007ffe39e2fb68 [ 57.932871][ T4131] [ 57.941388][ T4112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.219'. [ 57.961269][ T4133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.141329][ T4093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.212'. [ 58.175007][ T4139] loop4: detected capacity change from 0 to 512 [ 58.191001][ T4139] EXT4-fs: Ignoring removed oldalloc option [ 58.213242][ T4139] EXT4-fs (loop4): 1 truncate cleaned up [ 58.220092][ T4139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.235183][ T4135] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 58.344931][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.424451][ T4152] loop3: detected capacity change from 0 to 512 [ 58.451644][ T4152] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.459165][ T4152] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 58.460581][ T4157] IPv4: Oversized IP packet from 127.202.26.0 [ 58.491062][ T4152] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 58.521169][ T4152] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.236: attempt to clear invalid blocks 2 len 1 [ 58.558341][ T4161] loop2: detected capacity change from 0 to 512 [ 58.577930][ T4165] loop4: detected capacity change from 0 to 512 [ 58.585180][ T4165] EXT4-fs: Ignoring removed i_version option [ 58.586081][ T4161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.619275][ T4165] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.628322][ T4152] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.236: invalid indirect mapped block 1819239214 (level 0) [ 58.629715][ T4165] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 58.653548][ T4152] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.236: invalid indirect mapped block 1819239214 (level 1) [ 58.670250][ T4161] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.692386][ T4152] EXT4-fs (loop3): 1 truncate cleaned up [ 58.722986][ T4152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.745179][ T4168] loop0: detected capacity change from 0 to 1024 [ 58.757909][ T4152] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.236: Abort forced by user [ 58.784300][ T4152] EXT4-fs (loop3): Remounting filesystem read-only [ 58.791707][ T4152] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 58.809235][ T4171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.829869][ T4168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.861059][ T4168] netlink: '+}[@': attribute type 32 has an invalid length. [ 58.879551][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.913580][ T4178] loop4: detected capacity change from 0 to 2048 [ 58.922735][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.947097][ T4178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.005226][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.006464][ T3327] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 59.045017][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.051193][ T4190] IPv4: Oversized IP packet from 127.202.26.0 [ 59.170158][ T4191] loop1: detected capacity change from 0 to 2048 [ 59.213883][ T4191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.235494][ T4204] loop2: detected capacity change from 0 to 512 [ 59.312951][ T4204] EXT4-fs: Ignoring removed i_version option [ 59.433236][ T3315] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 59.451263][ T4204] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.461501][ T4204] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 59.476386][ T4208] loop0: detected capacity change from 0 to 1024 [ 59.555007][ T4208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.609136][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.697356][ T4208] netlink: '+}[@': attribute type 32 has an invalid length. [ 59.723561][ T4215] loop1: detected capacity change from 0 to 512 [ 59.767582][ T4215] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.774408][ T4215] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 59.812759][ T4215] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 59.838942][ T4215] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.255: attempt to clear invalid blocks 2 len 1 [ 59.872241][ T4215] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.255: invalid indirect mapped block 1819239214 (level 0) [ 59.908641][ T4215] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.255: invalid indirect mapped block 1819239214 (level 1) [ 59.927630][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.982818][ T4215] EXT4-fs (loop1): 1 truncate cleaned up [ 60.013649][ T4215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.066563][ T4223] loop0: detected capacity change from 0 to 2048 [ 60.115749][ T4215] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.255: Abort forced by user [ 60.129837][ T4223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.144755][ T4215] EXT4-fs (loop1): Remounting filesystem read-only [ 60.150892][ T4230] loop3: detected capacity change from 0 to 512 [ 60.152005][ T4215] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 60.164801][ T4230] EXT4-fs: Ignoring removed i_version option [ 60.193171][ T3328] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 60.227207][ T4230] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.238122][ T4230] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 60.263667][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.264202][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.330667][ T29] kauditd_printk_skb: 516 callbacks suppressed [ 60.330687][ T29] audit: type=1326 audit(1747447517.522:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7edbee969 code=0x7ffc0000 [ 60.362097][ T29] audit: type=1326 audit(1747447517.522:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7edbee969 code=0x7ffc0000 [ 60.362129][ T29] audit: type=1326 audit(1747447517.522:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7edbee969 code=0x7ffc0000 [ 60.425114][ T29] audit: type=1326 audit(1747447517.612:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7edbee969 code=0x7ffc0000 [ 60.450052][ T29] audit: type=1326 audit(1747447517.612:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7edbee969 code=0x7ffc0000 [ 60.475715][ T29] audit: type=1326 audit(1747447517.612:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7edbee969 code=0x7ffc0000 [ 60.499722][ T29] audit: type=1326 audit(1747447517.612:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7edbee969 code=0x7ffc0000 [ 60.524065][ T29] audit: type=1326 audit(1747447517.612:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7edbee969 code=0x7ffc0000 [ 60.548262][ T29] audit: type=1326 audit(1747447517.612:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7edbee969 code=0x7ffc0000 [ 60.571965][ T29] audit: type=1326 audit(1747447517.612:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7edbee969 code=0x7ffc0000 [ 60.659547][ T4242] loop3: detected capacity change from 0 to 512 [ 60.667573][ T4242] EXT4-fs: Ignoring removed oldalloc option [ 60.699777][ T4242] EXT4-fs (loop3): 1 truncate cleaned up [ 60.725047][ T4235] loop1: detected capacity change from 0 to 2048 [ 60.770565][ T4249] loop0: detected capacity change from 0 to 512 [ 60.834222][ T4249] EXT4-fs: Ignoring removed i_version option [ 60.847830][ T3315] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 60.871789][ T4249] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.882050][ T4249] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 61.013927][ T4262] loop1: detected capacity change from 0 to 512 [ 61.026528][ T4261] loop3: detected capacity change from 0 to 2048 [ 61.062980][ T4262] EXT4-fs: Ignoring removed oldalloc option [ 61.103967][ T4262] EXT4-fs (loop1): 1 truncate cleaned up [ 61.157786][ T3325] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 61.208646][ T4270] loop4: detected capacity change from 0 to 2048 [ 61.273508][ T4272] loop1: detected capacity change from 0 to 1024 [ 61.300475][ T4276] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 61.331691][ T3327] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 61.388241][ T4272] netlink: '+}[@': attribute type 32 has an invalid length. [ 61.716431][ T4293] IPv4: Oversized IP packet from 127.202.26.0 [ 61.812725][ T4302] loop3: detected capacity change from 0 to 2048 [ 61.841694][ T4304] loop4: detected capacity change from 0 to 512 [ 61.848568][ T4304] EXT4-fs: Ignoring removed oldalloc option [ 61.899000][ T4304] EXT4-fs (loop4): 1 truncate cleaned up [ 61.907930][ T4311] FAULT_INJECTION: forcing a failure. [ 61.907930][ T4311] name failslab, interval 1, probability 0, space 0, times 0 [ 61.921115][ T4311] CPU: 0 UID: 0 PID: 4311 Comm: syz.1.288 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(voluntary) [ 61.921146][ T4311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 61.921235][ T4311] Call Trace: [ 61.921244][ T4311] [ 61.921254][ T4311] __dump_stack+0x1d/0x30 [ 61.921280][ T4311] dump_stack_lvl+0xe8/0x140 [ 61.921305][ T4311] dump_stack+0x15/0x1b [ 61.921335][ T4311] should_fail_ex+0x265/0x280 [ 61.921382][ T4311] should_failslab+0x8c/0xb0 [ 61.921435][ T4311] kmem_cache_alloc_node_noprof+0x57/0x320 [ 61.921530][ T4311] ? __alloc_skb+0x101/0x320 [ 61.921571][ T4311] __alloc_skb+0x101/0x320 [ 61.921601][ T4311] ? audit_log_start+0x365/0x6c0 [ 61.921709][ T4311] audit_log_start+0x380/0x6c0 [ 61.921738][ T4311] audit_seccomp+0x48/0x100 [ 61.921762][ T4311] ? __seccomp_filter+0x68c/0x10d0 [ 61.921781][ T4311] __seccomp_filter+0x69d/0x10d0 [ 61.921801][ T4311] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 61.921838][ T4311] ? vfs_write+0x75e/0x8d0 [ 61.921860][ T4311] ? __rcu_read_unlock+0x4f/0x70 [ 61.921892][ T4311] ? __fget_files+0x184/0x1c0 [ 61.921919][ T4311] __secure_computing+0x82/0x150 [ 61.921938][ T4311] syscall_trace_enter+0xcf/0x1e0 [ 61.922017][ T4311] do_syscall_64+0xaa/0x1a0 [ 61.922111][ T4311] ? clear_bhb_loop+0x40/0x90 [ 61.922130][ T4311] ? clear_bhb_loop+0x40/0x90 [ 61.922149][ T4311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.922167][ T4311] RIP: 0033:0x7fba543be969 [ 61.922181][ T4311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.922239][ T4311] RSP: 002b:00007fba52a27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 61.922263][ T4311] RAX: ffffffffffffffda RBX: 00007fba545e5fa0 RCX: 00007fba543be969 [ 61.922278][ T4311] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 61.922295][ T4311] RBP: 00007fba52a27090 R08: 0000000000000000 R09: 0000000000000000 [ 61.922327][ T4311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.922337][ T4311] R13: 0000000000000000 R14: 00007fba545e5fa0 R15: 00007fff47c19ce8 [ 61.922361][ T4311] [ 62.183930][ T3325] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 62.266535][ T4314] loop1: detected capacity change from 0 to 1024 [ 62.281552][ T4316] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 62.372931][ T4314] netlink: '+}[@': attribute type 32 has an invalid length. [ 62.553197][ T4339] loop1: detected capacity change from 0 to 2048 [ 62.602061][ T4342] loop3: detected capacity change from 0 to 1024 [ 62.616917][ T3315] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 62.646445][ T4332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.658011][ T4332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.695405][ T4332] netlink: 'gtp': attribute type 21 has an invalid length. [ 62.710741][ T4332] __nla_validate_parse: 19 callbacks suppressed [ 62.710760][ T4332] netlink: 156 bytes leftover after parsing attributes in process `gtp'. [ 62.725922][ T4332] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 62.759957][ T4352] loop3: detected capacity change from 0 to 512 [ 62.781551][ T4352] EXT4-fs: Ignoring removed oldalloc option [ 62.806573][ T4352] EXT4-fs (loop3): 1 truncate cleaned up [ 62.876801][ T4355] loop3: detected capacity change from 0 to 512 [ 62.896179][ T4355] EXT4-fs: Ignoring removed nobh option [ 62.917184][ T4355] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.304: invalid indirect mapped block 256 (level 2) [ 62.931823][ T4355] EXT4-fs (loop3): 2 truncates cleaned up [ 63.664164][ T3431] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 5: invalid block bitmap [ 63.678077][ T3431] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 63.691503][ T3431] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.691503][ T3431] [ 63.701766][ T3431] EXT4-fs (loop3): Total free blocks count 0 [ 63.707867][ T3431] EXT4-fs (loop3): Free/Dirty block details [ 63.713934][ T3431] EXT4-fs (loop3): free_blocks=0 [ 63.719006][ T3431] EXT4-fs (loop3): dirty_blocks=16000 [ 63.724544][ T3431] EXT4-fs (loop3): Block reservation details [ 63.730675][ T3431] EXT4-fs (loop3): i_reserved_data_blocks=16000 [ 63.839526][ T4364] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 63.858398][ T4362] loop4: detected capacity change from 0 to 512 [ 63.859530][ T3431] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 63.877993][ T3431] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.877993][ T3431] [ 63.898478][ T4362] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.936666][ T4375] loop0: detected capacity change from 0 to 512 [ 63.964320][ T4375] EXT4-fs (loop0): orphan cleanup on readonly fs [ 63.970709][ T4375] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 64.017563][ T4375] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 64.045544][ T4375] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.313: attempt to clear invalid blocks 2 len 1 [ 64.060163][ T4375] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.313: invalid indirect mapped block 1819239214 (level 0) [ 64.080807][ T4375] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.313: invalid indirect mapped block 1819239214 (level 1) [ 64.124435][ T3005] ================================================================== [ 64.132586][ T3005] BUG: KCSAN: data-race in set_nlink / set_nlink [ 64.138988][ T3005] [ 64.141418][ T3005] read to 0xffff888106cea780 of 4 bytes by task 3639 on cpu 1: [ 64.149078][ T3005] set_nlink+0x29/0xb0 [ 64.153182][ T3005] kernfs_iop_permission+0x1e2/0x220 [ 64.158575][ T3005] inode_permission+0x182/0x300 [ 64.163452][ T3005] link_path_walk+0x14d/0x8b0 [ 64.168252][ T3005] path_openat+0x1de/0x2170 [ 64.172809][ T3005] do_filp_open+0x109/0x230 [ 64.177528][ T3005] do_sys_openat2+0xa6/0x110 [ 64.182333][ T3005] __x64_sys_openat+0xf2/0x120 [ 64.187138][ T3005] x64_sys_call+0x1af/0x2fb0 [ 64.191835][ T3005] do_syscall_64+0xd0/0x1a0 [ 64.196372][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.202381][ T3005] [ 64.204752][ T3005] write to 0xffff888106cea780 of 4 bytes by task 3005 on cpu 0: [ 64.212389][ T3005] set_nlink+0x99/0xb0 [ 64.216488][ T3005] kernfs_iop_permission+0x1e2/0x220 [ 64.221789][ T3005] inode_permission+0x182/0x300 [ 64.226700][ T3005] link_path_walk+0x14d/0x8b0 [ 64.231401][ T3005] path_lookupat+0x63/0x2a0 [ 64.235909][ T3005] filename_lookup+0x147/0x340 [ 64.241008][ T3005] vfs_statx+0x9d/0x380 [ 64.245375][ T3005] vfs_fstatat+0xe1/0x160 [ 64.249837][ T3005] __se_sys_newfstatat+0x55/0x260 [ 64.254953][ T3005] __x64_sys_newfstatat+0x55/0x70 [ 64.260171][ T3005] x64_sys_call+0x2c22/0x2fb0 [ 64.264951][ T3005] do_syscall_64+0xd0/0x1a0 [ 64.269482][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.275476][ T3005] [ 64.277802][ T3005] value changed: 0x00000009 -> 0x00000008 [ 64.283791][ T3005] [ 64.286599][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 64.292855][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: udevd Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(voluntary) [ 64.305284][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 64.315370][ T3005] ================================================================== [ 64.345084][ T4375] EXT4-fs (loop0): 1 truncate cleaned up [ 64.453957][ T4375] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 64.551827][ T4375] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.313: Abort forced by user [ 64.610344][ T4375] EXT4-fs (loop0): Remounting filesystem read-only [ 64.617174][ T4375] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.