last executing test programs: 4.822165015s ago: executing program 3 (id=593): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xe4}}, 0x0) 4.784625796s ago: executing program 3 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x8b6c, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x84000) 4.783775095s ago: executing program 0 (id=604): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xe4}}, 0x0) 4.721790697s ago: executing program 0 (id=596): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdb8, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat(r0, &(0x7f0000000280)='./file1\x00', r1, &(0x7f0000000300)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x50}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 4.689684527s ago: executing program 4 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x9, &(0x7f0000000180)={[{@nombcache}, {@jqfmt_vfsv1}, {@nobh}, {}, {@nojournal_checksum}, {@grpjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = fspick(r2, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r4}, 0x18) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x100, 0x1403, 0x1, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040840}, 0x20040000) 3.501258451s ago: executing program 4 (id=600): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdb2, 0x0, 0x0, 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.368534244s ago: executing program 3 (id=601): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) close(r3) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x10000, &(0x7f0000000380)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c646f733178666c6f7070792c646973636172642c636865636b3d7374726963742c646f74732c756d61736b3d30303030303030303030303030303030303030303030302c005cfc62f4d02467f358b5994840ea56b0221d013e71e44b8219d56c01000100d5bfd1b1537d0559da1ee418effe196657db344d30f27f6c0609979d6c93505e2d63e489bba6c6ee52f58754c60dfcc1d4", @ANYRES16], 0x1, 0x278, &(0x7f0000000040)="$eJzs281OE2EUxvFn+LAFBOoXChtPdKMuJooL142BxNhEg9SoiZohDNq0tqRTY2tcsHbldRCX7kyMN8BduCMmBjesrJlOK6UVJRo7Bf+/zRzmGZp3eqbNWfTdvPfmWX5lxFHTgLSmbSkVVsPROWcnk6Mjaremi1+vbb2+c//BzXQmM7dgNp9evDprZhNnP7x49fbcx8rY3XcT7xPaSD3a/DL7aWNqY3rz2+LTXGC5wIqlinm2VCpVvKWCb8u5IO+a3S74XuBbrhj45V35SqG0ulozr7g8Prpa9oPAvGLN8n7NKiWrlGvmPfFyRXNd18ZHhYZLe0fZ9YUFL93LxaD3yuW0NydppivJrseyIAAAEKto/g/cFa+iAcca87/Tmv+bmP8Pq/3P/07YahxI4fz/sPn5lQbbEuZ/AAAAAAAAAAAAAAAAAAAAAAAOgu16fbJer0+2jsNSY4dPvfn3iKRRKRFee1TSuKQJSZOSUpKOSTou6YSkk5JOSZqSdFrSGUnTba8V972iW6J5/E3/NUb/D6W2jXtJ6fNaNVvNRscon7+RmbtsDamd/9qqVrOD0vMovxLltjtPNJ6bMJ/9aZ7UhfNRHmbXb2U68hkt9+IN+M+59kN3f8Pc3SuPqrbno6N/Q5oZ6tlt4A8FtZd5r1DwyxR/VTiSuiPJSUrqixX+iyKcHvpgGZ1Fa4v6Ly8e2n0m2S+L74/Cifl7Cb2x0/TO5HE8CwIAAAAAAAAAAAAAAAAA7Esvfk4Y9z0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALd8DAAD//7m4wq8=") 3.161725388s ago: executing program 3 (id=602): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 2.690898227s ago: executing program 0 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 2.468716442s ago: executing program 3 (id=605): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x1, 0x550, &(0x7f0000001780)="$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") r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") bpf$ITER_CREATE(0x21, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) ioctl$KDGKBLED(r0, 0x5453, 0x0) 2.370612824s ago: executing program 0 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbe8251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x7800, 0x7, 0xb, 0xfffffff9, {{0xf, 0x4, 0x2, 0x11, 0x3c, 0x67, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp_prespec={0x44, 0x24, 0xb7, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x5}, {@multicast2, 0x1ff}, {@broadcast, 0x7ff}, {@local, 0x3}]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r6], 0x40}}, 0x4008054) socket$inet(0x10, 0x3, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, r8, {0x0, 0x11}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0xfffe, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 2.338797464s ago: executing program 4 (id=607): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xe4}}, 0x0) 2.264569176s ago: executing program 4 (id=610): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbe8251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x7800, 0x7, 0xb, 0xfffffff9, {{0xf, 0x4, 0x2, 0x11, 0x3c, 0x67, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp_prespec={0x44, 0x24, 0xb7, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x5}, {@multicast2, 0x1ff}, {@broadcast, 0x7ff}, {@local, 0x3}]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r6], 0x40}}, 0x4008054) socket$inet(0x10, 0x3, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) 2.231256366s ago: executing program 2 (id=611): syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\a\x00', "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", '\x00', "2a1e833e7af32011"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "3c444bdaacdcab4d", "7c09e3c444d2f0ff2495408ac00bc823", "13d4610e", "05d41a5b745d371f"}, 0x28) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2.02851786s ago: executing program 4 (id=612): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r4 = dup2(r0, r0) ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) readv(r5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r7 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r7, 0x0) 2.027609041s ago: executing program 0 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbe8251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x7800, 0x7, 0xb, 0xfffffff9, {{0xf, 0x4, 0x2, 0x11, 0x3c, 0x67, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp_prespec={0x44, 0x24, 0xb7, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x5}, {@multicast2, 0x1ff}, {@broadcast, 0x7ff}, {@local, 0x3}]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r6], 0x40}}, 0x4008054) socket$inet(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, 0x0, {0x0, 0x11}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0xfffe, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 2.023709911s ago: executing program 2 (id=613): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1002, 0x80000000}}) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x1, 0x0, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 1.162861587s ago: executing program 0 (id=614): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0x1, 0x2000) msgrcv(r2, 0x0, 0x0, 0x2, 0x2000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000080)=""/67}, 0x20) msgsnd(r2, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x4010, r0, 0xffffd000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x5}, [{{0x254, 0x1, {{0x2, 0x5}, 0x2b, 0x2, 0x0, 0x1, 0x2, 'syz1\x00', "200e45b6363955f3d38b7792c2057da0975e7d6d1cf1a033d4868e37f0a4f28f", "a45ef19b2c442bca30a1b13783d569e3170fda611438a6dce3a337510092ace1", [{0xfff7, 0xd, {0x0, 0xd}}, {0x5, 0x400, {0x3, 0x10}}, {0x3, 0x5, {0x2, 0x5f5}}, {0x9, 0x4, {0x3, 0x40}}, {0x5, 0xb60, {0x1, 0x2}}, {0x18, 0x7d1, {0x0, 0xe}}, {0x0, 0x6, {0x3, 0x2}}, {0xc5a, 0x400, {0x3}}, {0x1, 0xfff8, {0x0, 0x1}}, {0xc, 0x6, {0x1, 0x101}}, {0x2, 0x6, {0x1, 0x7}}, {0x5, 0xffc8, {0x0, 0x1d18}}, {0x8, 0x8, {0x2, 0xcbf6}}, {0xf, 0x3, {0x0, 0x10001}}, {0x7, 0x3, {0x1, 0x1}}, {0x7, 0x7ff, {0x3, 0xfffffff2}}, {0x5, 0xfff7, {0x0, 0x2}}, {0xfa, 0xb, {0x2, 0x2}}, {0x8, 0x81, {0x1, 0x7}}, {0x0, 0x5, {0x0, 0xfffffffe}}, {0x7, 0x3, {0x2, 0x2}}, {0x3, 0x200, {0x2, 0x502}}, {0x6, 0x3, {0x3, 0xb}}, {0x3, 0x2, {0x3, 0xc05a}}, {0x8000, 0x7, {0x1, 0x8}}, {0x7, 0x0, {0x2}}, {0xb, 0x285, {0x1, 0x5}}, {0x7fff, 0x8, {0x1, 0x10001}}, {0xfff7, 0x7fff, {0x2, 0x5}}, {0x3, 0x8, {0x3, 0xd972}}, {0x1, 0x5, {0x0, 0x3be}}, {0x8, 0x1, {0x1, 0x3}}, {0x0, 0x4, {0x2, 0x9}}, {0x6, 0x8, {0x3, 0x4}}, {0x7fff, 0x6, {0x0, 0x8}}, {0x4, 0xfff7, {0x0, 0x2d}}, {0x7f, 0x7f, {0x0, 0xffffffff}}, {0x800, 0x5, {0x0, 0xff}}, {0x6, 0x9, {0x2, 0xfffffe00}}, {0x100, 0x7db3, {0x2, 0x16}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$P9_RREAD(r4, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xa0) sendfile(r4, r1, 0x0, 0x3ffff) sendfile(r4, r1, 0x0, 0x7fffeffd) 1.161406058s ago: executing program 2 (id=615): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 1.06015773s ago: executing program 2 (id=617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 989.752351ms ago: executing program 2 (id=618): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) gettid() r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000049500000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 969.583992ms ago: executing program 1 (id=619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbe8251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x7800, 0x7, 0xb, 0xfffffff9, {{0xf, 0x4, 0x2, 0x11, 0x3c, 0x67, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp_prespec={0x44, 0x24, 0xb7, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x5}, {@multicast2, 0x1ff}, {@broadcast, 0x7ff}, {@local, 0x3}]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r6], 0x40}}, 0x4008054) socket$inet(0x10, 0x3, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) 783.376455ms ago: executing program 1 (id=620): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff010000"], 0xe4}}, 0x0) 759.751035ms ago: executing program 4 (id=621): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x5, 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x7}, 0x50) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), 0x0}, 0x20) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001680), 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000200)={0x1, 0x3}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) 612.123468ms ago: executing program 1 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbe8251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x7800, 0x7, 0xb, 0xfffffff9, {{0xf, 0x4, 0x2, 0x11, 0x3c, 0x67, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp_prespec={0x44, 0x24, 0xb7, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x5}, {@multicast2, 0x1ff}, {@broadcast, 0x7ff}, {@local, 0x3}]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r6], 0x40}}, 0x4008054) socket$inet(0x10, 0x3, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) 298.661355ms ago: executing program 3 (id=624): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x6, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r4, 0x800, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e23, @remote}}) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002000000806b1d010140000102030109025f0003010900040904000000010100000a2401ff7f030201020904010000010200000904010101010200000905010940000207f4072501024c0000090402000001020000090402010101020000090582c7d117630501072501830e0400"], 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000001a77634d1ccd79ccdea1008cc4399e6d6bbf2b00000085"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) times(0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000a00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000a40)=0x10, 0x40c00) close_range(r0, 0xffffffffffffffff, 0x0) 296.159225ms ago: executing program 1 (id=634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x6, 0x6362, 0x5, 0xfffffffd, 0x9}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x4, 0xb2, 0x2009, 0x8, 0x7c}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x1, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6b97, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 101.407369ms ago: executing program 1 (id=625): syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\a\x00', "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", '\x00', "2a1e833e7af32011"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "3c444bdaacdcab4d", "7c09e3c444d2f0ff2495408ac00bc823", "13d4610e", "05d41a5b745d371f"}, 0x28) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 244.301µs ago: executing program 1 (id=626): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x3c, 0x1, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 0s ago: executing program 2 (id=627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x97fa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000c50000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 6240][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.867087][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.881889][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.898037][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.908933][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.918594][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.929564][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.959713][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.984102][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.993253][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.003855][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.026512][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.035793][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.053136][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.068787][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.082678][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.091692][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.101667][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.116275][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.159488][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.171293][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.186126][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.197970][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.218242][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.225609][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.235466][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.242632][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.261293][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.268393][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.277495][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.284631][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.303239][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.337176][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.351111][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.373070][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.390861][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.398100][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.409069][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.416374][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.426416][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.451404][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.475158][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.490263][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.505523][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.512662][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.531303][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.538411][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.554639][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.561830][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.585879][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.598428][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.605698][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.641240][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.730123][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.792336][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.805278][ T3303] veth0_vlan: entered promiscuous mode [ 37.815338][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.837673][ T3303] veth1_vlan: entered promiscuous mode [ 37.870082][ T3303] veth0_macvtap: entered promiscuous mode [ 37.894418][ T3309] veth0_vlan: entered promiscuous mode [ 37.908106][ T3303] veth1_macvtap: entered promiscuous mode [ 37.926906][ T3309] veth1_vlan: entered promiscuous mode [ 37.954241][ T3299] veth0_vlan: entered promiscuous mode [ 37.962657][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.980436][ T3309] veth0_macvtap: entered promiscuous mode [ 37.990026][ T3299] veth1_vlan: entered promiscuous mode [ 37.997651][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.016217][ T3309] veth1_macvtap: entered promiscuous mode [ 38.022858][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.031943][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.042314][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.051789][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.074631][ T3300] veth0_vlan: entered promiscuous mode [ 38.091467][ T3299] veth0_macvtap: entered promiscuous mode [ 38.106878][ T3299] veth1_macvtap: entered promiscuous mode [ 38.117345][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.128090][ T3300] veth1_vlan: entered promiscuous mode [ 38.140605][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.155160][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.178308][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.188372][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.200229][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.229417][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.238417][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.273137][ T3300] veth0_macvtap: entered promiscuous mode [ 38.285621][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.316432][ T3300] veth1_macvtap: entered promiscuous mode [ 38.339861][ T3306] veth0_vlan: entered promiscuous mode [ 38.349861][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.364966][ T3306] veth1_vlan: entered promiscuous mode [ 38.374267][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.386160][ T3474] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 38.398888][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.417280][ T3306] veth0_macvtap: entered promiscuous mode [ 38.426342][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.466360][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 38.466379][ T29] audit: type=1326 audit(1759147919.459:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 38.477245][ T3479] loop0: detected capacity change from 0 to 128 [ 38.515041][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.526371][ T3306] veth1_macvtap: entered promiscuous mode [ 38.533368][ T29] audit: type=1326 audit(1759147919.459:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 38.537350][ T3479] FAT-fs (loop0): bogus number of reserved sectors [ 38.557010][ T29] audit: type=1326 audit(1759147919.459:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 38.563483][ T3479] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 38.563505][ T3479] FAT-fs (loop0): Can't find a valid FAT filesystem [ 38.603164][ T29] audit: type=1326 audit(1759147919.459:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 38.626634][ T29] audit: type=1326 audit(1759147919.459:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 38.650122][ T29] audit: type=1326 audit(1759147919.459:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 38.674122][ T29] audit: type=1326 audit(1759147919.459:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 38.697955][ T29] audit: type=1326 audit(1759147919.459:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 38.721163][ T29] audit: type=1326 audit(1759147919.459:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 38.744370][ T29] audit: type=1326 audit(1759147919.459:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3477 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2c62c5d67 code=0x7ffc0000 [ 38.790856][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.820598][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.828614][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.842644][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.855083][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.877364][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.918343][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.950936][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.965281][ T3486] loop2: detected capacity change from 0 to 512 [ 38.987816][ T98] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.006969][ T3486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.029572][ T98] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.048640][ T3486] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.063885][ T98] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.135360][ T3486] ======================================================= [ 39.135360][ T3486] WARNING: The mand mount option has been deprecated and [ 39.135360][ T3486] and is ignored by this kernel. Remove the mand [ 39.135360][ T3486] option from the mount to silence this warning. [ 39.135360][ T3486] ======================================================= [ 39.171086][ T3486] EXT4-fs: Cannot change journaled quota options when quota turned on [ 39.371866][ T3486] syz.2.3 (3486) used greatest stack depth: 9440 bytes left [ 39.441476][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.555865][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.557248][ T3498] 9pnet_fd: Insufficient options for proto=fd [ 39.563427][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.563458][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.563581][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.592248][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.599845][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.607320][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.614821][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.622310][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.629756][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.645015][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 39.784259][ T3509] fido_id[3509]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.901462][ T3513] loop2: detected capacity change from 0 to 1024 [ 39.979981][ T3516] loop3: detected capacity change from 0 to 1024 [ 39.996712][ T3513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.041361][ T3516] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.109271][ T3516] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #11: comm syz.3.11: iget: bogus i_mode (1) [ 40.151487][ T3516] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.11: couldn't read orphan inode 11 (err -117) [ 40.241032][ T3525] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 40.248729][ T3525] netlink: 224 bytes leftover after parsing attributes in process `syz.0.17'. [ 40.274040][ T3516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.287760][ T3523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16'. [ 40.308113][ T3525] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.547084][ T3505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.588964][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.621051][ T3534] loop0: detected capacity change from 0 to 512 [ 40.649765][ T3534] EXT4-fs: Ignoring removed bh option [ 40.655399][ T3534] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.716827][ T3534] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 40.736875][ T3534] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 40.754833][ T3534] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.854756][ T3541] netlink: 'syz.2.21': attribute type 11 has an invalid length. [ 40.960332][ T3534] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.31: Failed to acquire dquot type 1 [ 40.997207][ T3534] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.31: Invalid block bitmap block 0 in block_group 0 [ 41.068728][ T3534] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.31: Invalid block bitmap block 0 in block_group 0 [ 41.155902][ T3534] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.31: Invalid block bitmap block 0 in block_group 0 [ 41.172476][ T3534] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.31: Failed to acquire dquot type 1 [ 41.314977][ T3534] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.31: Failed to acquire dquot type 1 [ 41.341455][ T3534] EXT4-fs (loop0): 1 orphan inode deleted [ 41.383952][ T3534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.531322][ T3534] syz.0.31 (3534) used greatest stack depth: 9072 bytes left [ 41.549614][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.610752][ T3547] loop0: detected capacity change from 0 to 512 [ 41.645468][ T3547] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 41.672669][ T3547] EXT4-fs (loop0): Remounting filesystem read-only [ 41.679317][ T3547] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.692442][ T3547] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 41.777049][ T3501] syz.3.11 (3501) used greatest stack depth: 7256 bytes left [ 41.793648][ T3547] EXT4-fs (loop0): 1 orphan inode deleted [ 41.799970][ T3547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.858573][ T3554] process 'syz.3.25' launched '/dev/fd/7' with NULL argv: empty string added [ 41.904183][ T3547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.935647][ T3547] sch_fq: defrate 4294967295 ignored. [ 42.180437][ T3568] loop7: detected capacity change from 0 to 16384 [ 42.190721][ T3571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.32'. [ 42.248942][ T3566] loop2: detected capacity change from 0 to 8192 [ 42.343841][ T3578] loop7: detected capacity change from 16384 to 16383 [ 42.368804][ T3586] sd 0:0:1:0: device reset [ 42.396147][ T3593] tipc: Started in network mode [ 42.401102][ T3593] tipc: Node identity 7f000001, cluster identity 4711 [ 42.409163][ T3593] tipc: Enabled bearer , priority 10 [ 42.450013][ T3577] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 42.458482][ T3577] tipc: Enabled bearer , priority 10 [ 42.662303][ T3598] loop1: detected capacity change from 0 to 512 [ 42.715058][ T3598] EXT4-fs: Ignoring removed nobh option [ 42.863717][ T3598] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.870602][ T3598] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 42.932294][ T3598] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 43.275222][ T3598] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.38: attempt to clear invalid blocks 2 len 1 [ 43.388936][ T3598] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.38: invalid indirect mapped block 1819239214 (level 0) [ 43.455512][ T3598] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.38: invalid indirect mapped block 1819239214 (level 1) [ 43.511380][ T3598] EXT4-fs (loop1): 1 truncate cleaned up [ 43.538658][ T3598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.629530][ T3598] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 43.639702][ T3598] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 43.651983][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 43.652000][ T29] audit: type=1400 audit(1759147924.639:460): avc: denied { create } for pid=3597 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.690345][ T29] audit: type=1400 audit(1759147924.669:461): avc: denied { write } for pid=3597 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.740214][ T3598] infiniband syz1: set down [ 43.744904][ T3598] infiniband syz1: added ipvlan0 [ 43.767536][ T3598] RDS/IB: syz1: added [ 43.773143][ T3598] smc: adding ib device syz1 with port count 1 [ 43.780571][ T3598] smc: ib device syz1 port 1 has pnetid [ 43.856621][ T3375] tipc: Node number set to 2130706433 [ 44.005987][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.034936][ T3627] loop0: detected capacity change from 0 to 512 [ 44.050181][ T3627] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.52: iget: bad i_size value: 38620345925642 [ 44.082171][ T29] audit: type=1400 audit(1759147925.069:462): avc: denied { create } for pid=3629 comm="syz.4.45" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.109930][ T3627] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.52: couldn't read orphan inode 15 (err -117) [ 44.114890][ T29] audit: type=1400 audit(1759147925.099:463): avc: denied { write } for pid=3629 comm="syz.4.45" name="file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.144078][ T29] audit: type=1400 audit(1759147925.099:464): avc: denied { open } for pid=3629 comm="syz.4.45" path="/9/file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.166844][ T29] audit: type=1400 audit(1759147925.099:465): avc: denied { ioctl } for pid=3629 comm="syz.4.45" path="/9/file0" dev="tmpfs" ino=65 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.191463][ T29] audit: type=1400 audit(1759147925.109:466): avc: denied { unlink } for pid=3306 comm="syz-executor" name="file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.203858][ T3627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.250560][ T29] audit: type=1326 audit(1759147925.219:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3637 comm="syz.3.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d53aeec9 code=0x7ffc0000 [ 44.274032][ T29] audit: type=1326 audit(1759147925.219:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3637 comm="syz.3.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08d53aeec9 code=0x7ffc0000 [ 44.297811][ T29] audit: type=1326 audit(1759147925.219:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3637 comm="syz.3.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d53aeec9 code=0x7ffc0000 [ 44.425879][ T3647] netlink: 'syz.1.42': attribute type 11 has an invalid length. [ 45.007441][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.088311][ T3655] random: crng reseeded on system resumption [ 45.118975][ T3655] Restarting kernel threads ... [ 45.128689][ T3655] Done restarting kernel threads. [ 45.252621][ T3661] loop4: detected capacity change from 0 to 1024 [ 45.264990][ T3661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.297798][ T3661] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.53: inode #1030059105: comm syz.4.53: iget: illegal inode # [ 45.314697][ T3661] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.53: error while reading EA inode 1030059105 err=-117 [ 45.366022][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.404972][ T3665] netlink: 'syz.3.54': attribute type 10 has an invalid length. [ 45.420973][ T3665] team0: Port device dummy0 added [ 45.438177][ T3665] netlink: 'syz.3.54': attribute type 10 has an invalid length. [ 45.577442][ T3665] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 45.595878][ T3665] team0: Failed to send options change via netlink (err -105) [ 45.604272][ T3665] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 45.614629][ T3665] team0: Port device dummy0 removed [ 45.623017][ T3665] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.916019][ T3675] SELinux: Context @ is not valid (left unmapped). [ 45.950770][ T3676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.093307][ C1] hrtimer: interrupt took 27360 ns [ 46.193837][ T3676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.279393][ T3686] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 46.462641][ T3676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.563224][ T3694] loop3: detected capacity change from 0 to 1024 [ 47.415788][ T3694] EXT4-fs: Ignoring removed nobh option [ 47.421421][ T3694] EXT4-fs: Ignoring removed nobh option [ 47.434570][ T3694] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 47.444574][ T3694] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: comm syz.3.64: inode #4294967295: comm syz.3.64: iget: illegal inode # [ 47.465315][ T3694] EXT4-fs (loop3): no journal found [ 47.470989][ T3694] EXT4-fs (loop3): can't get journal size [ 47.595941][ T3694] EXT4-fs (loop3): failed to initialize system zone (-22) [ 47.610535][ T3694] EXT4-fs (loop3): mount failed [ 47.691215][ T3676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.719687][ T3694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 47.762236][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.801976][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.842666][ T98] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.879204][ T98] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.896867][ T3717] Zero length message leads to an empty skb [ 48.281389][ T3708] Set syz1 is full, maxelem 65536 reached [ 48.337260][ T3736] sg_write: data in/out 327804/1 bytes for SCSI command 0x1c-- guessing data in; [ 48.337260][ T3736] program syz.4.78 not setting count and/or reply_len properly [ 48.659826][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 48.659841][ T29] audit: type=1326 audit(1759147929.649:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f519c3e5d67 code=0x7ffc0000 [ 48.733264][ T29] audit: type=1326 audit(1759147929.679:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f519c38af79 code=0x7ffc0000 [ 48.742683][ T3749] ALSA: seq fatal error: cannot create timer (-19) [ 48.756423][ T29] audit: type=1326 audit(1759147929.679:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f519c3eeec9 code=0x7ffc0000 [ 48.756502][ T29] audit: type=1326 audit(1759147929.679:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f519c3e5d67 code=0x7ffc0000 [ 48.809538][ T29] audit: type=1326 audit(1759147929.679:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f519c38af79 code=0x7ffc0000 [ 48.833445][ T29] audit: type=1326 audit(1759147929.679:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f519c3eeec9 code=0x7ffc0000 [ 48.856926][ T29] audit: type=1326 audit(1759147929.689:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f519c3e5d67 code=0x7ffc0000 [ 48.880372][ T29] audit: type=1326 audit(1759147929.689:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f519c38af79 code=0x7ffc0000 [ 48.903645][ T29] audit: type=1326 audit(1759147929.689:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f519c3eeec9 code=0x7ffc0000 [ 48.926853][ T29] audit: type=1326 audit(1759147929.699:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.2.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f519c3e5d67 code=0x7ffc0000 [ 49.034109][ T3758] loop3: detected capacity change from 0 to 2048 [ 49.061235][ T3760] loop2: detected capacity change from 0 to 2048 [ 49.113854][ T3760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.244281][ T3772] netlink: 'syz.2.85': attribute type 10 has an invalid length. [ 49.302526][ T3772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.337590][ T3772] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 49.382049][ T3777] ------------[ cut here ]------------ [ 49.387806][ T3777] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0)(1) [ 49.412466][ T3777] WARNING: CPU: 0 PID: 3777 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 49.422799][ T3777] Modules linked in: [ 49.426831][ T3777] CPU: 0 UID: 0 PID: 3777 Comm: syz.1.91 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.436647][ T3777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 49.446801][ T3777] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 49.453430][ T3777] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 22 82 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 49.473412][ T3777] RSP: 0018:ffffc90001857440 EFLAGS: 00010292 [ 49.479509][ T3777] RAX: 56583cb0226a9600 RBX: ffff88812b7cf9a8 RCX: 0000000000080000 [ 49.487635][ T3777] RDX: ffffc90002752000 RSI: 000000000000fd45 RDI: 000000000000fd46 [ 49.490727][ T3778] loop4: detected capacity change from 0 to 4096 [ 49.495677][ T3777] RBP: fffffffe00000030 R08: 0001c9000185727f R09: 0000000000000000 [ 49.509666][ T3778] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.510343][ T3777] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88812b7cf968 [ 49.516818][ T3778] EXT4-fs: test_dummy_encryption option not supported [ 49.525268][ T3777] R13: ffff888109f68000 R14: ffff888109f68000 R15: ffff88812b7cf9a0 [ 49.525289][ T3777] FS: 00007fe2c4d376c0(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000 [ 49.549504][ T3777] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.556456][ T3777] CR2: 0000200000004000 CR3: 0000000119f76000 CR4: 00000000003506f0 [ 49.564533][ T3777] Call Trace: [ 49.567851][ T3777] [ 49.570837][ T3777] reg_set_min_max+0x215/0x260 [ 49.575786][ T3777] check_cond_jmp_op+0x1080/0x16e0 [ 49.581012][ T3777] do_check+0x332a/0x7a10 [ 49.585445][ T3777] do_check_common+0xc3a/0x12a0 [ 49.590457][ T3777] bpf_check+0x942b/0xd9e0 [ 49.595036][ T3777] ? __rcu_read_unlock+0x4f/0x70 [ 49.597167][ T3781] netlink: 'syz.1.91': attribute type 10 has an invalid length. [ 49.600145][ T3777] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 49.613951][ T3777] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 49.619739][ T3777] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 49.620719][ T3781] team0: Port device dummy0 added [ 49.625769][ T3777] ? try_charge_memcg+0x200/0x9e0 [ 49.625807][ T3777] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 49.642121][ T3777] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 49.648316][ T3777] ? css_rstat_updated+0xb7/0x240 [ 49.653438][ T3777] ? __rcu_read_unlock+0x4f/0x70 [ 49.658603][ T3777] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 49.662376][ T3782] netlink: 'syz.1.91': attribute type 10 has an invalid length. [ 49.664565][ T3777] ? should_fail_ex+0x30/0x280 [ 49.677107][ T3777] ? selinux_bpf_prog_load+0x36/0xf0 [ 49.682445][ T3777] ? should_failslab+0x8c/0xb0 [ 49.687374][ T3777] ? __kmalloc_cache_noprof+0x189/0x320 [ 49.688471][ T3782] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.693066][ T3777] ? selinux_bpf_prog_load+0xbf/0xf0 [ 49.707479][ T3777] ? security_bpf_prog_load+0x2c/0xa0 [ 49.712976][ T3777] bpf_prog_load+0xedd/0x1070 [ 49.717829][ T3777] ? security_bpf+0x2b/0x90 [ 49.722385][ T3777] __sys_bpf+0x462/0x7b0 [ 49.726925][ T3777] __x64_sys_bpf+0x41/0x50 [ 49.731392][ T3777] x64_sys_call+0x2aea/0x2ff0 [ 49.736366][ T3777] do_syscall_64+0xd2/0x200 [ 49.740936][ T3777] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.747173][ T3777] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.752954][ T3777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.758946][ T3777] RIP: 0033:0x7fe2c62ceec9 [ 49.763485][ T3777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.783416][ T3777] RSP: 002b:00007fe2c4d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.791950][ T3777] RAX: ffffffffffffffda RBX: 00007fe2c6525fa0 RCX: 00007fe2c62ceec9 [ 49.799976][ T3777] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 49.808171][ T3777] RBP: 00007fe2c6351f91 R08: 0000000000000000 R09: 0000000000000000 [ 49.816189][ T3777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.824317][ T3777] R13: 00007fe2c6526038 R14: 00007fe2c6525fa0 R15: 00007fffad737cc8 [ 49.832480][ T3777] [ 49.835601][ T3777] ---[ end trace 0000000000000000 ]--- [ 49.995519][ T3782] team0: Failed to send options change via netlink (err -105) [ 50.095157][ T3782] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 50.139653][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.160439][ T3782] team0: Port device dummy0 removed [ 50.192450][ T3782] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 50.307122][ T3780] loop0: detected capacity change from 0 to 1024 [ 50.363526][ T3786] loop3: detected capacity change from 0 to 512 [ 50.370283][ T3786] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.377013][ T3788] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 50.384723][ T3788] netlink: 224 bytes leftover after parsing attributes in process `syz.2.92'. [ 50.398537][ T3786] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.411802][ T3786] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.433703][ T3786] EXT4-fs (loop3): 1 truncate cleaned up [ 50.442705][ T3780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.462439][ T3780] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.489761][ T3786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.534462][ T3797] loop4: detected capacity change from 0 to 8192 [ 50.583818][ T3658] loop4: p1 p2 p3 p4 [ 50.590475][ T3658] loop4: p2 start 151000334 is beyond EOD, truncated [ 50.597425][ T3658] loop4: p3 start 331777 is beyond EOD, truncated [ 50.603945][ T3658] loop4: p4 size 263168 extends beyond EOD, truncated [ 50.649068][ T3797] loop4: p1 p2 p3 p4 [ 50.664996][ T3797] loop4: p2 start 151000334 is beyond EOD, truncated [ 50.667376][ T3801] loop2: detected capacity change from 0 to 512 [ 50.671791][ T3797] loop4: p3 start 331777 is beyond EOD, truncated [ 50.684657][ T3797] loop4: p4 size 263168 extends beyond EOD, truncated [ 50.750319][ T3801] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 50.790726][ T3801] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.801707][ T3801] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.97: corrupted inode contents [ 50.818079][ T3801] EXT4-fs (loop2): Remounting filesystem read-only [ 50.838152][ T3801] EXT4-fs (loop2): 1 truncate cleaned up [ 50.846148][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.857046][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.868104][ T37] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 50.878961][ T3801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.902687][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.939239][ T3801] bond0: (slave batadv0): Releasing backup interface [ 50.954391][ T3801] bridge_slave_0: left allmulticast mode [ 50.960094][ T3801] bridge_slave_0: left promiscuous mode [ 50.965941][ T3801] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.010812][ T3801] bridge_slave_1: left allmulticast mode [ 51.016635][ T3801] bridge_slave_1: left promiscuous mode [ 51.022356][ T3801] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.039128][ T3801] bond0: (slave bond_slave_0): Releasing backup interface [ 51.049814][ T3801] bond0: (slave bond_slave_1): Releasing backup interface [ 51.107841][ T3801] team0: Port device team_slave_0 removed [ 51.123246][ T3801] team0: Port device team_slave_1 removed [ 51.130986][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.138604][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.148425][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.156052][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.334153][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.424452][ T3827] netlink: 'syz.2.100': attribute type 13 has an invalid length. [ 51.432263][ T3827] netlink: 'syz.2.100': attribute type 17 has an invalid length. [ 51.458828][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.495751][ T3827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.515031][ T3828] infiniband syz!: set active [ 51.519755][ T3828] infiniband syz!: added team_slave_0 [ 52.773603][ T3828] RDS/IB: syz!: added [ 52.777655][ T3828] smc: adding ib device syz! with port count 1 [ 52.795954][ T3854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 52.813614][ T3828] smc: ib device syz! port 1 has pnetid [ 52.853967][ T3857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 52.958191][ T3854] loop1: detected capacity change from 0 to 512 [ 52.986860][ T3854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.106701][ T3854] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.218577][ T3854] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.109: bg 0: block 328: padding at end of block bitmap is not set [ 53.459179][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.783396][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 53.783417][ T29] audit: type=1400 audit(1759147934.689:1002): avc: denied { read } for pid=3870 comm="syz.0.113" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 53.814513][ T29] audit: type=1400 audit(1759147934.689:1003): avc: denied { open } for pid=3870 comm="syz.0.113" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 53.839228][ T29] audit: type=1400 audit(1759147934.689:1004): avc: denied { ioctl } for pid=3870 comm="syz.0.113" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 53.898117][ T29] audit: type=1400 audit(1759147934.819:1005): avc: denied { write } for pid=3876 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.918706][ T29] audit: type=1400 audit(1759147934.819:1006): avc: denied { nlmsg_write } for pid=3876 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.939383][ T29] audit: type=1400 audit(1759147934.879:1007): avc: denied { create } for pid=3882 comm="syz.3.116" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.186500][ T29] audit: type=1400 audit(1759147935.159:1008): avc: denied { create } for pid=3889 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.264094][ T3894] veth0_vlan: entered allmulticast mode [ 54.384803][ T29] audit: type=1400 audit(1759147935.369:1009): avc: denied { create } for pid=3896 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.404683][ T29] audit: type=1400 audit(1759147935.369:1010): avc: denied { ioctl } for pid=3896 comm="syz.2.120" path="socket:[5874]" dev="sockfs" ino=5874 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.613397][ T29] audit: type=1326 audit(1759147935.569:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3901 comm="syz.1.125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2c62ceec9 code=0x0 [ 54.665988][ T3909] netlink: 40 bytes leftover after parsing attributes in process `syz.1.125'. [ 54.677600][ T3907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.123'. [ 54.699364][ T3907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.123'. [ 54.750814][ T3907] loop4: detected capacity change from 0 to 512 [ 55.175431][ T3917] syz.0.127 uses obsolete (PF_INET,SOCK_PACKET) [ 55.189503][ T3917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.127'. [ 55.265788][ T3907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.398249][ T3907] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.517763][ T3907] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.123: bg 0: block 328: padding at end of block bitmap is not set [ 55.817538][ T3929] vlan2: entered allmulticast mode [ 56.122913][ T3936] rdma_op ffff888102419d80 conn xmit_rdma 0000000000000000 [ 56.216649][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.390187][ T3928] hub 6-0:1.0: USB hub found [ 56.431281][ T3928] hub 6-0:1.0: 8 ports detected [ 56.556680][ T3939] mmap: syz.2.133 (3939) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.690532][ T3946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.132'. [ 57.277560][ T3968] loop2: detected capacity change from 0 to 512 [ 57.284961][ T3968] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.400899][ T3973] netlink: 'syz.3.144': attribute type 13 has an invalid length. [ 57.424603][ T3976] netlink: 'syz.4.140': attribute type 11 has an invalid length. [ 57.477904][ T3978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3978 comm=syz.3.144 [ 57.490591][ T3978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3978 comm=syz.3.144 [ 57.572680][ T3986] /dev/loop0: Can't lookup blockdev [ 57.601251][ T3973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.671077][ T3990] netlink: 'syz.1.148': attribute type 4 has an invalid length. [ 57.679026][ T3990] netlink: 152 bytes leftover after parsing attributes in process `syz.1.148'. [ 57.693810][ T3989] block device autoloading is deprecated and will be removed. [ 57.781948][ T3990] .`: renamed from bond0 (while UP) [ 57.849367][ T3994] loop0: detected capacity change from 0 to 512 [ 57.874440][ T3994] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 57.918589][ T3994] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.109814][ T3994] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 58.304588][ T3994] EXT4-fs (loop0): Remounting filesystem read-only [ 58.311479][ T3994] EXT4-fs (loop0): 1 truncate cleaned up [ 58.323461][ T98] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.334602][ T98] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.385805][ T98] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 58.430906][ T3994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.453775][ T3994] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.469101][ T4011] loop2: detected capacity change from 0 to 164 [ 59.158998][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 59.159016][ T29] audit: type=1400 audit(1759147940.149:1345): avc: denied { ioctl } for pid=4025 comm="syz.4.158" path="socket:[6593]" dev="sockfs" ino=6593 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.191818][ T4026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 59.223039][ T4026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.251369][ T4026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.361009][ T29] audit: type=1400 audit(1759147940.329:1346): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 59.407085][ T4033] loop2: detected capacity change from 0 to 512 [ 59.424970][ T29] audit: type=1326 audit(1759147940.379:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.2.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519c3eeec9 code=0x7ffc0000 [ 59.448573][ T29] audit: type=1326 audit(1759147940.379:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.2.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519c3eeec9 code=0x7ffc0000 [ 59.472530][ T29] audit: type=1326 audit(1759147940.379:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.2.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f519c3eeec9 code=0x7ffc0000 [ 59.495957][ T29] audit: type=1326 audit(1759147940.379:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.2.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519c3eeec9 code=0x7ffc0000 [ 59.519449][ T29] audit: type=1326 audit(1759147940.379:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.2.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519c3eeec9 code=0x7ffc0000 [ 59.543129][ T29] audit: type=1326 audit(1759147940.379:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.2.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f519c3eeec9 code=0x7ffc0000 [ 59.566665][ T29] audit: type=1326 audit(1759147940.379:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.2.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519c3eeec9 code=0x7ffc0000 [ 59.590010][ T29] audit: type=1326 audit(1759147940.379:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.2.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519c3eeec9 code=0x7ffc0000 [ 60.021296][ T4033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.067691][ T4033] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.171346][ T4047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 60.195173][ T4033] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 60.270331][ T4033] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 60.282742][ T4033] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.282742][ T4033] [ 60.292607][ T4033] EXT4-fs (loop2): Total free blocks count 0 [ 60.298742][ T4033] EXT4-fs (loop2): Free/Dirty block details [ 60.304922][ T4033] EXT4-fs (loop2): free_blocks=65280 [ 60.310286][ T4033] EXT4-fs (loop2): dirty_blocks=2 [ 60.315582][ T4033] EXT4-fs (loop2): Block reservation details [ 60.322003][ T4033] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 60.410596][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.428176][ T4068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 60.500798][ T4075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 60.568421][ T4082] loop4: detected capacity change from 0 to 512 [ 60.579534][ T4082] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.606549][ T4082] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.172: Failed to acquire dquot type 1 [ 60.631662][ T4082] EXT4-fs (loop4): 1 truncate cleaned up [ 60.671658][ T4082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.695011][ T4091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.171'. [ 60.833875][ T4080] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 60.840444][ T4080] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 60.848007][ T4080] vhci_hcd vhci_hcd.0: Device attached [ 60.867641][ T4092] vhci_hcd: connection closed [ 60.867822][ T3611] vhci_hcd: stop threads [ 60.876868][ T3611] vhci_hcd: release socket [ 60.881589][ T3611] vhci_hcd: disconnect device [ 61.055027][ T4099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.175'. [ 61.146481][ T4099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 61.303143][ T4102] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4102 comm=+}[@ [ 61.497519][ T4105] loop2: detected capacity change from 0 to 128 [ 61.523822][ T4108] netlink: 44 bytes leftover after parsing attributes in process `syz.1.179'. [ 61.532931][ T4108] netlink: 43 bytes leftover after parsing attributes in process `syz.1.179'. [ 61.541870][ T4108] netlink: 'syz.1.179': attribute type 5 has an invalid length. [ 61.549755][ T4108] netlink: 43 bytes leftover after parsing attributes in process `syz.1.179'. [ 61.590640][ T4109] tipc: Started in network mode [ 61.596120][ T4109] tipc: Node identity fed2e7cc5727, cluster identity 4711 [ 61.603266][ T4109] tipc: Enabled bearer , priority 0 [ 61.642717][ T4109] syzkaller0: entered promiscuous mode [ 61.648422][ T4109] syzkaller0: entered allmulticast mode [ 61.659137][ T4110] loop0: detected capacity change from 0 to 512 [ 61.668275][ T4105] tipc: Started in network mode [ 61.673251][ T4105] tipc: Node identity ac14140f, cluster identity 4711 [ 61.695116][ T4042] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 61.715442][ T4105] tipc: New replicast peer: 255.255.255.83 [ 61.721459][ T4105] tipc: Enabled bearer , priority 10 [ 61.731655][ T4109] tipc: Resetting bearer [ 61.756197][ T4106] tipc: Resetting bearer [ 61.770203][ T4110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.794950][ T4106] tipc: Disabling bearer [ 61.858810][ T4120] loop2: detected capacity change from 0 to 512 [ 61.898202][ T4110] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.941492][ T4120] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.964957][ T4120] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.181: bg 0: block 4: invalid block bitmap [ 62.593774][ T4120] EXT4-fs (loop2): Remounting filesystem read-only [ 62.600674][ T4120] EXT4-fs (loop2): 1 truncate cleaned up [ 62.615635][ T4120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.728701][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.761570][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.916370][ T3408] tipc: Node number set to 2886997007 [ 63.327898][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.861316][ T4181] netlink: 'syz.3.201': attribute type 7 has an invalid length. [ 63.939024][ T4187] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 63.939024][ T4187] program syz.2.199 not setting count and/or reply_len properly [ 64.033990][ T3408] hid_parser_main: 19 callbacks suppressed [ 64.034007][ T3408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.047659][ T3408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.055160][ T3408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.062875][ T3408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.070345][ T3408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.077833][ T3408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.085400][ T3408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.093133][ T3408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.100585][ T3408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.108143][ T3408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.147142][ T3408] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz1 [ 64.195126][ T4198] fido_id[4198]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.254533][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 64.254549][ T29] audit: type=1400 audit(1759147945.207:1537): avc: denied { name_bind } for pid=4209 comm="syz.2.203" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 64.378698][ T4214] loop2: detected capacity change from 0 to 8192 [ 64.428124][ T4159] delete_channel: no stack [ 64.440691][ T4214] loop2: p1[EZD] p2 p4 [ 64.445234][ T4214] loop2: p1 start 150996992 is beyond EOD, truncated [ 64.453338][ T4214] loop2: p4 size 281856 extends beyond EOD, truncated [ 64.478565][ T29] audit: type=1400 audit(1759147945.413:1538): avc: denied { write } for pid=4217 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.498223][ T29] audit: type=1400 audit(1759147945.413:1539): avc: denied { connect } for pid=4217 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.517862][ T29] audit: type=1400 audit(1759147945.413:1540): avc: denied { name_connect } for pid=4217 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 64.539936][ T4219] SELinux: Context Ü is not valid (left unmapped). [ 64.546705][ T29] audit: type=1400 audit(1759147945.478:1541): avc: denied { mac_admin } for pid=4217 comm="syz.4.205" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.567880][ T29] audit: type=1400 audit(1759147945.488:1542): avc: denied { shutdown } for pid=4217 comm="syz.4.205" lport=38965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.624612][ T29] audit: type=1400 audit(1759147945.553:1543): avc: denied { create } for pid=4222 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.644539][ T29] audit: type=1400 audit(1759147945.553:1544): avc: denied { write } for pid=4222 comm="syz.4.207" path="socket:[7417]" dev="sockfs" ino=7417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.677984][ T4223] loop4: detected capacity change from 0 to 512 [ 64.685581][ T4223] EXT4-fs: Ignoring removed bh option [ 64.699084][ T4223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.711935][ T4223] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.736300][ T29] audit: type=1400 audit(1759147945.656:1545): avc: denied { ioctl } for pid=4222 comm="syz.4.207" path="/42/bus/file1" dev="loop4" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.775663][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.867097][ T4229] macvlan1: entered promiscuous mode [ 64.885070][ T4229] ipvlan0: entered promiscuous mode [ 64.891236][ T4229] ipvlan0: left promiscuous mode [ 64.898240][ T4229] macvlan1: left promiscuous mode [ 64.903672][ T29] audit: type=1326 audit(1759147945.815:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bee8feec9 code=0x7ffc0000 [ 65.009328][ T4237] __nla_validate_parse: 5 callbacks suppressed [ 65.009342][ T4237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 65.118542][ T4244] atomic_op ffff88810241a528 conn xmit_atomic 0000000000000000 [ 65.165420][ T4244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 65.231739][ T4253] netlink: 'syz.4.213': attribute type 11 has an invalid length. [ 65.937479][ T4269] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 65.991629][ T4271] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 66.047888][ T4269] team0: Port device dummy0 added [ 66.099461][ T4271] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 66.164420][ T4271] team0: Failed to send options change via netlink (err -105) [ 66.192426][ T4271] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 66.223660][ T4271] team0: Port device dummy0 removed [ 66.231845][ T4271] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.432049][ T4279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.561102][ T4279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.602435][ T4282] vxcan1: entered allmulticast mode [ 66.632314][ T4279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.677117][ T4286] netlink: 44 bytes leftover after parsing attributes in process `syz.4.227'. [ 66.686300][ T4286] netlink: 43 bytes leftover after parsing attributes in process `syz.4.227'. [ 66.695455][ T4286] netlink: 'syz.4.227': attribute type 5 has an invalid length. [ 66.703121][ T4286] netlink: 43 bytes leftover after parsing attributes in process `syz.4.227'. [ 66.732393][ T4279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.769747][ T4290] tipc: Started in network mode [ 66.774765][ T4290] tipc: Node identity 76f4a3178fa7, cluster identity 4711 [ 66.782442][ T4290] tipc: Enabled bearer , priority 0 [ 66.812165][ T4290] syzkaller0: entered promiscuous mode [ 66.817828][ T4290] syzkaller0: entered allmulticast mode [ 66.842311][ T4290] tipc: Resetting bearer [ 66.864584][ T4278] tipc: Enabling of bearer rejected, already enabled [ 66.883862][ T3611] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.893414][ T4289] tipc: Resetting bearer [ 66.902863][ T4289] tipc: Disabling bearer [ 66.926348][ T4296] .`: (slave dummy0): Releasing backup interface [ 66.951502][ T4296] bridge_slave_0: left promiscuous mode [ 66.957560][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.967850][ T4296] bridge_slave_1: left allmulticast mode [ 66.973801][ T4296] bridge_slave_1: left promiscuous mode [ 66.979757][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.000799][ T4296] .`: (slave bond_slave_0): Releasing backup interface [ 67.021455][ T4296] .`: (slave bond_slave_1): Releasing backup interface [ 67.048493][ T4296] team0: Port device team_slave_0 removed [ 67.061143][ T4296] team0: Port device team_slave_1 removed [ 67.069647][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.077229][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.086828][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.094657][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.120811][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.144420][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.153493][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.217744][ T4308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 67.250681][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 67.264204][ T4311] netlink: '+}[@': attribute type 6 has an invalid length. [ 67.271755][ T4311] netlink: 168 bytes leftover after parsing attributes in process `+}[@'. [ 67.295358][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.326640][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.406199][ T4321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.240'. [ 67.415208][ T4321] netlink: 43 bytes leftover after parsing attributes in process `syz.3.240'. [ 67.424194][ T4321] netlink: 'syz.3.240': attribute type 5 has an invalid length. [ 67.526912][ T4330] loop2: detected capacity change from 0 to 1024 [ 67.929515][ T4330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.098240][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.552003][ T4366] netlink: 'syz.3.252': attribute type 5 has an invalid length. [ 69.750757][ T4375] netlink: 'syz.1.256': attribute type 3 has an invalid length. [ 69.759573][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 69.759590][ T29] audit: type=1400 audit(1759147950.352:1639): avc: denied { create } for pid=4371 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 69.856960][ T29] audit: type=1400 audit(1759147950.408:1640): avc: denied { read } for pid=4371 comm="syz.0.255" path="socket:[7688]" dev="sockfs" ino=7688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.980730][ T4382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.989604][ T4382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.005842][ T29] audit: type=1400 audit(1759147950.567:1641): avc: denied { ioctl } for pid=4381 comm="syz.1.260" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.052343][ T29] audit: type=1400 audit(1759147950.624:1642): avc: denied { mount } for pid=4386 comm="syz.2.261" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 70.074861][ T29] audit: type=1400 audit(1759147950.624:1643): avc: denied { read } for pid=4386 comm="syz.2.261" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.098095][ T29] audit: type=1400 audit(1759147950.624:1644): avc: denied { open } for pid=4386 comm="syz.2.261" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.103252][ T4388] netlink: 'syz.3.258': attribute type 10 has an invalid length. [ 70.121956][ T29] audit: type=1400 audit(1759147950.633:1645): avc: denied { ioctl } for pid=4386 comm="syz.2.261" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.155045][ T29] audit: type=1326 audit(1759147950.633:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519c3eeec9 code=0x7ffc0000 [ 70.181565][ T29] audit: type=1326 audit(1759147950.633:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f519c3eeec9 code=0x7ffc0000 [ 70.205240][ T29] audit: type=1326 audit(1759147950.727:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519c3eeec9 code=0x7ffc0000 [ 70.229747][ T4391] bridge1: port 1(veth5) entered blocking state [ 70.236167][ T4391] bridge1: port 1(veth5) entered disabled state [ 70.253214][ T4391] veth5: entered allmulticast mode [ 70.264088][ T4391] veth5: entered promiscuous mode [ 70.302169][ T4388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.344251][ T4388] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 70.355190][ T4392] bridge1: port 2(veth0_to_bond) entered blocking state [ 70.362436][ T4392] bridge1: port 2(veth0_to_bond) entered disabled state [ 70.370279][ T4392] veth0_to_bond: entered allmulticast mode [ 70.379592][ T4392] veth0_to_bond: entered promiscuous mode [ 70.567953][ T4391] vlan2: entered allmulticast mode [ 70.573198][ T4391] veth0_to_hsr: entered allmulticast mode [ 70.596352][ T4397] __nla_validate_parse: 10 callbacks suppressed [ 70.596389][ T4397] netlink: 44 bytes leftover after parsing attributes in process `syz.2.264'. [ 70.598559][ T4391] bridge1: port 3(vlan2) entered blocking state [ 70.602678][ T4397] netlink: 43 bytes leftover after parsing attributes in process `syz.2.264'. [ 70.602698][ T4397] netlink: 'syz.2.264': attribute type 5 has an invalid length. [ 70.611820][ T4391] bridge1: port 3(vlan2) entered disabled state [ 70.618539][ T4397] netlink: 43 bytes leftover after parsing attributes in process `syz.2.264'. [ 70.651394][ T4391] vlan2: entered promiscuous mode [ 70.656506][ T4391] veth0_to_hsr: entered promiscuous mode [ 70.703722][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 70.764142][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 71.119504][ T4420] netlink: 'syz.0.273': attribute type 25 has an invalid length. [ 71.127479][ T4420] netlink: 'syz.0.273': attribute type 28 has an invalid length. [ 71.543726][ T4428] netlink: 44 bytes leftover after parsing attributes in process `syz.0.276'. [ 71.552799][ T4428] netlink: 43 bytes leftover after parsing attributes in process `syz.0.276'. [ 71.561928][ T4428] netlink: 'syz.0.276': attribute type 5 has an invalid length. [ 71.569729][ T4428] netlink: 43 bytes leftover after parsing attributes in process `syz.0.276'. [ 72.248915][ T4438] tipc: New replicast peer: 10.1.1.2 [ 72.254447][ T4438] tipc: Enabled bearer , priority 10 [ 72.376086][ T4449] netlink: 60 bytes leftover after parsing attributes in process `syz.1.281'. [ 72.385648][ T4449] unsupported nlmsg_type 40 [ 72.394424][ T4447] netlink: 'syz.4.283': attribute type 7 has an invalid length. [ 72.800453][ T4465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.289'. [ 72.809801][ T4465] netlink: 'syz.4.289': attribute type 5 has an invalid length. [ 72.994650][ T4478] bridge_slave_1: left allmulticast mode [ 73.000562][ T4478] bridge_slave_1: left promiscuous mode [ 73.006395][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.034121][ T4478] bridge_slave_0: left allmulticast mode [ 73.039895][ T4478] bridge_slave_0: left promiscuous mode [ 73.045797][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.109915][ T4476] veth0_to_team: entered promiscuous mode [ 73.256259][ T4485] block device autoloading is deprecated and will be removed. [ 73.435670][ T4503] netlink: 'syz.0.302': attribute type 5 has an invalid length. [ 73.466770][ T4505] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.527937][ T3360] tipc: Node number set to 2851465164 [ 73.536887][ T4505] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.610597][ T4505] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.738066][ T4505] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.843860][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.860241][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.871625][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.884982][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.352698][ T4542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.373151][ T4542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.016109][ T4592] loop4: detected capacity change from 0 to 128 [ 75.030915][ T4593] capability: warning: `syz.1.320' uses deprecated v2 capabilities in a way that may be insecure [ 75.103848][ T4595] loop2: detected capacity change from 0 to 256 [ 75.354578][ T4598] loop2: detected capacity change from 0 to 164 [ 75.393724][ T4598] ISOFS: unable to read i-node block [ 75.399112][ T4598] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 75.400388][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 75.400418][ T29] audit: type=1400 audit(1759147955.573:2065): avc: denied { getopt } for pid=4597 comm="syz.2.326" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.976553][ T4616] __nla_validate_parse: 18 callbacks suppressed [ 75.976586][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 76.096421][ T4621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 76.240470][ T29] audit: type=1326 audit(1759147956.405:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 76.264203][ T29] audit: type=1326 audit(1759147956.405:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 76.287922][ T29] audit: type=1326 audit(1759147956.415:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 76.311356][ T29] audit: type=1326 audit(1759147956.415:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 76.334748][ T29] audit: type=1326 audit(1759147956.415:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 76.358574][ T29] audit: type=1326 audit(1759147956.415:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe2c62d0d5c code=0x7ffc0000 [ 76.365823][ T4627] loop4: detected capacity change from 0 to 512 [ 76.382089][ T29] audit: type=1326 audit(1759147956.415:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe2c62d0c94 code=0x7ffc0000 [ 76.390741][ T4627] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 76.412470][ T29] audit: type=1326 audit(1759147956.415:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe2c62d0c94 code=0x7ffc0000 [ 76.412513][ T29] audit: type=1326 audit(1759147956.415:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c62ceec9 code=0x7ffc0000 [ 76.499412][ T4625] tipc: Enabled bearer , priority 0 [ 76.507439][ T4625] syzkaller0: entered promiscuous mode [ 76.512973][ T4625] syzkaller0: entered allmulticast mode [ 76.525603][ T4625] tipc: Resetting bearer [ 76.533821][ T4624] tipc: Resetting bearer [ 76.542770][ T4630] validate_nla: 1 callbacks suppressed [ 76.542783][ T4630] netlink: 'syz.4.335': attribute type 2 has an invalid length. [ 76.556002][ T4630] netlink: 'syz.4.335': attribute type 1 has an invalid length. [ 76.567094][ T4624] tipc: Disabling bearer [ 76.783419][ T4671] loop2: detected capacity change from 0 to 1024 [ 76.833748][ T4671] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 76.872266][ T4671] smc: net device bond0 applied user defined pnetid SYZ0 [ 76.892312][ T4671] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 76.910998][ T4708] netlink: 60 bytes leftover after parsing attributes in process `syz.3.354'. [ 76.921916][ T4671] smc: net device bond0 erased user defined pnetid SYZ0 [ 76.929419][ T4671] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 76.964645][ T4711] 9pnet_fd: Insufficient options for proto=fd [ 77.155911][ T4726] 9pnet_fd: Insufficient options for proto=fd [ 77.179590][ T4726] syz.0.348 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 77.213769][ T4721] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.271501][ T4721] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.323433][ T4721] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.363821][ T4721] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.560985][ T4732] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 77.567639][ T4732] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 77.575364][ T4732] vhci_hcd vhci_hcd.0: Device attached [ 77.599827][ T4730] infiniband !yz!: set active [ 77.604560][ T4730] infiniband !yz!: added team_slave_0 [ 77.615812][ T4730] RDS/IB: !yz!: added [ 77.620047][ T4730] smc: adding ib device !yz! with port count 1 [ 77.627812][ T4730] smc: ib device !yz! port 1 has pnetid [ 77.833484][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 77.853133][ T4739] netlink: 32 bytes leftover after parsing attributes in process `syz.1.350'. [ 77.916677][ T9] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 77.931802][ T4743] tipc: Enabled bearer , priority 0 [ 77.947422][ T4740] tipc: Resetting bearer [ 77.964755][ T4740] tipc: Disabling bearer [ 78.497472][ T4733] vhci_hcd: connection reset by peer [ 78.503214][ T4640] vhci_hcd: stop threads [ 78.507571][ T4640] vhci_hcd: release socket [ 78.512048][ T4640] vhci_hcd: disconnect device [ 79.030439][ T4751] loop4: detected capacity change from 0 to 164 [ 79.041980][ T4756] veth0: entered promiscuous mode [ 79.048045][ T4756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 79.075039][ T4751] ISOFS: unable to read i-node block [ 79.080859][ T4751] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 79.421539][ T4762] loop4: detected capacity change from 0 to 1024 [ 79.502716][ T4640] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.548268][ T4762] EXT4-fs: Ignoring removed orlov option [ 79.620573][ T4639] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.663504][ T4639] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.693415][ T4762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.719929][ T4639] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.189901][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.204413][ T4766] smc: net device bond0 applied user defined pnetid SYZ0 [ 80.217258][ T4766] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 80.236054][ T4769] smc: net device bond0 erased user defined pnetid SYZ0 [ 80.263778][ T4769] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 80.298731][ T4776] syz!: rxe_newlink: already configured on team_slave_0 [ 80.338306][ T4783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 80.349741][ T4783] netlink: 32 bytes leftover after parsing attributes in process `syz.4.365'. [ 80.363089][ T4780] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 80.436299][ T4786] bond0: (slave bond_slave_0): Releasing backup interface [ 80.447526][ T4786] bond0: (slave bond_slave_1): Releasing backup interface [ 80.473027][ T4786] team0: Port device team_slave_0 removed [ 80.486718][ T4788] netlink: 'syz.4.366': attribute type 10 has an invalid length. [ 80.493395][ T4786] team0: Port device team_slave_1 removed [ 80.494664][ T4788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.366'. [ 80.501913][ T4786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.516923][ T4786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.565665][ T3360] syz!: Port: 1 Link DOWN [ 80.565668][ T4790] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 80.565695][ T4790] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 80.584332][ T4790] vhci_hcd vhci_hcd.0: Device attached [ 80.587071][ T4788] batman_adv: batadv0: Adding interface: veth1_vlan [ 80.596782][ T4788] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.623076][ T4788] batman_adv: batadv0: Interface activated: veth1_vlan [ 80.704309][ T4795] netlink: 'syz.4.371': attribute type 1 has an invalid length. [ 80.712175][ T4795] netlink: 224 bytes leftover after parsing attributes in process `syz.4.371'. [ 80.750433][ T4797] netlink: 'syz.3.370': attribute type 5 has an invalid length. [ 80.856325][ T3382] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 81.461125][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 81.461144][ T29] audit: type=1400 audit(1759147961.307:2231): avc: denied { read } for pid=4819 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.551009][ T4791] vhci_hcd: connection reset by peer [ 81.711362][ T4639] vhci_hcd: stop threads [ 81.715726][ T4639] vhci_hcd: release socket [ 81.720262][ T4639] vhci_hcd: disconnect device [ 82.130013][ T4833] __nla_validate_parse: 3 callbacks suppressed [ 82.130069][ T4833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.379'. [ 82.366362][ T4839] netlink: 44 bytes leftover after parsing attributes in process `syz.3.382'. [ 82.375460][ T4839] netlink: 43 bytes leftover after parsing attributes in process `syz.3.382'. [ 82.384400][ T4839] netlink: 'syz.3.382': attribute type 5 has an invalid length. [ 82.392149][ T4839] netlink: 43 bytes leftover after parsing attributes in process `syz.3.382'. [ 82.410065][ T4838] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 82.471853][ T29] audit: type=1400 audit(1759147962.252:2232): avc: denied { write } for pid=4844 comm="syz.3.385" name="rt_acct" dev="proc" ino=4026532667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 82.518788][ T29] audit: type=1400 audit(1759147962.252:2233): avc: denied { write } for pid=4844 comm="syz.3.385" path="socket:[9452]" dev="sockfs" ino=9452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.603259][ T4851] 9pnet_fd: Insufficient options for proto=fd [ 83.306512][ T29] audit: type=1400 audit(1759147963.038:2234): avc: denied { write } for pid=4855 comm="syz.1.390" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 83.463826][ T29] audit: type=1400 audit(1759147963.085:2235): avc: denied { remount } for pid=4855 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.483666][ T29] audit: type=1400 audit(1759147963.094:2236): avc: denied { setcheckreqprot } for pid=4860 comm="syz.4.391" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 83.542019][ T9] vhci_hcd: vhci_device speed not set [ 83.627375][ T29] audit: type=1400 audit(1759147963.337:2237): avc: denied { read } for pid=4867 comm="syz.3.394" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.650347][ T29] audit: type=1400 audit(1759147963.337:2238): avc: denied { open } for pid=4867 comm="syz.3.394" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.256690][ T4873] netlink: 44 bytes leftover after parsing attributes in process `syz.3.395'. [ 84.266179][ T4873] netlink: 43 bytes leftover after parsing attributes in process `syz.3.395'. [ 84.275102][ T4873] netlink: 'syz.3.395': attribute type 5 has an invalid length. [ 84.282818][ T4873] netlink: 43 bytes leftover after parsing attributes in process `syz.3.395'. [ 84.327158][ T4876] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 84.333726][ T4876] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.341476][ T4876] vhci_hcd vhci_hcd.0: Device attached [ 84.351739][ T29] audit: type=1400 audit(1759147964.011:2239): avc: denied { create } for pid=4875 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 84.383734][ T29] audit: type=1400 audit(1759147964.039:2240): avc: denied { sys_admin } for pid=4875 comm="syz.3.396" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 84.597404][ T3375] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 84.608505][ T4892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.400'. [ 84.629891][ T4894] $Hÿ: renamed from .` [ 84.634798][ T4888] netlink: 48 bytes leftover after parsing attributes in process `syz.4.400'. [ 84.695563][ T4894] $Hÿ: entered promiscuous mode [ 84.732103][ T4896] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.772928][ T4896] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.861725][ T4900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.404'. [ 84.876643][ T4896] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.921415][ T4904] netlink: 'syz.0.406': attribute type 5 has an invalid length. [ 84.997982][ T4896] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.161642][ T4682] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.186653][ T4682] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.234897][ T4912] tipc: Started in network mode [ 85.239932][ T4912] tipc: Node identity 166668e8181b, cluster identity 4711 [ 85.247561][ T4912] tipc: Enabled bearer , priority 0 [ 85.287014][ T4912] syzkaller0: entered promiscuous mode [ 85.292782][ T4912] syzkaller0: entered allmulticast mode [ 85.659287][ T4912] tipc: Resetting bearer [ 85.712153][ T4920] loop4: detected capacity change from 0 to 512 [ 85.735648][ T4911] tipc: Resetting bearer [ 85.787614][ T4920] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.824649][ T4911] tipc: Disabling bearer [ 85.981758][ T4920] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 86.190007][ T4682] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.198471][ T4682] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.200180][ T4920] netlink: 'syz.4.411': attribute type 1 has an invalid length. [ 86.339735][ T3382] vhci_hcd: vhci_device speed not set [ 87.018992][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 87.019010][ T29] audit: type=1400 audit(1759147966.509:2383): avc: denied { map } for pid=4939 comm="syz.1.419" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.049705][ T29] audit: type=1400 audit(1759147966.509:2384): avc: denied { read write } for pid=4939 comm="syz.1.419" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.145452][ T29] audit: type=1400 audit(1759147966.574:2385): avc: denied { append } for pid=4953 comm="syz.0.423" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.182035][ T29] audit: type=1400 audit(1759147966.658:2386): avc: denied { create } for pid=4953 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 87.204804][ T29] audit: type=1400 audit(1759147966.677:2387): avc: denied { name_bind } for pid=4953 comm="syz.0.423" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 87.226055][ T29] audit: type=1400 audit(1759147966.677:2388): avc: denied { node_bind } for pid=4953 comm="syz.0.423" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 87.247762][ T4877] vhci_hcd: connection reset by peer [ 87.253983][ T4640] vhci_hcd: stop threads [ 87.258277][ T4640] vhci_hcd: release socket [ 87.262790][ T4640] vhci_hcd: disconnect device [ 87.285076][ T29] audit: type=1400 audit(1759147966.752:2389): avc: denied { create } for pid=4962 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 87.307594][ T29] audit: type=1400 audit(1759147966.752:2390): avc: denied { setopt } for pid=4962 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 87.328524][ T29] audit: type=1400 audit(1759147966.752:2391): avc: denied { write } for pid=4962 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.348567][ T29] audit: type=1400 audit(1759147966.752:2392): avc: denied { nlmsg_write } for pid=4962 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.445267][ T4971] netlink: 'syz.2.425': attribute type 7 has an invalid length. [ 87.572689][ T4978] loop4: detected capacity change from 0 to 1024 [ 87.581823][ T4978] EXT4-fs: Ignoring removed bh option [ 87.597148][ T4978] EXT4-fs: inline encryption not supported [ 87.619689][ T4978] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.632703][ T4978] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.428: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.640526][ T4981] vlan2: entered promiscuous mode [ 87.650226][ T4978] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.428: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.651881][ T4981] vlan2: entered allmulticast mode [ 87.667706][ T4978] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.428: Failed to acquire dquot type 0 [ 87.671026][ T4981] hsr_slave_1: entered allmulticast mode [ 87.688998][ T4978] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 87.694443][ T4981] __nla_validate_parse: 4 callbacks suppressed [ 87.694463][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 87.698747][ T4978] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.428: mark_inode_dirty error [ 87.728348][ T4978] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 87.743621][ T4978] EXT4-fs (loop4): 1 orphan inode deleted [ 87.749823][ T4978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.764423][ T4640] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.786426][ T4640] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:14: Failed to release dquot type 0 [ 87.805948][ T4978] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.428: lblock 0 mapped to illegal pblock 16 (length 1) [ 87.821510][ T4978] netlink: 'syz.4.428': attribute type 1 has an invalid length. [ 87.829462][ T4978] netlink: 224 bytes leftover after parsing attributes in process `syz.4.428'. [ 87.843221][ T4978] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.428: lblock 0 mapped to illegal pblock 16 (length 1) [ 87.886813][ T4985] block device autoloading is deprecated and will be removed. [ 88.106652][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.116434][ T3306] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 88.130650][ T3306] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 88.140609][ T3306] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 88.682341][ T5011] netlink: 'syz.2.438': attribute type 13 has an invalid length. [ 88.690222][ T5011] netlink: 'syz.2.438': attribute type 17 has an invalid length. [ 88.709718][ T5011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.050259][ T5020] ALSA: seq fatal error: cannot create timer (-19) [ 89.299680][ T5031] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 89.478245][ T5038] random: crng reseeded on system resumption [ 89.491221][ T5038] Restarting kernel threads ... [ 89.496825][ T5038] Done restarting kernel threads. [ 89.533600][ T5040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.449'. [ 89.655975][ T5047] netlink: 'syz.2.450': attribute type 10 has an invalid length. [ 89.715806][ T5047] team0: Port device dummy0 added [ 89.716284][ T5049] netlink: 'syz.2.450': attribute type 10 has an invalid length. [ 89.878547][ T5049] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 89.902325][ T5049] team0: Failed to send options change via netlink (err -105) [ 89.927647][ T5049] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 90.005285][ T5049] team0: Port device dummy0 removed [ 90.029888][ T3375] usb 7-1: enqueue for inactive port 0 [ 90.044156][ T5056] loop4: detected capacity change from 0 to 2048 [ 90.054177][ T3375] usb 7-1: enqueue for inactive port 0 [ 90.067687][ T5049] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.145156][ T3375] vhci_hcd: vhci_device speed not set [ 90.248468][ T5064] netlink: 'syz.3.456': attribute type 13 has an invalid length. [ 90.256432][ T5064] netlink: 'syz.3.456': attribute type 17 has an invalid length. [ 90.280367][ T5064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.297961][ T5056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.393311][ T5065] netlink: 'syz.4.454': attribute type 10 has an invalid length. [ 90.419662][ T5065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.439809][ T5065] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 90.460827][ T5067] $Hÿ: renamed from bond0 (while UP) [ 90.469213][ T5067] $Hÿ: entered promiscuous mode [ 90.474300][ T5067] bond_slave_0: entered promiscuous mode [ 90.480244][ T5067] bond_slave_1: entered promiscuous mode [ 90.501570][ T5067] dummy0: entered promiscuous mode [ 90.506809][ T5067] batadv0: entered promiscuous mode [ 90.677252][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.854966][ T5082] loop4: detected capacity change from 0 to 512 [ 90.897033][ T5084] random: crng reseeded on system resumption [ 90.907371][ T5084] Restarting kernel threads ... [ 90.917890][ T5084] Done restarting kernel threads. [ 91.053901][ T5082] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 91.063129][ T5082] EXT4-fs (loop4): orphan cleanup on readonly fs [ 91.074261][ T5082] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.461: corrupted inode contents [ 91.117958][ T5082] EXT4-fs (loop4): Remounting filesystem read-only [ 91.125395][ T5082] EXT4-fs (loop4): 1 truncate cleaned up [ 91.182054][ T4704] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.193167][ T4704] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.204497][ T4704] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 91.216326][ T5082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.248099][ T5082] bond0: (slave batadv0): Releasing backup interface [ 91.274659][ T5082] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 91.281867][ T5082] batman_adv: batadv0: Removing interface: veth1_vlan [ 91.318663][ T5091] loop2: detected capacity change from 0 to 512 [ 91.356527][ T5091] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 91.380128][ T5091] EXT4-fs (loop2): orphan cleanup on readonly fs [ 91.429124][ T5091] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.463: corrupted inode contents [ 91.450125][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.461196][ T5091] EXT4-fs (loop2): Remounting filesystem read-only [ 91.504904][ T5091] EXT4-fs (loop2): 1 truncate cleaned up [ 91.510761][ T98] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.521510][ T98] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.549098][ T98] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 91.575321][ T5091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.601504][ T5091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.699399][ T5116] block device autoloading is deprecated and will be removed. [ 91.716716][ T5113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.468'. [ 91.832844][ T5125] loop2: detected capacity change from 0 to 256 [ 91.853060][ T5125] FAT-fs (loop2): Directory bread(block 64) failed [ 91.873465][ T5125] FAT-fs (loop2): Directory bread(block 65) failed [ 91.880386][ T5125] FAT-fs (loop2): Directory bread(block 66) failed [ 91.886994][ T5125] FAT-fs (loop2): Directory bread(block 67) failed [ 91.893662][ T5125] FAT-fs (loop2): Directory bread(block 68) failed [ 91.900326][ T5125] FAT-fs (loop2): Directory bread(block 69) failed [ 91.907155][ T5125] FAT-fs (loop2): Directory bread(block 70) failed [ 91.914221][ T5125] FAT-fs (loop2): Directory bread(block 71) failed [ 91.922959][ T5125] FAT-fs (loop2): Directory bread(block 72) failed [ 91.929724][ T5125] FAT-fs (loop2): Directory bread(block 73) failed [ 91.936882][ T5120] bond0: (slave dummy0): Releasing backup interface [ 91.950570][ T5120] bridge_slave_0: left allmulticast mode [ 91.956397][ T5120] bridge_slave_0: left promiscuous mode [ 91.962292][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.179595][ T5136] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 92.298216][ T5139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 92.436426][ T5120] bridge_slave_1: left allmulticast mode [ 92.442205][ T5120] bridge_slave_1: left promiscuous mode [ 92.447961][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.457500][ T5120] veth0_to_bond: left allmulticast mode [ 92.463181][ T5120] veth0_to_bond: left promiscuous mode [ 92.468893][ T5120] bridge1: port 2(veth0_to_bond) entered disabled state [ 92.478381][ T5120] bond0: (slave bond_slave_0): Releasing backup interface [ 92.489193][ T5120] bond0: (slave bond_slave_1): Releasing backup interface [ 92.510539][ T5120] team0: Port device team_slave_0 removed [ 92.530640][ T5120] team0: Port device team_slave_1 removed [ 92.538581][ T5120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.546135][ T5120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.556190][ T5120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.563954][ T5120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.586993][ T5120] veth5: left allmulticast mode [ 92.591939][ T5120] veth5: left promiscuous mode [ 92.596955][ T5120] bridge1: port 1(veth5) entered disabled state [ 92.607616][ T5120] vlan2: left promiscuous mode [ 92.612540][ T5120] veth0_to_hsr: left promiscuous mode [ 92.618156][ T5120] bridge1: port 3(vlan2) entered disabled state [ 92.627898][ T5123] team0: Mode changed to "random" [ 92.646609][ T5128] vlan0: entered promiscuous mode [ 92.687733][ T5128] team0: Port device vlan0 added [ 92.710646][ T5125] $Hÿ: renamed from bond0 (while UP) [ 92.735655][ T5125] $Hÿ: entered promiscuous mode [ 92.741211][ T5125] dummy0: entered promiscuous mode [ 92.759229][ T5136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.780513][ T5137] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 92.791767][ T5137] bond0: (slave batadv1): making interface the new active one [ 92.800366][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 92.800383][ T29] audit: type=1400 audit(1759147971.907:2946): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 92.837292][ T5137] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 92.877821][ T5139] bond0 (unregistering): (slave batadv1): Releasing active interface [ 92.897789][ T5139] bond0 (unregistering): Released all slaves [ 92.915037][ T5132] tipc: Enabled bearer , priority 0 [ 92.978256][ T29] audit: type=1326 audit(1759147972.047:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bee8feec9 code=0x7ffc0000 [ 93.002451][ T29] audit: type=1326 audit(1759147972.047:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bee8feec9 code=0x7ffc0000 [ 93.026102][ T29] audit: type=1326 audit(1759147972.056:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6bee8feec9 code=0x7ffc0000 [ 93.049556][ T29] audit: type=1326 audit(1759147972.056:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bee8feec9 code=0x7ffc0000 [ 93.073335][ T29] audit: type=1326 audit(1759147972.056:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bee8feec9 code=0x7ffc0000 [ 93.096844][ T29] audit: type=1326 audit(1759147972.056:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bee8feec9 code=0x7ffc0000 [ 93.120847][ T29] audit: type=1326 audit(1759147972.056:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bee8feec9 code=0x7ffc0000 [ 93.144398][ T29] audit: type=1326 audit(1759147972.056:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bee8feec9 code=0x7ffc0000 [ 93.167843][ T29] audit: type=1326 audit(1759147972.056:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bee8feec9 code=0x7ffc0000 [ 93.218375][ T5150] sd 0:0:1:0: device reset [ 93.351242][ T5162] loop4: detected capacity change from 0 to 512 [ 93.396563][ T5162] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 93.399738][ T5172] tipc: Enabled bearer , priority 10 [ 93.424995][ T5162] EXT4-fs (loop4): orphan cleanup on readonly fs [ 93.448484][ T5174] tipc: Enabling of bearer rejected, already enabled [ 93.451931][ T5162] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 93.488728][ T5162] EXT4-fs (loop4): Remounting filesystem read-only [ 93.522211][ T5162] EXT4-fs (loop4): 1 truncate cleaned up [ 93.528535][ T4704] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 93.539318][ T4704] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 93.556848][ T4704] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 93.568394][ T5162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.583584][ T5162] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.676436][ T5176] vlan0: entered promiscuous mode [ 93.731984][ T5176] tipc: Enabling of bearer rejected, failed to enable media [ 93.783036][ T5189] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 93.809246][ T5189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.830729][ T5189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.857452][ T5189] bond0: (slave batadv0): making interface the new active one [ 93.866600][ T5189] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 93.921062][ T5191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.490'. [ 93.933859][ T5191] bond0 (unregistering): (slave batadv0): Releasing active interface [ 93.953578][ T5191] bond0 (unregistering): Released all slaves [ 94.110559][ T5198] netlink: 44 bytes leftover after parsing attributes in process `syz.1.492'. [ 94.135498][ T5201] sd 0:0:1:0: device reset [ 94.679994][ T5214] tipc: Enabling of bearer rejected, already enabled [ 94.701980][ T5217] tipc: Enabled bearer , priority 10 [ 94.766396][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 94.833733][ T5225] loop4: detected capacity change from 0 to 8192 [ 94.943078][ T5225] loop4: p1[EZD] p2 p4 [ 94.950157][ T5225] loop4: p1 start 150996992 is beyond EOD, truncated [ 94.958377][ T5233] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 94.968830][ T5233] syzkaller0: entered promiscuous mode [ 94.974411][ T5233] syzkaller0: entered allmulticast mode [ 94.984786][ T5225] loop4: p4 size 281856 extends beyond EOD, truncated [ 95.035428][ T5236] netlink: 'syz.0.505': attribute type 12 has an invalid length. [ 95.116870][ T3658] udevd[3658]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 95.127486][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 95.131557][ T5240] block device autoloading is deprecated and will be removed. [ 95.150673][ T5240] FAT-fs (loop1): unable to read boot sector [ 95.805123][ T5245] netlink: 44 bytes leftover after parsing attributes in process `syz.2.507'. [ 95.895920][ T3375] tipc: Node number set to 243099880 [ 95.977526][ T5254] sd 0:0:1:0: device reset [ 96.019620][ T5260] tipc: Enabling of bearer rejected, already enabled [ 96.054086][ T5255] team0: Mode changed to "random" [ 96.065054][ T5255] vlan0: entered promiscuous mode [ 96.080509][ T5255] tipc: Enabled bearer , priority 0 [ 96.103051][ T5268] loop0: detected capacity change from 0 to 164 [ 97.202917][ T5306] tipc: Enabling of bearer rejected, already enabled [ 97.274987][ T3375] tipc: Node number set to 4183008023 [ 97.294898][ T5314] tipc: Enabling of bearer rejected, already enabled [ 97.332557][ T5316] !yz!: rxe_newlink: already configured on team_slave_0 [ 97.445671][ T5320] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 97.480581][ T5320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.517906][ T5323] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 97.543541][ T5323] bond0: (slave batadv1): making interface the new active one [ 97.582255][ T5323] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 97.627635][ T5320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 97.674746][ T5320] bond0 (unregistering): (slave batadv1): Releasing active interface [ 97.686097][ T5320] bond0 (unregistering): Released all slaves [ 97.701596][ T5327] loop2: detected capacity change from 0 to 1024 [ 97.714028][ T5327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.771335][ T5327] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 97.780284][ T5327] System zones: 0-1, 3-12 [ 97.785506][ T5327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.801143][ T5327] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.536: bg 0: block 88: padding at end of block bitmap is not set [ 97.862945][ T5339] tipc: Enabled bearer , priority 10 [ 97.923291][ T5344] loop4: detected capacity change from 0 to 1024 [ 97.939520][ T5344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.942439][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.961623][ T5344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.979003][ T5344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.000055][ T5350] tipc: Enabling of bearer rejected, already enabled [ 98.202013][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.222773][ T5362] ALSA: seq fatal error: cannot create timer (-19) [ 98.320039][ T29] kauditd_printk_skb: 1472 callbacks suppressed [ 98.320059][ T29] audit: type=1400 audit(1759147977.024:4422): avc: denied { setcheckreqprot } for pid=5365 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 98.346985][ T29] audit: type=1326 audit(1759147977.033:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb37eceec9 code=0x7ffc0000 [ 98.370405][ T29] audit: type=1326 audit(1759147977.033:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb37eceec9 code=0x7ffc0000 [ 98.393741][ T29] audit: type=1326 audit(1759147977.033:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ffb37eceec9 code=0x7ffc0000 [ 98.417252][ T29] audit: type=1326 audit(1759147977.033:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb37eceec9 code=0x7ffc0000 [ 98.440899][ T29] audit: type=1326 audit(1759147977.033:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb37eceec9 code=0x7ffc0000 [ 98.464342][ T29] audit: type=1326 audit(1759147977.033:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb37eceec9 code=0x7ffc0000 [ 98.487875][ T29] audit: type=1326 audit(1759147977.033:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb37eceec9 code=0x7ffc0000 [ 98.511389][ T29] audit: type=1326 audit(1759147977.033:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb37eceec9 code=0x7ffc0000 [ 98.534716][ T29] audit: type=1326 audit(1759147977.033:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb37eceec9 code=0x7ffc0000 [ 98.915103][ T5357] netlink: 'syz.3.545': attribute type 4 has an invalid length. [ 99.066000][ T5378] tipc: Enabling of bearer rejected, already enabled [ 99.089716][ T5381] tipc: Enabling of bearer rejected, already enabled [ 99.161900][ T5382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 99.180273][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 99.192592][ T5386] tipc: Enabling of bearer rejected, already enabled [ 99.345049][ T5400] netlink: 'syz.0.558': attribute type 3 has an invalid length. [ 99.353184][ T5400] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.558'. [ 99.372567][ T5398] atomic_op ffff88810241b928 conn xmit_atomic 0000000000000000 [ 99.381832][ T5398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'. [ 99.392979][ T5402] loop2: detected capacity change from 0 to 512 [ 99.410753][ T5402] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.498346][ T5402] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.522206][ T5412] tipc: Enabling of bearer rejected, already enabled [ 99.535981][ T5402] EXT4-fs (loop2): 1 truncate cleaned up [ 99.542737][ T5402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.128499][ T5431] tipc: Enabling of bearer rejected, already enabled [ 100.148715][ T5432] loop0: detected capacity change from 0 to 1024 [ 100.155591][ T5432] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.189609][ T5432] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 100.202480][ T5432] System zones: 0-1, 3-12 [ 100.208885][ T5432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.230510][ T5422] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.565: bg 0: block 88: padding at end of block bitmap is not set [ 100.279777][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.306289][ T5444] tipc: Enabling of bearer rejected, already enabled [ 100.347113][ T5448] macvlan1: entered promiscuous mode [ 100.356949][ T5448] ipvlan0: entered promiscuous mode [ 100.369102][ T5448] ipvlan0: left promiscuous mode [ 100.377358][ T5448] macvlan1: left promiscuous mode [ 100.451665][ T5450] netlink: 'syz.3.571': attribute type 10 has an invalid length. [ 100.518474][ T5452] tipc: Enabling of bearer rejected, already enabled [ 101.046112][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.182365][ T5459] tipc: Enabling of bearer rejected, already enabled [ 101.754527][ T5474] tipc: Enabling of bearer rejected, already enabled [ 101.768998][ T5475] macvlan1: entered promiscuous mode [ 101.776472][ T5475] ipvlan0: entered promiscuous mode [ 101.782650][ T5475] ipvlan0: left promiscuous mode [ 101.790454][ T5475] macvlan1: left promiscuous mode [ 102.630490][ T5490] loop4: detected capacity change from 0 to 512 [ 102.640416][ T5494] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.647790][ T5494] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.680744][ T5490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.702640][ T5490] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.739991][ T5494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.760511][ T5502] loop2: detected capacity change from 0 to 512 [ 102.795973][ T5502] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 102.823609][ T4663] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.835136][ T4663] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.849842][ T4663] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.867278][ T4663] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.884996][ T5502] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.915396][ T5502] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.587: corrupted inode contents [ 102.974274][ T5502] EXT4-fs (loop2): Remounting filesystem read-only [ 102.996619][ T5502] EXT4-fs (loop2): 1 truncate cleaned up [ 103.007373][ T4704] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 103.018156][ T4704] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 103.057723][ T4704] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 103.076973][ T5506] loop1: detected capacity change from 0 to 512 [ 103.097540][ T5502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.117007][ T5506] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 103.128105][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.150467][ T5506] EXT4-fs (loop1): orphan cleanup on readonly fs [ 103.176792][ T5506] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.588: corrupted inode contents [ 103.195526][ T5518] tipc: Enabling of bearer rejected, already enabled [ 103.239621][ T5506] EXT4-fs (loop1): Remounting filesystem read-only [ 103.248045][ T5506] EXT4-fs (loop1): 1 truncate cleaned up [ 103.253966][ T4684] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 103.264723][ T4684] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 103.277327][ T4684] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 103.294951][ T5506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.308144][ T5506] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.416292][ T5532] loop4: detected capacity change from 0 to 512 [ 103.477928][ T5534] netlink: 'syz.0.596': attribute type 10 has an invalid length. [ 103.490473][ T5532] EXT4-fs: Ignoring removed nobh option [ 103.499817][ T5534] team0: Port device dummy0 added [ 103.514628][ T5532] EXT4-fs (loop4): orphan cleanup on readonly fs [ 103.521539][ T5532] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 103.538096][ T5532] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 103.555595][ T5532] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.597: attempt to clear invalid blocks 2 len 1 [ 103.907032][ T5534] netlink: 'syz.0.596': attribute type 10 has an invalid length. [ 103.916353][ T5532] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.597: invalid indirect mapped block 1819239214 (level 0) [ 103.954665][ T5534] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 104.036218][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.045992][ T5532] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.597: invalid indirect mapped block 1819239214 (level 1) [ 104.128081][ T5532] EXT4-fs (loop4): 1 truncate cleaned up [ 104.139633][ T5534] team0: Failed to send options change via netlink (err -105) [ 104.161651][ T5532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.203434][ T5534] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 104.386852][ T5532] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 104.406701][ T5532] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 104.429625][ T5532] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 104.443129][ T5534] team0: Port device dummy0 removed [ 104.471824][ T5534] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.554637][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.704470][ T29] kauditd_printk_skb: 571 callbacks suppressed [ 104.704548][ T29] audit: type=1400 audit(1759147983.058:4991): avc: denied { write } for pid=5547 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.754115][ T29] audit: type=1400 audit(1759147983.077:4992): avc: denied { read } for pid=5547 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.736041][ T5558] macvlan1: entered promiscuous mode [ 105.758376][ T5558] ipvlan0: entered promiscuous mode [ 105.766541][ T5564] netlink: 48 bytes leftover after parsing attributes in process `syz.2.608'. [ 105.777439][ T5558] ipvlan0: left promiscuous mode [ 105.782837][ T5558] macvlan1: left promiscuous mode [ 105.830695][ T5571] tipc: Enabling of bearer rejected, already enabled [ 105.880197][ T5572] macvlan1: entered promiscuous mode [ 105.886516][ T5572] ipvlan0: entered promiscuous mode [ 105.902370][ T5572] ipvlan0: left promiscuous mode [ 105.907486][ T5572] macvlan1: left promiscuous mode [ 106.180764][ T5577] macvlan1: entered promiscuous mode [ 106.197335][ T5577] ipvlan0: entered promiscuous mode [ 106.204955][ T5577] ipvlan0: left promiscuous mode [ 106.210870][ T5577] macvlan1: left promiscuous mode [ 106.248044][ T5581] netlink: 'syz.2.613': attribute type 10 has an invalid length. [ 106.258774][ T5579] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.280438][ T5581] $Hÿ: (slave dummy0): Releasing backup interface [ 106.291064][ T5581] dummy0: left promiscuous mode [ 106.304999][ T5584] netlink: 'syz.2.613': attribute type 10 has an invalid length. [ 106.316441][ T5581] team0: Failed to send options change via netlink (err -105) [ 106.324018][ T5581] team0: Port device dummy0 added [ 106.337309][ T5584] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 106.350950][ T5584] team0: Failed to send options change via netlink (err -105) [ 106.374538][ T5584] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 106.401395][ T5584] team0: Port device dummy0 removed [ 106.413888][ T5584] dummy0: entered promiscuous mode [ 106.421111][ T5584] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 106.599299][ T5579] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.927994][ T5588] loop0: detected capacity change from 0 to 512 [ 106.937784][ T5590] tipc: Enabling of bearer rejected, already enabled [ 106.954865][ T5579] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.977309][ T5588] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.032427][ T5588] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.078380][ T5588] EXT4-fs (loop0): 1 truncate cleaned up [ 107.099920][ T5579] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.116037][ T5588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.134824][ T5598] macvlan1: entered promiscuous mode [ 107.146259][ T5598] ipvlan0: entered promiscuous mode [ 107.153461][ T5598] ipvlan0: left promiscuous mode [ 107.158719][ T5598] macvlan1: left promiscuous mode [ 107.205895][ T4684] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.240175][ T4684] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.284954][ T4684] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.297730][ T5606] netlink: 80 bytes leftover after parsing attributes in process `syz.1.620'. [ 107.307182][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 107.331608][ T29] audit: type=1400 audit(1759147985.509:4993): avc: denied { create } for pid=5607 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.335204][ T4684] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.465472][ T5611] macvlan1: entered promiscuous mode [ 107.495517][ T5611] ipvlan0: entered promiscuous mode [ 107.504412][ T29] audit: type=1400 audit(1759147985.659:4994): avc: denied { bind } for pid=5607 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.536362][ T5611] ipvlan0: left promiscuous mode [ 107.554535][ T5611] macvlan1: left promiscuous mode [ 107.788021][ T5622] tipc: Enabled bearer , priority 0 [ 107.802666][ T5622] syzkaller0: entered promiscuous mode [ 107.808280][ T5622] syzkaller0: entered allmulticast mode [ 107.846215][ T5622] tipc: Resetting bearer [ 107.870637][ T5620] tipc: Resetting bearer [ 107.887302][ T5620] tipc: Disabling bearer [ 108.020254][ T5626] tipc: Enabling of bearer rejected, already enabled [ 108.029971][ T5626] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 108.038302][ T5626] tipc: Enabled bearer , priority 10 [ 108.111430][ T5615] ================================================================== [ 108.119677][ T5615] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 108.128174][ T5615] [ 108.130539][ T5615] write to 0xffff8881199686e4 of 4 bytes by task 5604 on cpu 1: [ 108.138191][ T5615] xas_set_mark+0x12b/0x140 [ 108.142826][ T5615] tag_pages_for_writeback+0xc2/0x290 [ 108.148394][ T5615] ext4_do_writepages+0x6b2/0x2750 [ 108.153532][ T5615] ext4_writepages+0x176/0x300 [ 108.158311][ T5615] do_writepages+0x1c3/0x310 [ 108.163004][ T5615] file_write_and_wait_range+0x156/0x2c0 [ 108.168673][ T5615] generic_buffers_fsync_noflush+0x45/0x120 [ 108.174686][ T5615] ext4_sync_file+0x1ab/0x690 [ 108.179372][ T5615] vfs_fsync_range+0x10a/0x130 [ 108.184157][ T5615] ext4_buffered_write_iter+0x34f/0x3c0 [ 108.189728][ T5615] ext4_file_write_iter+0xdbf/0xf00 [ 108.194957][ T5615] iter_file_splice_write+0x666/0xa60 [ 108.200464][ T5615] direct_splice_actor+0x156/0x2a0 [ 108.205670][ T5615] splice_direct_to_actor+0x312/0x680 [ 108.211061][ T5615] do_splice_direct+0xda/0x150 [ 108.216187][ T5615] do_sendfile+0x380/0x650 [ 108.220719][ T5615] __x64_sys_sendfile64+0x105/0x150 [ 108.226024][ T5615] x64_sys_call+0x2bb0/0x2ff0 [ 108.230720][ T5615] do_syscall_64+0xd2/0x200 [ 108.235244][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.241171][ T5615] [ 108.243503][ T5615] read to 0xffff8881199686e4 of 4 bytes by task 5615 on cpu 0: [ 108.251156][ T5615] filemap_write_and_wait_range+0xfc/0x340 [ 108.256988][ T5615] ext4_file_write_iter+0xe04/0xf00 [ 108.262213][ T5615] iter_file_splice_write+0x666/0xa60 [ 108.267598][ T5615] direct_splice_actor+0x156/0x2a0 [ 108.272718][ T5615] splice_direct_to_actor+0x312/0x680 [ 108.278099][ T5615] do_splice_direct+0xda/0x150 [ 108.282877][ T5615] do_sendfile+0x380/0x650 [ 108.287313][ T5615] __x64_sys_sendfile64+0x105/0x150 [ 108.292536][ T5615] x64_sys_call+0x2bb0/0x2ff0 [ 108.297229][ T5615] do_syscall_64+0xd2/0x200 [ 108.301756][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.307756][ T5615] [ 108.310099][ T5615] value changed: 0x02000021 -> 0x04000021 [ 108.315840][ T5615] [ 108.318164][ T5615] Reported by Kernel Concurrency Sanitizer on: [ 108.324325][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: syz.0.614 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 108.335533][ T5615] Tainted: [W]=WARN [ 108.339424][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 108.349495][ T5615] ================================================================== [ 108.470461][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.542557][ T5630] loop1: detected capacity change from 0 to 8192 [ 108.673301][ T29] audit: type=1400 audit(1759147986.763:4995): avc: denied { read } for pid=5629 comm="syz.1.626" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.696939][ T29] audit: type=1400 audit(1759147986.763:4996): avc: denied { open } for pid=5629 comm="syz.1.626" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1