last executing test programs: 30.554784378s ago: executing program 3 (id=418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x6071, 0x0, 0x1ff, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) 30.526782118s ago: executing program 3 (id=419): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 30.456774369s ago: executing program 3 (id=420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x6000040}, 0x804) 30.42415823s ago: executing program 3 (id=422): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b301a, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 30.406190611s ago: executing program 3 (id=424): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/uts\x00') sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x3c}}, 0x8000) 30.218665844s ago: executing program 3 (id=432): ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x9460, 0x2, 0x5}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 30.199752605s ago: executing program 32 (id=432): ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x9460, 0x2, 0x5}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 14.273017033s ago: executing program 1 (id=830): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/rpc\x00') fchdir(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) exit(0xffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 13.41309413s ago: executing program 1 (id=845): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4}, 0x19) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x5, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x81, 0x8, 0xfff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) 13.324822252s ago: executing program 1 (id=847): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000530401"], 0x28}, 0x1, 0x0, 0x0, 0x2404d}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x800, 0x4, 0x80, 0x2, 0x46b}, 0x4, 0x0, 0x9, 0x7, 0x7, 0x1, 0x2, 0x17, 0x7, 0x6, {0xa, 0x2, 0x3, 0xfffffffd, 0x5, 0xc}}}}]}, 0x78}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfff2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r9, 0x0, 0x3ffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r10, r9, 0x0, 0x7ffff000) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}) 12.427496229s ago: executing program 1 (id=866): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 12.39408586s ago: executing program 1 (id=867): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x200, 0x1000, 0xd6e}}) 12.186055493s ago: executing program 1 (id=869): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x190, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8}, 0x10) shutdown(r1, 0x1) 12.176574124s ago: executing program 33 (id=869): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x190, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8}, 0x10) shutdown(r1, 0x1) 6.431890265s ago: executing program 6 (id=1025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) close(r3) 6.378341026s ago: executing program 6 (id=1029): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000e20f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 6.252259829s ago: executing program 6 (id=1035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa56}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0xd, 0x0, 0x480c5}, 0x80d4) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 6.250974759s ago: executing program 6 (id=1037): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x200000, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4010) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 6.18268744s ago: executing program 6 (id=1040): r0 = socket(0x10, 0x80003, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) fcntl$setlease(r4, 0x400, 0x0) close_range(r0, 0xffffffffffffffff, 0x1000000000000000) 5.382524626s ago: executing program 6 (id=1080): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 5.382401916s ago: executing program 34 (id=1080): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 1.863707134s ago: executing program 5 (id=1152): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.826664764s ago: executing program 0 (id=1153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xc7f}, 0x18) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 1.788358325s ago: executing program 0 (id=1155): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000540), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 1.54993586s ago: executing program 0 (id=1157): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480), 0x0) 1.417558842s ago: executing program 5 (id=1159): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000380)='./file0\x00', 0x2000044) 1.399795123s ago: executing program 0 (id=1160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2c020400) r2 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r2, 0x8ba, 0x696d, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) 1.378854353s ago: executing program 5 (id=1161): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x8000002}, 0x18) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) read$eventfd(r3, 0x0, 0x0) 1.282476195s ago: executing program 5 (id=1162): r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x4000}, 0x0) 1.219835206s ago: executing program 5 (id=1163): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x30, 0x0, 0x1ee, 0x2, 0x0, 0x7ff, 0x0, 0x1, {0x1}}) io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x0) 1.205799616s ago: executing program 7 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0x53, 0x0) write$binfmt_script(r4, &(0x7f0000000580)={'#! ', './file0'}, 0xb) tee(r3, r2, 0x9, 0x8) 1.123820018s ago: executing program 7 (id=1165): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) getcwd(&(0x7f0000000280)=""/198, 0xc6) 1.058927789s ago: executing program 2 (id=1166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000040), &(0x7f00000005c0)=r1}, 0x20) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 1.0467343s ago: executing program 7 (id=1167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 1.0054324s ago: executing program 2 (id=1168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 946.991692ms ago: executing program 2 (id=1169): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r3 = inotify_init() read(r3, 0x0, 0x0) close(r0) 941.717311ms ago: executing program 7 (id=1171): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9fffe316844268cb89e14f086dd47e0ffff26123a03631177fbac141416e000030a440a9f03fe80000000000000000000000000002e01070b038da188fe25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2800000}, 0x2c) 870.540203ms ago: executing program 0 (id=1172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 870.041213ms ago: executing program 7 (id=1174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team0\x00', 0x10) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x2) 869.690173ms ago: executing program 0 (id=1175): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x1000000000000000) fcntl$setpipe(r1, 0x407, 0x100004) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 857.568923ms ago: executing program 7 (id=1176): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000530401"], 0x28}, 0x1, 0x0, 0x0, 0x2404d}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x800, 0x4, 0x80, 0x2, 0x46b}, 0x4, 0x0, 0x9, 0x7, 0x7, 0x1, 0x2, 0x17, 0x7, 0x6, {0xa, 0x2, 0x3, 0xfffffffd, 0x5, 0xc}}}}]}, 0x78}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfff2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r9, 0x0, 0x3ffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r10, r9, 0x0, 0x7ffff000) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x5, 0x3, 0x10, 0x3}, {0x6e81, 0xc, 0x9, 0x5}, {0x6, 0x5, 0x7, 0x8}, {0x4, 0x76, 0x7, 0x9}]}) 856.895163ms ago: executing program 5 (id=1178): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 796.218254ms ago: executing program 4 (id=1179): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03000000000000000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 795.855784ms ago: executing program 4 (id=1180): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) close_range(r0, 0xffffffffffffffff, 0x0) 698.454006ms ago: executing program 4 (id=1181): bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 698.299426ms ago: executing program 4 (id=1182): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200800000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 661.959827ms ago: executing program 4 (id=1183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x1ffffffffffffffd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 595.345478ms ago: executing program 4 (id=1184): r0 = socket(0x1e, 0x2, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 117.297298ms ago: executing program 2 (id=1185): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000e4ffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0xfffffffffffffe7f, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) 22.44622ms ago: executing program 2 (id=1186): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 0s ago: executing program 2 (id=1187): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) kernel console output (not intermixed with test programs): file. Priority:0 extents:1 across:124996k [ 27.471457][ T29] audit: type=1400 audit(1758693438.213:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.503333][ T29] audit: type=1400 audit(1758693438.263:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.154615][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.180791][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 29.279117][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.293881][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.300980][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.308200][ T3304] bridge_slave_0: entered allmulticast mode [ 29.314463][ T3304] bridge_slave_0: entered promiscuous mode [ 29.321003][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.328114][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.335194][ T3303] bridge_slave_0: entered allmulticast mode [ 29.341637][ T3303] bridge_slave_0: entered promiscuous mode [ 29.348147][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.355196][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.362351][ T3303] bridge_slave_1: entered allmulticast mode [ 29.368859][ T3303] bridge_slave_1: entered promiscuous mode [ 29.388067][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.395184][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.402306][ T3304] bridge_slave_1: entered allmulticast mode [ 29.408738][ T3304] bridge_slave_1: entered promiscuous mode [ 29.421899][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.441385][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 29.450733][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.471937][ T3303] team0: Port device team_slave_0 added [ 29.485379][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.496986][ T3303] team0: Port device team_slave_1 added [ 29.515950][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.539341][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.546808][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.572854][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.597251][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.604217][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.630118][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.641589][ T3304] team0: Port device team_slave_0 added [ 29.652328][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.659497][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.666630][ T3308] bridge_slave_0: entered allmulticast mode [ 29.672986][ T3308] bridge_slave_0: entered promiscuous mode [ 29.685164][ T3304] team0: Port device team_slave_1 added [ 29.700673][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.707851][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.714976][ T3308] bridge_slave_1: entered allmulticast mode [ 29.721421][ T3308] bridge_slave_1: entered promiscuous mode [ 29.741427][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.748465][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.774402][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.803017][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.809995][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.835922][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.852121][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.863467][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.870561][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.877671][ T3306] bridge_slave_0: entered allmulticast mode [ 29.883988][ T3306] bridge_slave_0: entered promiscuous mode [ 29.890598][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.897658][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.904885][ T3306] bridge_slave_1: entered allmulticast mode [ 29.911364][ T3306] bridge_slave_1: entered promiscuous mode [ 29.919735][ T3303] hsr_slave_0: entered promiscuous mode [ 29.925569][ T3303] hsr_slave_1: entered promiscuous mode [ 29.941279][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.972669][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 29.988851][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.008479][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.026997][ T3308] team0: Port device team_slave_0 added [ 30.035720][ T3308] team0: Port device team_slave_1 added [ 30.050242][ T3304] hsr_slave_0: entered promiscuous mode [ 30.056188][ T3304] hsr_slave_1: entered promiscuous mode [ 30.062276][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 30.068032][ T3304] Cannot create hsr debugfs directory [ 30.085321][ T3306] team0: Port device team_slave_0 added [ 30.091896][ T3306] team0: Port device team_slave_1 added [ 30.115788][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.122768][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.148719][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.159860][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.166802][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.192775][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.232730][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.239760][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.265700][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.276797][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.283768][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.309704][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.354984][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.362090][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.369304][ T3310] bridge_slave_0: entered allmulticast mode [ 30.375645][ T3310] bridge_slave_0: entered promiscuous mode [ 30.388563][ T3306] hsr_slave_0: entered promiscuous mode [ 30.394662][ T3306] hsr_slave_1: entered promiscuous mode [ 30.400569][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 30.406286][ T3306] Cannot create hsr debugfs directory [ 30.422826][ T3308] hsr_slave_0: entered promiscuous mode [ 30.428780][ T3308] hsr_slave_1: entered promiscuous mode [ 30.434472][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 30.440223][ T3308] Cannot create hsr debugfs directory [ 30.446308][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.453464][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.460673][ T3310] bridge_slave_1: entered allmulticast mode [ 30.467165][ T3310] bridge_slave_1: entered promiscuous mode [ 30.507008][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.523976][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.572825][ T3310] team0: Port device team_slave_0 added [ 30.578529][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.589375][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.603161][ T3310] team0: Port device team_slave_1 added [ 30.611388][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.629151][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.660069][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.667080][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.693033][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.711767][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.718753][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.744674][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.776576][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.794529][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.802907][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.811839][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.828995][ T3310] hsr_slave_0: entered promiscuous mode [ 30.834944][ T3310] hsr_slave_1: entered promiscuous mode [ 30.840875][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 30.846596][ T3310] Cannot create hsr debugfs directory [ 30.885793][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.894709][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.907425][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.923564][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.968409][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.982410][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.991773][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.001314][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.038929][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.051627][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.062763][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.077471][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.084522][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.093035][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.102798][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.112169][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.129580][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.136792][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.168796][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.187410][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.201729][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.213270][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.232201][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.244666][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.251783][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.261789][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.275489][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.282551][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.302085][ T2548] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.309164][ T2548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.319657][ T2548] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.326715][ T2548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.335355][ T2548] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.342393][ T2548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.351085][ T2548] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.358162][ T2548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.379420][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.432497][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.442651][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.457410][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.464528][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.506246][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.513331][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.532785][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.561010][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.571458][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.616663][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.645697][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.671446][ T3303] veth0_vlan: entered promiscuous mode [ 31.684294][ T3303] veth1_vlan: entered promiscuous mode [ 31.706991][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.735718][ T3303] veth0_macvtap: entered promiscuous mode [ 31.749001][ T3303] veth1_macvtap: entered promiscuous mode [ 31.793958][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.806452][ T3304] veth0_vlan: entered promiscuous mode [ 31.814000][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.824457][ T3304] veth1_vlan: entered promiscuous mode [ 31.856742][ T3306] veth0_vlan: entered promiscuous mode [ 31.864661][ T3304] veth0_macvtap: entered promiscuous mode [ 31.881217][ T377] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.894481][ T3308] veth0_vlan: entered promiscuous mode [ 31.901117][ T3304] veth1_macvtap: entered promiscuous mode [ 31.907528][ T3306] veth1_vlan: entered promiscuous mode [ 31.915591][ T377] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.924590][ T377] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.934828][ T377] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949346][ T3308] veth1_vlan: entered promiscuous mode [ 31.966000][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.976890][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.985086][ T3310] veth0_vlan: entered promiscuous mode [ 32.000990][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.018977][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.030072][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.033016][ T3310] veth1_vlan: entered promiscuous mode [ 32.052603][ T3308] veth0_macvtap: entered promiscuous mode [ 32.059058][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.068628][ T3308] veth1_macvtap: entered promiscuous mode [ 32.077824][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 32.077846][ T29] audit: type=1400 audit(1758693442.933:90): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.107997][ T29] audit: type=1400 audit(1758693442.933:91): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.132046][ T29] audit: type=1400 audit(1758693442.933:92): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.158541][ T29] audit: type=1400 audit(1758693442.943:93): avc: denied { prog_load } for pid=3471 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.177269][ T29] audit: type=1400 audit(1758693442.943:94): avc: denied { bpf } for pid=3471 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.197507][ T29] audit: type=1400 audit(1758693442.943:95): avc: denied { perfmon } for pid=3471 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.218066][ T29] audit: type=1400 audit(1758693442.943:96): avc: denied { prog_run } for pid=3471 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.239382][ T3306] veth0_macvtap: entered promiscuous mode [ 32.246854][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.258365][ T3473] tipc: Started in network mode [ 32.263221][ T3473] tipc: Node identity 5a7172c4a616, cluster identity 4711 [ 32.270468][ T3473] tipc: Enabled bearer , priority 0 [ 32.282491][ T3306] veth1_macvtap: entered promiscuous mode [ 32.291700][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.299529][ T3472] tipc: Disabling bearer [ 32.315311][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.327516][ T367] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.348979][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.365256][ T29] audit: type=1400 audit(1758693443.223:97): avc: denied { map_create } for pid=3475 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.384061][ T29] audit: type=1400 audit(1758693443.223:98): avc: denied { map_read map_write } for pid=3475 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.418954][ T3310] veth0_macvtap: entered promiscuous mode [ 32.426100][ T3310] veth1_macvtap: entered promiscuous mode [ 32.436450][ T367] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.445199][ T29] audit: type=1400 audit(1758693443.273:99): avc: denied { allowed } for pid=3477 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 32.448532][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.474288][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.485785][ T367] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.497065][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.505805][ T367] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.527098][ T2548] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.554087][ T2548] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.575770][ T2548] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.595115][ T2548] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.605491][ T2548] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.628399][ T2548] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.639281][ T2548] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.681377][ T2548] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.728497][ T3494] loop2: detected capacity change from 0 to 256 [ 32.746740][ T3494] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9'. [ 32.905261][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.912568][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.994942][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.010552][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.034637][ T3522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18'. [ 33.088370][ T41] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.117320][ T3526] loop3: detected capacity change from 0 to 1024 [ 33.128157][ T41] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.139889][ T3526] ======================================================= [ 33.139889][ T3526] WARNING: The mand mount option has been deprecated and [ 33.139889][ T3526] and is ignored by this kernel. Remove the mand [ 33.139889][ T3526] option from the mount to silence this warning. [ 33.139889][ T3526] ======================================================= [ 33.148176][ T41] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.200548][ T3528] netlink: 3 bytes leftover after parsing attributes in process `syz.4.22'. [ 33.219820][ T3528] batadv1: entered promiscuous mode [ 33.225041][ T3528] batadv1: entered allmulticast mode [ 33.233073][ T41] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.245745][ T3526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.258244][ T3526] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.273855][ T3533] smc: net device bond0 applied user defined pnetid SYZ0 [ 33.283522][ T3533] smc: net device bond0 erased user defined pnetid SYZ0 [ 33.304942][ T3526] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.21: lblock 3 mapped to illegal pblock 3 (length 1) [ 33.327553][ T3526] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 33.339932][ T3526] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.339932][ T3526] [ 33.404746][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.423092][ T3544] syz.0.25 uses obsolete (PF_INET,SOCK_PACKET) [ 33.599374][ T3559] SELinux: failed to load policy [ 33.704660][ T3567] loop4: detected capacity change from 0 to 128 [ 33.757398][ T3567] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.770784][ T3567] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.825606][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.991168][ T3572] loop4: detected capacity change from 0 to 2048 [ 34.031427][ T3572] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.088880][ T3563] loop2: detected capacity change from 0 to 32768 [ 34.097055][ T3304] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 34.119385][ T3294] loop2: p1 p3 < > [ 34.178368][ T3563] loop2: p1 p3 < > [ 34.268033][ T3579] loop1: detected capacity change from 0 to 764 [ 34.294749][ T3579] rock: directory entry would overflow storage [ 34.301005][ T3579] rock: sig=0x4f50, size=4, remaining=3 [ 34.306629][ T3579] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 34.319742][ T3579] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 34.356691][ T3582] netlink: 4380 bytes leftover after parsing attributes in process `syz.4.43'. [ 34.396262][ T3582] netlink: 4380 bytes leftover after parsing attributes in process `syz.4.43'. [ 34.465493][ T3584] loop1: detected capacity change from 0 to 2048 [ 34.509484][ T3584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.532088][ T3563] syz.2.32 (3563) used greatest stack depth: 10056 bytes left [ 34.545097][ T3584] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.44: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 34.567817][ T3584] EXT4-fs (loop1): Remounting filesystem read-only [ 34.585540][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.586448][ T3598] loop4: detected capacity change from 0 to 164 [ 34.602256][ T3596] SELinux: failed to load policy [ 34.755264][ T3553] syz.2.32 (3553) used greatest stack depth: 7320 bytes left [ 34.843858][ T3616] loop2: detected capacity change from 0 to 128 [ 34.921220][ T3619] loop3: detected capacity change from 0 to 512 [ 34.951127][ T3619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.991054][ T3628] loop4: detected capacity change from 0 to 128 [ 35.032431][ T3628] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.084718][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.210130][ T3646] loop0: detected capacity change from 0 to 128 [ 35.229873][ T3648] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 35.248428][ T3646] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.262999][ T3653] loop9: detected capacity change from 0 to 7 [ 35.270408][ T3651] loop3: detected capacity change from 0 to 512 [ 35.272196][ T3653] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.284786][ T3653] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.292712][ T3653] loop9: unable to read partition table [ 35.301974][ T3653] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 35.301974][ T3653] ) failed (rc=-5) [ 35.316159][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.326783][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.328774][ T3651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.334853][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.358790][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.366431][ T3646] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.366887][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.415817][ T3651] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.540732][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.551648][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.601230][ T3673] smc: net device bond0 applied user defined pnetid SYZ0 [ 35.623590][ T3673] smc: net device bond0 erased user defined pnetid SYZ0 [ 35.883411][ T3681] loop1: detected capacity change from 0 to 128 [ 36.215314][ T3705] netlink: 'syz.1.94': attribute type 10 has an invalid length. [ 36.276273][ T3709] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 36.320241][ T3705] team0: Device hsr_slave_0 failed to register rx_handler [ 36.366550][ T3714] loop2: detected capacity change from 0 to 1024 [ 36.428301][ T3714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.499638][ T3714] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.98: Allocating blocks 449-513 which overlap fs metadata [ 36.572434][ T3713] EXT4-fs (loop2): pa ffff88810734c0e0: logic 48, phys. 177, len 21 [ 36.580492][ T3713] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 36.645904][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.703131][ T3735] veth1_to_bond: entered allmulticast mode [ 36.709504][ T3735] veth1_to_bond: left allmulticast mode [ 37.117905][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 37.117921][ T29] audit: type=1400 audit(1758693447.973:224): avc: denied { read } for pid=3743 comm="syz.0.110" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.188395][ T29] audit: type=1400 audit(1758693447.983:225): avc: denied { open } for pid=3743 comm="syz.0.110" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.211734][ T29] audit: type=1400 audit(1758693447.983:226): avc: denied { ioctl } for pid=3743 comm="syz.0.110" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.292271][ T29] audit: type=1400 audit(1758693448.153:227): avc: denied { module_request } for pid=3749 comm="syz.1.111" kmod="snd-timer-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.324586][ T3752] loop2: detected capacity change from 0 to 2048 [ 37.331843][ T29] audit: type=1400 audit(1758693448.173:228): avc: denied { create } for pid=3751 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.338104][ T3750] ALSA: seq fatal error: cannot create timer (-19) [ 37.369415][ T3752] loop2: p4 < > [ 37.373108][ T29] audit: type=1400 audit(1758693448.233:229): avc: denied { write } for pid=3754 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.376446][ T3755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 37.393442][ T29] audit: type=1400 audit(1758693448.233:230): avc: denied { read } for pid=3754 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.474191][ T3757] loop4: detected capacity change from 0 to 1024 [ 37.504482][ T29] audit: type=1400 audit(1758693448.363:231): avc: denied { mount } for pid=3760 comm="syz.2.116" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 37.541316][ T3757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.556950][ T29] audit: type=1400 audit(1758693448.403:232): avc: denied { open } for pid=3764 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.561774][ T3766] loop0: detected capacity change from 0 to 512 [ 37.576197][ T29] audit: type=1400 audit(1758693448.403:233): avc: denied { kernel } for pid=3764 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.623081][ T3757] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.114: Allocating blocks 449-513 which overlap fs metadata [ 37.644943][ T3766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.674400][ T3756] EXT4-fs (loop4): pa ffff8881071ca540: logic 48, phys. 177, len 21 [ 37.682468][ T3756] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 37.717069][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.824927][ T3791] loop4: detected capacity change from 0 to 512 [ 37.848814][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.860078][ T3791] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.873177][ T3791] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.910924][ T3796] loop0: detected capacity change from 0 to 512 [ 37.919121][ T3791] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.128: invalid indirect mapped block 4294967295 (level 0) [ 37.934188][ T3796] EXT4-fs: Ignoring removed i_version option [ 37.942179][ T3791] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.128: invalid indirect mapped block 4294967295 (level 1) [ 37.971350][ T3796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.989719][ T3791] EXT4-fs (loop4): 1 orphan inode deleted [ 37.995486][ T3791] EXT4-fs (loop4): 1 truncate cleaned up [ 38.009042][ T3791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.101724][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.234949][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.282326][ T3818] random: crng reseeded on system resumption [ 38.712017][ T3863] vcan0: tx drop: invalid sa for name 0x0000000000000007 [ 38.741331][ T3866] loop0: detected capacity change from 0 to 512 [ 38.795720][ T3866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.820647][ T3881] loop4: detected capacity change from 0 to 1024 [ 38.830816][ T3881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.835014][ T3866] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.840510][ T3881] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.876031][ T3881] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 38.897513][ T3888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 38.907565][ T3881] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.168: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.921117][ T3866] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.161: corrupted xattr block 19: overlapping e_value [ 38.942987][ T3866] EXT4-fs (loop0): Remounting filesystem read-only [ 38.949641][ T3866] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 38.953101][ T3881] EXT4-fs (loop4): Remounting filesystem read-only [ 38.965294][ T3881] EXT4-fs (loop4): 1 orphan inode deleted [ 38.974019][ T3881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.986737][ T41] EXT4-fs (loop4): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 39.000632][ T3866] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 39.010784][ T3892] loop2: detected capacity change from 0 to 764 [ 39.020646][ T3881] ext4: Unknown parameter 'Òê……Ågç.\>?±·þÿƒióJ÷X#dé©üÿa›é+ÒÏEÄΈø¬2ROOœ¾P):x' [ 39.030820][ T3894] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.054855][ T3892] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 39.063632][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.094703][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.128674][ T3896] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 39.137904][ T3896] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 39.164436][ T3902] bridge0: entered promiscuous mode [ 39.174368][ T3902] macvtap1: entered allmulticast mode [ 39.179866][ T3902] bridge0: entered allmulticast mode [ 39.189315][ T3906] loop0: detected capacity change from 0 to 512 [ 39.196237][ T3906] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.207155][ T3902] bridge0: port 3(macvtap1) entered blocking state [ 39.213897][ T3902] bridge0: port 3(macvtap1) entered disabled state [ 39.225129][ T3902] bridge0: left allmulticast mode [ 39.230372][ T3902] bridge0: left promiscuous mode [ 39.231388][ T3906] EXT4-fs error (device loop0): ext4_init_orphan_info:611: comm syz.0.179: orphan file block 0: bad magic [ 39.256566][ T3906] EXT4-fs (loop0): Remounting filesystem read-only [ 39.264354][ T3911] Zero length message leads to an empty skb [ 39.271553][ T3906] EXT4-fs (loop0): mount failed [ 39.345551][ T3914] loop3: detected capacity change from 0 to 2048 [ 39.388851][ T377] syzkaller0: tun_net_xmit 76 [ 39.393639][ T377] syzkaller0: tun_net_xmit 48 [ 39.399412][ T3914] loop3: p1 < > p4 [ 39.404208][ T3921] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 39.410077][ T3921] syzkaller0: Linktype set failed because interface is up [ 39.427874][ T36] syzkaller0: tun_net_xmit 76 [ 39.458673][ T3914] loop3: p4 size 8388608 extends beyond EOD, truncated [ 39.498514][ T3923] loop0: detected capacity change from 0 to 2048 [ 39.511851][ T3923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.513528][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.531331][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.538808][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.546208][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.553636][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 39.561051][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.568488][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.575877][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.583316][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.590821][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.617042][ T3367] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 39.959554][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.979180][ T3946] loop1: detected capacity change from 0 to 512 [ 39.986905][ T3931] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 39.986905][ T3931] program syz.3.188 not setting count and/or reply_len properly [ 39.989504][ T3946] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c11c, mo2=0002] [ 40.013381][ T3946] EXT4-fs (loop1): orphan cleanup on readonly fs [ 40.020900][ T3946] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 40.037974][ T3946] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 40.045429][ T3946] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #13: comm syz.1.194: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 40.076067][ T3946] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.194: couldn't read orphan inode 13 (err -117) [ 40.097712][ T3946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.136008][ T3946] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.194: deleted inode referenced: 12 [ 40.159646][ T3946] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.194: deleted inode referenced: 12 [ 40.216970][ T3964] loop2: detected capacity change from 0 to 512 [ 40.220372][ T3966] loop3: detected capacity change from 0 to 1024 [ 40.225128][ T3964] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.231141][ T3966] EXT4-fs: Ignoring removed bh option [ 40.242173][ T3964] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.258485][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.269180][ T3966] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 40.271755][ T3964] EXT4-fs (loop2): 1 truncate cleaned up [ 40.286526][ T3964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.304024][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.304769][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.313683][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.321697][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.329371][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.336962][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.344588][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.352260][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.361004][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.361161][ T3966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.368742][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.388923][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.396414][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.404119][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.411796][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.419417][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.426909][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.434583][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.442640][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.450208][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.457885][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.465413][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.466301][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.472928][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.489414][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.496926][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.504513][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.512046][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.525424][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.527832][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.555083][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.563593][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.571786][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.580254][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.588825][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.596388][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.610204][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.619514][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.632930][ T3981] hub 9-0:1.0: USB hub found [ 40.646752][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.646783][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.655741][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.674169][ T3981] hub 9-0:1.0: 8 ports detected [ 40.692897][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.692928][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.702798][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.713678][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.730840][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.749851][ T3992] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.213'. [ 40.769621][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.769656][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.777217][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.795665][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.813255][ T3971] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 40.821593][ T3996] loop4: detected capacity change from 0 to 512 [ 40.859454][ T3996] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.882800][ T3998] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 40.927592][ T3996] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 40.953917][ T4000] SELinux: ebitmap: truncated map [ 40.960381][ T3996] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.215: bg 0: block 248: padding at end of block bitmap is not set [ 40.975413][ T4000] SELinux: failed to load policy [ 41.039419][ T3996] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.215: Failed to acquire dquot type 1 [ 41.056616][ T4020] loop2: detected capacity change from 0 to 512 [ 41.071638][ T4020] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.085051][ T3996] EXT4-fs (loop4): 1 truncate cleaned up [ 41.096046][ T3996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 41.112066][ T4020] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 41.225195][ T3306] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 41.311092][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 41.381825][ T4033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.230'. [ 41.412305][ T4037] loop4: detected capacity change from 0 to 164 [ 41.474384][ T4043] loop3: detected capacity change from 0 to 1024 [ 41.503539][ T4047] loop2: detected capacity change from 0 to 1024 [ 41.510839][ T4047] EXT4-fs: Ignoring removed bh option [ 41.518735][ T4047] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 41.574505][ T4047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.620628][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.749332][ T4075] loop4: detected capacity change from 0 to 256 [ 41.783354][ T4075] msdos: Unknown parameter '¨Y¡¬3Gg¿‘' [ 41.794021][ T4075] program syz.4.248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.936336][ T4104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 41.951347][ T367] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.960192][ T367] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.969014][ T4104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 41.982533][ T4109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 41.991567][ T367] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.005334][ T367] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.032026][ T4111] loop2: detected capacity change from 0 to 1024 [ 42.047102][ T4114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 42.058235][ T4111] EXT4-fs: Ignoring removed orlov option [ 42.063943][ T4111] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.077235][ T4118] loop0: detected capacity change from 0 to 1024 [ 42.093788][ T4111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.107507][ T4118] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.267: Failed to acquire dquot type 0 [ 42.119497][ T4118] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 42.136089][ T4118] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.267: corrupted inode contents [ 42.149189][ T4118] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.267: mark_inode_dirty error [ 42.172387][ T4118] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.267: corrupted inode contents [ 42.172775][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.184377][ T4118] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.267: mark_inode_dirty error [ 42.204509][ T4118] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.267: corrupted inode contents [ 42.216627][ T4118] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 42.245633][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 42.245648][ T29] audit: type=1400 audit(1758693453.103:338): avc: denied { read } for pid=4124 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.272332][ T4118] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.267: corrupted inode contents [ 42.284544][ T4118] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.267: mark_inode_dirty error [ 42.296901][ T4118] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 42.306401][ T4118] EXT4-fs (loop0): 1 truncate cleaned up [ 42.313678][ T4118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.379590][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.398493][ T4133] loop0: detected capacity change from 0 to 164 [ 42.699309][ T29] audit: type=1400 audit(1758693453.563:339): avc: denied { setopt } for pid=4137 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 43.017750][ T4147] loop1: detected capacity change from 0 to 1024 [ 43.024754][ T4147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.040015][ T4147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.063596][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.078797][ T29] audit: type=1400 audit(1758693453.943:340): avc: denied { create } for pid=4150 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 43.116886][ T29] audit: type=1400 audit(1758693453.973:341): avc: denied { read } for pid=4152 comm="syz.2.279" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.158928][ T4151] loop1: detected capacity change from 0 to 8192 [ 43.167054][ T29] audit: type=1400 audit(1758693454.023:342): avc: denied { mount } for pid=4150 comm="syz.1.278" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.194579][ T4151] syz.1.278: attempt to access beyond end of device [ 43.194579][ T4151] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 43.209502][ T4151] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 43.217341][ T4151] FAT-fs (loop1): Filesystem has been set read-only [ 43.230095][ T41] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 43.233571][ T29] audit: type=1400 audit(1758693454.093:343): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.441052][ T36] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 43.464894][ T4181] loop0: detected capacity change from 0 to 256 [ 43.471539][ T4181] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.484291][ T4181] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.062140][ T4194] loop4: detected capacity change from 0 to 128 [ 44.078468][ T4194] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.108316][ T4194] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.143496][ T41] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.329700][ T29] audit: type=1400 audit(1758693455.183:344): avc: denied { getopt } for pid=4199 comm="syz.4.297" laddr=::ffff:127.0.0.1 lport=46008 faddr=::ffff:127.0.0.1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.431276][ T4208] loop0: detected capacity change from 0 to 128 [ 44.446824][ T4208] syz.0.300: attempt to access beyond end of device [ 44.446824][ T4208] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 44.526545][ T4212] capability: warning: `syz.3.302' uses deprecated v2 capabilities in a way that may be insecure [ 44.541043][ T4210] loop0: detected capacity change from 0 to 2048 [ 44.573968][ T4210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.758804][ T29] audit: type=1400 audit(1758693455.463:345): avc: denied { setattr } for pid=4209 comm="syz.0.301" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.800053][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.830722][ T29] audit: type=1400 audit(1758693455.693:346): avc: denied { relabelfrom } for pid=4215 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 44.870622][ T4220] loop2: detected capacity change from 0 to 1024 [ 44.877456][ T4220] EXT4-fs: Ignoring removed orlov option [ 44.883183][ T4220] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.892140][ T29] audit: type=1400 audit(1758693455.693:347): avc: denied { relabelto } for pid=4215 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 44.971255][ T4222] sd 0:0:1:0: device reset [ 44.981272][ T4220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.070609][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.286362][ T4245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.314'. [ 45.313454][ T4245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 45.359464][ T4249] loop9: detected capacity change from 0 to 7 [ 45.365753][ T4249] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.378885][ T4249] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.386763][ T4249] loop9: unable to read partition table [ 45.400687][ T4249] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 45.400687][ T4249] ) failed (rc=-5) [ 45.450432][ T4255] loop2: detected capacity change from 0 to 512 [ 45.472430][ T4255] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.485279][ T4255] EXT4-fs (loop2): 1 truncate cleaned up [ 45.491851][ T4255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.539038][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.621297][ T4267] loop2: detected capacity change from 0 to 512 [ 45.651761][ T4267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 45.677365][ T4267] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.730329][ T4267] EXT4-fs (loop2): shut down requested (1) [ 45.746172][ T4267] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 45.764221][ T4275] SELinux: ebitmap: truncated map [ 45.784211][ T4275] SELinux: failed to load policy [ 45.829055][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 45.873907][ T4283] loop0: detected capacity change from 0 to 1024 [ 45.915818][ T4283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.957558][ T4283] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.330: Allocating blocks 449-513 which overlap fs metadata [ 46.061646][ T4282] EXT4-fs (loop0): pa ffff88810734c070: logic 48, phys. 177, len 21 [ 46.069732][ T4282] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 46.134303][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.254608][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a3a2a00: rx timeout, send abort [ 46.262897][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a3a2a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 46.304630][ T4317] loop3: detected capacity change from 0 to 2048 [ 46.369842][ T4317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.395676][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.563120][ T4332] loop1: detected capacity change from 0 to 512 [ 46.593198][ T4332] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.626790][ T4332] EXT4-fs (loop1): 1 truncate cleaned up [ 46.634087][ T4332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.675603][ T4356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 46.698885][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.940740][ T4388] loop4: detected capacity change from 0 to 128 [ 46.969266][ T4388] syz.4.357: attempt to access beyond end of device [ 46.969266][ T4388] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 47.143887][ T4404] loop2: detected capacity change from 0 to 1024 [ 47.164079][ T4404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.200227][ T4404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.277282][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.290704][ T4418] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.371'. [ 47.317631][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 47.317654][ T29] audit: type=1400 audit(1758693458.173:403): avc: denied { create } for pid=4421 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 47.419456][ T4437] sd 0:0:1:0: device reset [ 47.424068][ T29] audit: type=1400 audit(1758693458.283:404): avc: denied { sys_module } for pid=4431 comm="syz.4.376" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.471130][ T4439] loop2: detected capacity change from 0 to 512 [ 47.490616][ T29] audit: type=1400 audit(1758693458.353:405): avc: denied { mounton } for pid=4438 comm="syz.2.381" path="/91/bus" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.514707][ T4439] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.529134][ T4439] EXT4-fs (loop2): 1 truncate cleaned up [ 47.535266][ T4439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.551057][ T4439] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.604762][ T29] audit: type=1400 audit(1758693458.463:406): avc: denied { bind } for pid=4451 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.662062][ T29] audit: type=1400 audit(1758693458.523:407): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 47.690306][ T4454] vhci_hcd: invalid port number 96 [ 47.695497][ T4454] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 47.704052][ T29] audit: type=1400 audit(1758693458.553:408): avc: denied { map } for pid=4453 comm="syz.1.387" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.750028][ C0] hrtimer: interrupt took 46080 ns [ 47.774000][ T29] audit: type=1400 audit(1758693458.603:409): avc: denied { mount } for pid=4455 comm="syz.4.388" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 47.796189][ T29] audit: type=1400 audit(1758693458.603:410): avc: denied { cpu } for pid=4457 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 47.821891][ T4460] loop2: detected capacity change from 0 to 512 [ 47.847654][ T4469] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 47.854221][ T4469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.861845][ T4469] vhci_hcd vhci_hcd.0: Device attached [ 47.871397][ T4460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.884104][ T4469] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 47.884136][ T4460] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.890639][ T4469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.890788][ T4469] vhci_hcd vhci_hcd.0: Device attached [ 47.934596][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.940525][ T4469] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 47.950088][ T4469] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 47.957540][ T4469] vhci_hcd vhci_hcd.0: Device attached [ 47.979642][ T4469] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 47.988687][ T4469] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 47.995296][ T4469] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.002908][ T4469] vhci_hcd vhci_hcd.0: Device attached [ 48.004402][ T29] audit: type=1400 audit(1758693458.853:411): avc: denied { watch watch_reads } for pid=4482 comm="syz.1.396" path="/proc/184" dev="proc" ino=7118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 48.033707][ T4469] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 48.040351][ T4469] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 48.047831][ T4469] vhci_hcd vhci_hcd.0: Device attached [ 48.058848][ T4469] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(15) [ 48.065462][ T4469] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.073135][ T4469] vhci_hcd vhci_hcd.0: Device attached [ 48.085796][ T29] audit: type=1400 audit(1758693458.943:412): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 48.089191][ T4495] syzkaller1: entered promiscuous mode [ 48.107317][ T4469] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(17) [ 48.111060][ T4495] syzkaller1: entered allmulticast mode [ 48.117623][ T4469] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.130849][ T4469] vhci_hcd vhci_hcd.0: Device attached [ 48.137861][ T3385] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 48.158582][ T4470] vhci_hcd: connection reset by peer [ 48.158693][ T4490] vhci_hcd: connection closed [ 48.164087][ T4476] vhci_hcd: connection closed [ 48.164096][ T4480] vhci_hcd: connection closed [ 48.164171][ T4485] vhci_hcd: connection closed [ 48.168814][ T4497] vhci_hcd: connection closed [ 48.174825][ T4492] vhci_hcd: connection closed [ 48.190666][ T367] vhci_hcd: stop threads [ 48.199633][ T367] vhci_hcd: release socket [ 48.204059][ T367] vhci_hcd: disconnect device [ 48.211130][ T367] vhci_hcd: stop threads [ 48.215435][ T367] vhci_hcd: release socket [ 48.219903][ T367] vhci_hcd: disconnect device [ 48.229432][ T367] vhci_hcd: stop threads [ 48.233723][ T367] vhci_hcd: release socket [ 48.238204][ T367] vhci_hcd: disconnect device [ 48.244478][ T367] vhci_hcd: stop threads [ 48.248864][ T367] vhci_hcd: release socket [ 48.253359][ T367] vhci_hcd: disconnect device [ 48.259525][ T367] vhci_hcd: stop threads [ 48.263781][ T367] vhci_hcd: release socket [ 48.268296][ T367] vhci_hcd: disconnect device [ 48.273508][ T367] vhci_hcd: stop threads [ 48.274819][ T4504] loop2: detected capacity change from 0 to 8192 [ 48.277807][ T367] vhci_hcd: release socket [ 48.277820][ T367] vhci_hcd: disconnect device [ 48.278359][ T367] vhci_hcd: stop threads [ 48.297594][ T367] vhci_hcd: release socket [ 48.302051][ T367] vhci_hcd: disconnect device [ 48.505381][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 48.613366][ T4532] netem: change failed [ 48.733384][ T4540] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 48.831588][ T4545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.420'. [ 49.089867][ T4571] veth0: entered promiscuous mode [ 49.095535][ T4570] veth0: left promiscuous mode [ 49.151103][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 49.378713][ T4603] loop1: detected capacity change from 0 to 1024 [ 49.392875][ T4603] EXT4-fs: Ignoring removed orlov option [ 49.416813][ T4576] chnl_net:caif_netlink_parms(): no params data found [ 49.438561][ T4603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.520901][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.579548][ T4576] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.586664][ T4576] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.634186][ T4576] bridge_slave_0: entered allmulticast mode [ 49.640731][ T4576] bridge_slave_0: entered promiscuous mode [ 49.647453][ T4576] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.654592][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.667866][ T4576] bridge_slave_1: entered allmulticast mode [ 49.681116][ T4576] bridge_slave_1: entered promiscuous mode [ 49.703488][ T4615] veth0: entered promiscuous mode [ 49.719800][ T4615] veth0: left promiscuous mode [ 49.726220][ T4576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.746646][ T4576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.830083][ T4576] team0: Port device team_slave_0 added [ 49.877686][ T4628] kernel read not supported for file /policy (pid: 4628 comm: syz.0.453) [ 49.896746][ T41] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.919544][ T4576] team0: Port device team_slave_1 added [ 49.949600][ T4576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.956616][ T4576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.982633][ T4576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.047243][ T41] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.078023][ T4576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.085118][ T4576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.111223][ T4576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.152106][ T4651] loop1: detected capacity change from 0 to 512 [ 50.160062][ T4640] veth0: entered promiscuous mode [ 50.171778][ T4651] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.181469][ T4651] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.465: bg 0: block 248: padding at end of block bitmap is not set [ 50.196425][ T4651] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.465: Failed to acquire dquot type 1 [ 50.209891][ T4651] EXT4-fs (loop1): 1 truncate cleaned up [ 50.216189][ T4651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.236190][ T41] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.249522][ T4640] veth0: left promiscuous mode [ 50.260008][ T4576] hsr_slave_0: entered promiscuous mode [ 50.266175][ T4576] hsr_slave_1: entered promiscuous mode [ 50.273692][ T4576] debugfs: 'hsr0' already exists in 'hsr' [ 50.279497][ T4576] Cannot create hsr debugfs directory [ 50.289292][ T4657] netlink: 76 bytes leftover after parsing attributes in process `syz.0.466'. [ 50.304235][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.338156][ T41] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.458980][ T41] bridge_slave_1: left allmulticast mode [ 50.464654][ T41] bridge_slave_1: left promiscuous mode [ 50.470423][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.490186][ T41] bridge_slave_0: left allmulticast mode [ 50.495905][ T41] bridge_slave_0: left promiscuous mode [ 50.501686][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.643157][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.653491][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.663074][ T41] bond0 (unregistering): Released all slaves [ 50.727677][ T41] hsr_slave_0: left promiscuous mode [ 50.742948][ T41] hsr_slave_1: left promiscuous mode [ 50.762815][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.770239][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.793750][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.801232][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.821859][ T41] veth1_macvtap: left promiscuous mode [ 50.827361][ T41] veth0_macvtap: left promiscuous mode [ 50.835636][ T41] veth1_vlan: left promiscuous mode [ 50.848430][ T41] veth0_vlan: left promiscuous mode [ 50.984751][ T41] team0 (unregistering): Port device team_slave_1 removed [ 51.016742][ T41] team0 (unregistering): Port device team_slave_0 removed [ 51.130390][ T4576] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.143607][ T4576] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.180086][ T4576] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.190797][ T4576] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.256096][ T4576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.272281][ T4576] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.318122][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.325260][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.359626][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.365813][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 51.366738][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.417081][ T4576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.427516][ T4576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.539556][ T4576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.582724][ T4760] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 51.607258][ T4760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.635519][ T4760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 51.659221][ T4768] Illegal XDP return value 31195192 on prog (id 376) dev N/A, expect packet loss! [ 51.675110][ T4760] bond1 (unregistering): Released all slaves [ 51.711130][ T4778] loop2: detected capacity change from 0 to 128 [ 51.723252][ T4778] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.735479][ T4780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4780 comm=syz.0.502 [ 51.822698][ T4576] veth0_vlan: entered promiscuous mode [ 51.852916][ T4576] veth1_vlan: entered promiscuous mode [ 51.863160][ T4791] loop2: detected capacity change from 0 to 1024 [ 51.870835][ T4791] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.881828][ T4791] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.895192][ T4791] JBD2: no valid journal superblock found [ 51.901036][ T4791] EXT4-fs (loop2): Could not load journal inode [ 51.923275][ T4576] veth0_macvtap: entered promiscuous mode [ 51.940306][ T4576] veth1_macvtap: entered promiscuous mode [ 51.955707][ T4576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.967362][ T4576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.983751][ T2548] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.005855][ T2548] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.029846][ T2548] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.052261][ T2548] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.087379][ T4803] loop5: detected capacity change from 0 to 512 [ 52.101008][ T4803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.123660][ T4803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.142014][ T4810] loop2: detected capacity change from 0 to 512 [ 52.170204][ T4810] EXT4-fs (loop2): orphan cleanup on readonly fs [ 52.190104][ T4815] netlink: 76 bytes leftover after parsing attributes in process `syz.1.513'. [ 52.200288][ T4810] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.512: bg 0: block 248: padding at end of block bitmap is not set [ 52.220530][ T4813] syzkaller1: entered promiscuous mode [ 52.226046][ T4813] syzkaller1: entered allmulticast mode [ 52.241606][ T4810] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.512: Failed to acquire dquot type 1 [ 52.254263][ T4810] EXT4-fs (loop2): 1 truncate cleaned up [ 52.261161][ T4810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.308880][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.411618][ T4821] netlink: 100 bytes leftover after parsing attributes in process `syz.1.516'. [ 52.430912][ T4823] loop2: detected capacity change from 0 to 1024 [ 52.437679][ T4823] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.453476][ T4823] EXT4-fs: inline encryption not supported [ 52.465177][ T4823] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.481903][ T4823] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.527: bad orphan inode 11 [ 52.492868][ T4823] EXT4-fs (loop2): Remounting filesystem read-only [ 52.499437][ T4823] ext4_test_bit(bit=10, block=4) = 1 [ 52.504753][ T4823] is_bad_inode(inode)=0 [ 52.509002][ T4823] NEXT_ORPHAN(inode)=3254779904 [ 52.513887][ T4823] max_ino=32 [ 52.517117][ T4823] i_nlink=0 [ 52.534049][ T4823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.605976][ T4826] loop1: detected capacity change from 0 to 1024 [ 52.616577][ T4826] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.627497][ T4826] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.639423][ T4826] JBD2: no valid journal superblock found [ 52.645247][ T4826] EXT4-fs (loop1): Could not load journal inode [ 52.795091][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 52.795176][ T29] audit: type=1400 audit(52.766:599): avc: denied { connect } for pid=4846 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.821202][ T29] audit: type=1400 audit(52.796:600): avc: denied { write } for pid=4846 comm="syz.0.529" path="socket:[9356]" dev="sockfs" ino=9356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.900852][ T29] audit: type=1326 audit(52.876:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4856 comm="syz.1.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bc24eec9 code=0x7ffc0000 [ 52.923603][ T29] audit: type=1326 audit(52.876:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4856 comm="syz.1.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bc24eec9 code=0x7ffc0000 [ 52.946358][ T29] audit: type=1326 audit(52.876:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4856 comm="syz.1.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9bc24eec9 code=0x7ffc0000 [ 52.969115][ T29] audit: type=1326 audit(52.876:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4856 comm="syz.1.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bc24eec9 code=0x7ffc0000 [ 52.969277][ T4857] loop1: detected capacity change from 0 to 128 [ 52.991827][ T29] audit: type=1326 audit(52.876:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4856 comm="syz.1.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9bc24eec9 code=0x7ffc0000 [ 53.020684][ T29] audit: type=1326 audit(52.876:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4856 comm="syz.1.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bc24eec9 code=0x7ffc0000 [ 53.043246][ T29] audit: type=1326 audit(52.876:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4856 comm="syz.1.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9bc24eec9 code=0x7ffc0000 [ 53.065959][ T29] audit: type=1326 audit(52.896:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4856 comm="syz.1.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bc24eec9 code=0x7ffc0000 [ 53.167864][ T3385] usb 7-1: enqueue for inactive port 0 [ 53.173429][ T3385] usb 7-1: enqueue for inactive port 0 [ 53.252506][ T3385] vhci_hcd: vhci_device speed not set [ 53.258587][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.303246][ T4871] loop2: detected capacity change from 0 to 128 [ 53.366412][ T4875] netlink: 44 bytes leftover after parsing attributes in process `syz.2.539'. [ 53.454065][ T4879] netlink: 100 bytes leftover after parsing attributes in process `syz.2.541'. [ 53.871519][ T4907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.555'. [ 53.961434][ T4916] program syz.1.559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.010354][ T4921] tipc: Enabled bearer , priority 0 [ 54.019978][ T4921] tipc: Disabling bearer [ 54.043207][ T4923] netlink: 44 bytes leftover after parsing attributes in process `syz.5.562'. [ 54.097345][ T4925] loop1: detected capacity change from 0 to 2048 [ 54.130831][ T4925] Alternate GPT is invalid, using primary GPT. [ 54.137205][ T4925] loop1: p2 p3 p7 [ 54.192476][ T4933] loop1: detected capacity change from 0 to 1024 [ 54.220344][ T4933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.278227][ T4943] program syz.0.570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.343471][ T1695] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 54.358613][ T1695] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 54.371025][ T1695] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.371025][ T1695] [ 54.380794][ T1695] EXT4-fs (loop1): Total free blocks count 0 [ 54.386789][ T1695] EXT4-fs (loop1): Free/Dirty block details [ 54.392748][ T1695] EXT4-fs (loop1): free_blocks=68451041280 [ 54.398595][ T1695] EXT4-fs (loop1): dirty_blocks=320 [ 54.403856][ T1695] EXT4-fs (loop1): Block reservation details [ 54.409994][ T1695] EXT4-fs (loop1): i_reserved_data_blocks=20 [ 54.436642][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.599077][ T4971] program syz.2.581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.676608][ T4975] syzkaller0: entered promiscuous mode [ 54.682122][ T4975] syzkaller0: entered allmulticast mode [ 55.706404][ T5020] loop5: detected capacity change from 0 to 128 [ 55.923787][ T5034] loop5: detected capacity change from 0 to 128 [ 55.934682][ T5034] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 55.942567][ T5034] FAT-fs (loop5): Filesystem has been set read-only [ 55.950254][ T5034] syz.5.610: attempt to access beyond end of device [ 55.950254][ T5034] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 55.964132][ T5034] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 55.972067][ T5034] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 55.980436][ T5034] syz.5.610: attempt to access beyond end of device [ 55.980436][ T5034] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.995201][ T5033] syz.5.610: attempt to access beyond end of device [ 55.995201][ T5033] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.009822][ T5034] syz.5.610: attempt to access beyond end of device [ 56.009822][ T5034] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.024088][ T5033] syz.5.610: attempt to access beyond end of device [ 56.024088][ T5033] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.038824][ T5034] syz.5.610: attempt to access beyond end of device [ 56.038824][ T5034] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.052579][ T5033] syz.5.610: attempt to access beyond end of device [ 56.052579][ T5033] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.066517][ T5034] syz.5.610: attempt to access beyond end of device [ 56.066517][ T5034] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.080797][ T5033] syz.5.610: attempt to access beyond end of device [ 56.080797][ T5033] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.094205][ T5034] syz.5.610: attempt to access beyond end of device [ 56.094205][ T5034] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.316081][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'. [ 56.480096][ T5057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.620'. [ 57.133028][ T5115] IPv4: Oversized IP packet from 127.202.26.0 [ 57.326259][ T5126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.648'. [ 57.417260][ T5073] 9pnet_fd: p9_fd_create_tcp (5073): problem connecting socket to 127.0.0.1 [ 57.551397][ T5145] SELinux: ebitmap: truncated map [ 57.557029][ T5145] SELinux: failed to load policy [ 57.701148][ T5158] netlink: 'syz.2.663': attribute type 21 has an invalid length. [ 57.709044][ T5158] netlink: 156 bytes leftover after parsing attributes in process `syz.2.663'. [ 57.718085][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 57.762855][ T5160] SELinux: failed to load policy [ 57.856740][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 57.856757][ T29] audit: type=1326 audit(57.826:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.5.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7e6feec9 code=0x7ffc0000 [ 57.885564][ T29] audit: type=1326 audit(57.826:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.5.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7e6feec9 code=0x7ffc0000 [ 57.911042][ T29] audit: type=1326 audit(57.826:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.5.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff7e6feec9 code=0x7ffc0000 [ 57.933845][ T29] audit: type=1326 audit(57.826:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.5.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7e6feec9 code=0x7ffc0000 [ 57.956605][ T29] audit: type=1326 audit(57.826:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.5.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7e6feec9 code=0x7ffc0000 [ 57.979179][ T29] audit: type=1326 audit(57.886:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.5.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff7e6feec9 code=0x7ffc0000 [ 58.007486][ T29] audit: type=1326 audit(57.886:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.5.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7e6feec9 code=0x7ffc0000 [ 58.013184][ T5176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.671'. [ 58.030127][ T29] audit: type=1326 audit(57.886:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.5.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff7e6feec9 code=0x7ffc0000 [ 58.061794][ T29] audit: type=1326 audit(57.956:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.5.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7e6feec9 code=0x7ffc0000 [ 58.083769][ T5177] loop5: detected capacity change from 0 to 128 [ 58.084473][ T29] audit: type=1326 audit(57.956:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.5.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7e6feec9 code=0x7ffc0000 [ 58.288466][ T5184] syzkaller0: refused to change device tx_queue_len [ 58.571415][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 58.586884][ T5210] vxlan0: entered promiscuous mode [ 58.594367][ T41] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.607739][ T41] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.619531][ T41] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.630224][ T41] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.804935][ T5227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.686'. [ 58.910377][ T5239] SELinux: failed to load policy [ 59.141469][ T5242] syzkaller0: refused to change device tx_queue_len [ 59.199041][ T5252] loop2: detected capacity change from 0 to 128 [ 59.210359][ T5252] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 59.240738][ T5259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.699'. [ 59.254725][ T5254] loop5: detected capacity change from 0 to 128 [ 59.510269][ T5284] netlink: 'syz.1.709': attribute type 10 has an invalid length. [ 59.538241][ T5284] team0: Device hsr_slave_0 failed to register rx_handler [ 59.760173][ T5288] bridge_slave_1: left allmulticast mode [ 59.765891][ T5288] bridge_slave_1: left promiscuous mode [ 59.772182][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.780969][ T5288] bridge_slave_0: left allmulticast mode [ 59.786690][ T5288] bridge_slave_0: left promiscuous mode [ 59.792464][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.173234][ T5297] IPv4: Oversized IP packet from 127.202.26.0 [ 60.300976][ T5313] block device autoloading is deprecated and will be removed. [ 60.370774][ T5322] loop5: detected capacity change from 0 to 1024 [ 60.389972][ T5322] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.400887][ T5322] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.412870][ T5322] JBD2: no valid journal superblock found [ 60.418704][ T5322] EXT4-fs (loop5): Could not load journal inode [ 60.433551][ T5322] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 60.466622][ T5330] SELinux: policydb version 0 does not match my version range 15-35 [ 60.475202][ T5330] SELinux: failed to load policy [ 60.513318][ T5332] pim6reg1: entered promiscuous mode [ 60.518694][ T5332] pim6reg1: entered allmulticast mode [ 60.534296][ T5336] loop2: detected capacity change from 0 to 2048 [ 60.588185][ T5336] loop2: p1 < > p4 [ 60.594778][ T5336] loop2: p4 size 8388608 extends beyond EOD, truncated [ 60.645294][ T23] hid_parser_main: 48 callbacks suppressed [ 60.645313][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.658616][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.666046][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.673473][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.681020][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.688442][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.695832][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.703280][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.710697][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.718101][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 60.730845][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 60.757700][ T5341] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 60.786484][ T5343] bridge_slave_1: left allmulticast mode [ 60.792503][ T5343] bridge_slave_1: left promiscuous mode [ 60.798611][ T5343] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.808725][ T5343] bridge_slave_0: left allmulticast mode [ 60.814380][ T5343] bridge_slave_0: left promiscuous mode [ 60.820425][ T5343] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.043645][ T5352] loop0: detected capacity change from 0 to 1024 [ 61.051019][ T5352] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.062084][ T5352] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.074833][ T5352] JBD2: no valid journal superblock found [ 61.080733][ T5352] EXT4-fs (loop0): Could not load journal inode [ 61.093412][ T5352] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 61.590590][ T5381] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 61.658789][ T5387] binfmt_misc: register: failed to install interpreter file ./file2 [ 61.688947][ T5387] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 61.696529][ T5387] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 61.780726][ T5389] pim6reg1: entered promiscuous mode [ 61.786083][ T5389] pim6reg1: entered allmulticast mode [ 62.105018][ T5407] loop0: detected capacity change from 0 to 128 [ 62.119772][ T5408] loop2: detected capacity change from 0 to 256 [ 62.120847][ T5407] bio_check_eod: 19234 callbacks suppressed [ 62.120915][ T5407] syz.0.759: attempt to access beyond end of device [ 62.120915][ T5407] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 62.328590][ T5419] bridge_slave_1: left allmulticast mode [ 62.334283][ T5419] bridge_slave_1: left promiscuous mode [ 62.340448][ T5419] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.396163][ T5422] binfmt_misc: register: failed to install interpreter file ./file2 [ 62.406152][ T5419] bridge_slave_0: left allmulticast mode [ 62.407347][ T5422] siw: device registration error -23 [ 62.411840][ T5419] bridge_slave_0: left promiscuous mode [ 62.422854][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.710147][ T5445] loop2: detected capacity change from 0 to 128 [ 62.740687][ T5446] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 62.911442][ T5458] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.053133][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 63.053150][ T29] audit: type=1326 audit(63.026:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fba5eeec9 code=0x7ffc0000 [ 63.081979][ T29] audit: type=1326 audit(63.026:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fba5eeec9 code=0x7ffc0000 [ 63.104723][ T29] audit: type=1326 audit(63.026:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fba5eeec9 code=0x7ffc0000 [ 63.127302][ T29] audit: type=1326 audit(63.026:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fba5eeec9 code=0x7ffc0000 [ 63.149886][ T29] audit: type=1326 audit(63.026:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fba5eeec9 code=0x7ffc0000 [ 63.173055][ T29] audit: type=1326 audit(63.026:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fba5eeec9 code=0x7ffc0000 [ 63.196090][ T29] audit: type=1326 audit(63.026:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fba5eeec9 code=0x7ffc0000 [ 63.218680][ T29] audit: type=1326 audit(63.026:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fba5eeec9 code=0x7ffc0000 [ 63.241218][ T29] audit: type=1326 audit(63.026:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9fba5eeec9 code=0x7ffc0000 [ 63.263811][ T29] audit: type=1326 audit(63.026:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fba5eeec9 code=0x7ffc0000 [ 63.400494][ T5481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 63.626142][ T5494] loop0: detected capacity change from 0 to 4096 [ 63.639461][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'. [ 63.875373][ T5510] SELinux: ebitmap: truncated map [ 63.893075][ T5510] SELinux: failed to load policy [ 63.976325][ T5516] loop1: detected capacity change from 0 to 128 [ 64.035227][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 64.068404][ T5531] tipc: Started in network mode [ 64.073281][ T5531] tipc: Node identity ac14140f, cluster identity 4711 [ 64.080494][ T5531] tipc: New replicast peer: 255.255.255.83 [ 64.086432][ T5531] tipc: Enabled bearer , priority 10 [ 64.471810][ T5551] SELinux: ebitmap: truncated map [ 64.492733][ T5551] SELinux: failed to load policy [ 64.564381][ T5559] loop2: detected capacity change from 0 to 128 [ 64.836781][ T5573] loop5: detected capacity change from 0 to 2048 [ 64.863900][ T5577] pim6reg1: entered promiscuous mode [ 64.869277][ T5577] pim6reg1: entered allmulticast mode [ 65.077880][ T23] tipc: Node number set to 2886997007 [ 65.255863][ T5598] loop5: detected capacity change from 0 to 128 [ 65.601745][ T5616] loop2: detected capacity change from 0 to 1024 [ 65.783247][ T5625] loop2: detected capacity change from 0 to 2048 [ 65.926836][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 65.935985][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 66.017019][ T5636] loop1: detected capacity change from 0 to 128 [ 66.071118][ T5642] loop2: detected capacity change from 0 to 512 [ 66.105503][ T5642] EXT4-fs: Ignoring removed oldalloc option [ 66.122033][ T5647] loop5: detected capacity change from 0 to 128 [ 66.130847][ T5642] EXT4-fs (loop2): 1 truncate cleaned up [ 66.150230][ T5647] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 66.195317][ T5655] netlink: 264 bytes leftover after parsing attributes in process `syz.0.853'. [ 66.250141][ T5659] loop0: detected capacity change from 0 to 1024 [ 66.258950][ T5657] pim6reg1: entered promiscuous mode [ 66.264254][ T5657] pim6reg1: entered allmulticast mode [ 66.322680][ T5659] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.855: Allocating blocks 449-513 which overlap fs metadata [ 66.365959][ T5659] EXT4-fs (loop0): pa ffff8881071ca700: logic 48, phys. 177, len 21 [ 66.374314][ T5659] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 67.053832][ T2548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.064237][ T2548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.132956][ T2548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.143280][ T2548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.220071][ T2548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.230636][ T2548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.256258][ T5707] netlink: 96 bytes leftover after parsing attributes in process `syz.2.873'. [ 67.290552][ T2548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.300961][ T2548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.343175][ T5713] netlink: 264 bytes leftover after parsing attributes in process `syz.2.875'. [ 67.553488][ T2548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.567212][ T2548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.584492][ T2548] bond0 (unregistering): Released all slaves [ 67.641406][ T2548] tipc: Left network mode [ 67.671155][ T2548] hsr_slave_0: left promiscuous mode [ 67.704674][ T2548] hsr_slave_1: left promiscuous mode [ 67.724199][ T2548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.731655][ T2548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.793743][ T2548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.801181][ T2548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.831254][ T2548] veth1_macvtap: left promiscuous mode [ 67.836741][ T2548] veth0_macvtap: left promiscuous mode [ 67.857831][ T2548] veth1_vlan: left promiscuous mode [ 67.867406][ T2548] veth0_vlan: left promiscuous mode [ 67.985851][ T5752] loop0: detected capacity change from 0 to 1024 [ 68.021010][ T5752] EXT4-fs mount: 14 callbacks suppressed [ 68.021027][ T5752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.078864][ T5757] loop2: detected capacity change from 0 to 128 [ 68.179589][ T2548] team0 (unregistering): Port device team_slave_1 removed [ 68.202823][ T2548] team0 (unregistering): Port device team_slave_0 removed [ 68.295868][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.311793][ T5699] chnl_net:caif_netlink_parms(): no params data found [ 68.681329][ T5699] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.688719][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.696130][ T5699] bridge_slave_0: entered allmulticast mode [ 68.703508][ T5699] bridge_slave_0: entered promiscuous mode [ 68.710661][ T5699] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.717816][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.725027][ T5699] bridge_slave_1: entered allmulticast mode [ 68.731577][ T5699] bridge_slave_1: entered promiscuous mode [ 68.792075][ T5699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.802110][ T5699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.829541][ T5699] team0: Port device team_slave_0 added [ 68.836295][ T5699] team0: Port device team_slave_1 added [ 68.863911][ T5699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.870905][ T5699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.896833][ T5699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.913499][ T5699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.920554][ T5699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.946574][ T5699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.982720][ T5787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5787 comm=syz.2.898 [ 69.003015][ T5699] hsr_slave_0: entered promiscuous mode [ 69.012963][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 69.012977][ T29] audit: type=1400 audit(68.986:1347): avc: denied { mount } for pid=5782 comm="syz.5.906" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 69.015448][ T5699] hsr_slave_1: entered promiscuous mode [ 69.131208][ T29] audit: type=1400 audit(69.106:1348): avc: denied { create } for pid=5802 comm="syz.5.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.143679][ T5699] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 69.164611][ T5699] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 69.174048][ T5699] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 69.188154][ T5699] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 69.204715][ T5699] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.211877][ T5699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.219267][ T5699] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.226325][ T5699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.255164][ T5699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.269435][ T2548] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.279712][ T2548] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.298777][ T5699] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.309382][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.316532][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.329057][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.336216][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.337062][ T29] audit: type=1400 audit(69.296:1349): avc: denied { write } for pid=5820 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 69.355728][ T5699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.372390][ T5699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.472446][ T5829] hub 6-0:1.0: USB hub found [ 69.478369][ T5829] hub 6-0:1.0: 8 ports detected [ 69.498800][ T5839] netlink: 64 bytes leftover after parsing attributes in process `syz.5.918'. [ 69.532479][ T29] audit: type=1400 audit(69.496:1350): avc: denied { write } for pid=5841 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.558919][ T5699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.597620][ T5850] loop0: detected capacity change from 0 to 2048 [ 69.609682][ T5853] loop2: detected capacity change from 0 to 1024 [ 69.620540][ T5850] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.639893][ T5853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.667135][ T3310] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 69.677143][ T29] audit: type=1400 audit(69.646:1351): avc: denied { map } for pid=5852 comm="syz.2.922" path="/208/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.699406][ T29] audit: type=1400 audit(69.646:1352): avc: denied { execute } for pid=5852 comm="syz.2.922" path="/208/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.740568][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.760685][ T5878] loop0: detected capacity change from 0 to 512 [ 69.785232][ T5878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.809823][ T5699] veth0_vlan: entered promiscuous mode [ 69.817502][ T5699] veth1_vlan: entered promiscuous mode [ 69.846500][ T5699] veth0_macvtap: entered promiscuous mode [ 69.861300][ T5699] veth1_macvtap: entered promiscuous mode [ 69.883609][ T5699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.894620][ T29] audit: type=1400 audit(69.856:1353): avc: denied { append } for pid=5877 comm="syz.0.926" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.930160][ T5699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.944441][ T41] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.955135][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.979357][ T2548] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.995167][ T29] audit: type=1326 audit(69.966:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.4.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fba5eeec9 code=0x7ffc0000 [ 70.017911][ T29] audit: type=1326 audit(69.966:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.4.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fba5eeec9 code=0x7ffc0000 [ 70.040625][ T29] audit: type=1326 audit(69.966:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.4.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f9fba5eeec9 code=0x7ffc0000 [ 70.069590][ T2548] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.093009][ T2548] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.125757][ T5906] loop0: detected capacity change from 0 to 128 [ 70.217583][ T5924] sit0: entered promiscuous mode [ 70.222942][ T5924] sit0: entered allmulticast mode [ 70.514751][ T5931] SELinux: failed to load policy [ 71.398945][ T6025] loop0: detected capacity change from 0 to 2048 [ 71.427513][ T6025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.451502][ T6034] ref_ctr increment failed for inode: 0x1ed offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810005bf40 [ 71.492753][ T6032] uprobe: syz.5.989:6032 failed to unregister, leaking uprobe [ 71.563876][ T6041] loop6: detected capacity change from 0 to 128 [ 71.577639][ T6041] syz.6.992: attempt to access beyond end of device [ 71.577639][ T6041] loop6: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 71.592921][ T6041] syz.6.992: attempt to access beyond end of device [ 71.592921][ T6041] loop6: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 71.606596][ T6041] Buffer I/O error on dev loop6, logical block 87, lost async page write [ 71.615318][ T6041] syz.6.992: attempt to access beyond end of device [ 71.615318][ T6041] loop6: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 71.627504][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.628653][ T6041] Buffer I/O error on dev loop6, logical block 88, lost async page write [ 71.630485][ T6041] syz.6.992: attempt to access beyond end of device [ 71.630485][ T6041] loop6: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 71.680326][ T6041] syz.6.992: attempt to access beyond end of device [ 71.680326][ T6041] loop6: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 71.693702][ T6041] Buffer I/O error on dev loop6, logical block 91, lost async page write [ 71.703903][ T6041] syz.6.992: attempt to access beyond end of device [ 71.703903][ T6041] loop6: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 71.717353][ T6041] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 71.727248][ T6041] syz.6.992: attempt to access beyond end of device [ 71.727248][ T6041] loop6: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 71.741537][ T6041] syz.6.992: attempt to access beyond end of device [ 71.741537][ T6041] loop6: rw=2049, sector=206, nr_sectors = 2 limit=128 [ 71.754998][ T6041] Buffer I/O error on dev loop6, logical block 103, lost async page write [ 71.766642][ T6050] syz.5.996 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.777205][ T6041] syz.6.992: attempt to access beyond end of device [ 71.777205][ T6041] loop6: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 71.790626][ T6041] Buffer I/O error on dev loop6, logical block 104, lost async page write [ 71.800121][ T6041] syz.6.992: attempt to access beyond end of device [ 71.800121][ T6041] loop6: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 71.814039][ T6041] Buffer I/O error on dev loop6, logical block 107, lost async page write [ 71.822829][ T6041] Buffer I/O error on dev loop6, logical block 108, lost async page write [ 71.833220][ T6041] Buffer I/O error on dev loop6, logical block 119, lost async page write [ 71.842118][ T6041] Buffer I/O error on dev loop6, logical block 120, lost async page write [ 72.015757][ T6071] loop0: detected capacity change from 0 to 512 [ 72.504460][ T6087] loop6: detected capacity change from 0 to 128 [ 72.747537][ T6105] syzkaller0: refused to change device tx_queue_len [ 72.761515][ T6107] loop6: detected capacity change from 0 to 2048 [ 72.779421][ T6107] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.836567][ T5699] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 72.967290][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1033'. [ 72.980580][ T6131] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1034'. [ 72.990723][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 73.001103][ T6128] team0 (unregistering): Port device team_slave_0 removed [ 73.019991][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1036'. [ 73.030918][ T6128] team0 (unregistering): Port device team_slave_1 removed [ 73.336545][ T6168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6168 comm=syz.0.1052 [ 73.462388][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'. [ 73.478924][ T6182] netlink: 'syz.2.1058': attribute type 1 has an invalid length. [ 73.510023][ T6186] process 'syz.5.1060' launched './file1' with NULL argv: empty string added [ 73.971203][ T6255] $Hÿ: renamed from bond0 (while UP) [ 73.978429][ T6255] $Hÿ: entered promiscuous mode [ 73.983486][ T6255] bond_slave_0: entered promiscuous mode [ 73.989202][ T6255] bond_slave_1: entered promiscuous mode [ 74.102648][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1085'. [ 74.116935][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1085'. [ 74.279060][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 74.279077][ T29] audit: type=1400 audit(74.256:1596): avc: denied { ioctl } for pid=6274 comm="syz.5.1088" path="socket:[13693]" dev="sockfs" ino=13693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.529667][ T6256] chnl_net:caif_netlink_parms(): no params data found [ 74.768775][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.775901][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.783158][ T6256] bridge_slave_0: entered allmulticast mode [ 74.791414][ T6256] bridge_slave_0: entered promiscuous mode [ 74.799391][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.806521][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.813965][ T6256] bridge_slave_1: entered allmulticast mode [ 74.820426][ T6256] bridge_slave_1: entered promiscuous mode [ 74.851604][ T6256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.862401][ T6256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.886951][ T6256] team0: Port device team_slave_0 added [ 74.893921][ T6256] team0: Port device team_slave_1 added [ 74.913742][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.920720][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.946744][ T6256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.962551][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.969552][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.995473][ T6256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.081372][ T29] audit: type=1400 audit(75.056:1597): avc: denied { accept } for pid=6354 comm="syz.4.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.130457][ T6256] hsr_slave_0: entered promiscuous mode [ 75.136550][ T6256] hsr_slave_1: entered promiscuous mode [ 75.144115][ T6256] debugfs: 'hsr0' already exists in 'hsr' [ 75.149894][ T6256] Cannot create hsr debugfs directory [ 75.185385][ T29] audit: type=1326 audit(75.156:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12af77eec9 code=0x7ffc0000 [ 75.208439][ T29] audit: type=1326 audit(75.166:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12af77eec9 code=0x7ffc0000 [ 75.231211][ T29] audit: type=1326 audit(75.166:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12af77eec9 code=0x7ffc0000 [ 75.254022][ T29] audit: type=1326 audit(75.166:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12af77eec9 code=0x7ffc0000 [ 75.276758][ T29] audit: type=1326 audit(75.166:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12af77eec9 code=0x7ffc0000 [ 75.299459][ T29] audit: type=1326 audit(75.186:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12af77eec9 code=0x7ffc0000 [ 75.322227][ T29] audit: type=1326 audit(75.186:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12af77eec9 code=0x7ffc0000 [ 75.345921][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.353502][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.370151][ T29] audit: type=1326 audit(75.276:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12af77eec9 code=0x7ffc0000 [ 75.393273][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.400876][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.500594][ T6256] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 75.529343][ T6256] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 75.554132][ T6256] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 75.581091][ T6256] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 75.627410][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.634506][ T6256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.642020][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.649093][ T6256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.679938][ T6256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.725944][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.733955][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.762334][ T6256] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.782039][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.789138][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.802398][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.809532][ T6334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.866916][ T6409] loop2: detected capacity change from 0 to 128 [ 75.983826][ T6256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.033689][ T6426] pimreg: entered allmulticast mode [ 76.067050][ T6426] pimreg: left allmulticast mode [ 76.243489][ T6256] veth0_vlan: entered promiscuous mode [ 76.258516][ T6256] veth1_vlan: entered promiscuous mode [ 76.284523][ T6256] veth0_macvtap: entered promiscuous mode [ 76.293003][ T6256] veth1_macvtap: entered promiscuous mode [ 76.305023][ T6256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.319290][ T6256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.347511][ T41] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.377698][ T41] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.398049][ T41] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.407383][ T41] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.439123][ T6465] loop0: detected capacity change from 0 to 512 [ 76.461975][ T6465] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1132: bg 0: block 393: padding at end of block bitmap is not set [ 76.505636][ T6465] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 76.541286][ T6465] EXT4-fs (loop0): 2 truncates cleaned up [ 76.581599][ T6465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.644910][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.695903][ T6480] loop0: detected capacity change from 0 to 512 [ 76.754043][ T6480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.870724][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.950776][ T6493] loop0: detected capacity change from 0 to 256 [ 76.975145][ T6493] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.020112][ T6493] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.405974][ T6513] loop2: detected capacity change from 0 to 128 [ 77.848400][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1158'. [ 77.889100][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1158'. [ 78.436513][ T6580] netlink: 'syz.4.1177': attribute type 12 has an invalid length. [ 78.455218][ T6576] loop7: detected capacity change from 0 to 128 [ 78.515668][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1180'. [ 78.550083][ T6593] : renamed from bond0 (while UP) [ 79.246850][ T6591] ================================================================== [ 79.254984][ T6591] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 79.263000][ T6591] [ 79.265341][ T6591] write to 0xffff88810060d114 of 4 bytes by task 6576 on cpu 0: [ 79.272982][ T6591] xas_set_mark+0x12b/0x140 [ 79.277517][ T6591] tag_pages_for_writeback+0xc2/0x290 [ 79.282920][ T6591] writeback_iter+0x340/0x820 [ 79.287620][ T6591] mpage_writepages+0x87/0x1250 [ 79.292502][ T6591] fat_writepages+0x24/0x30 [ 79.297023][ T6591] do_writepages+0x1c3/0x310 [ 79.301624][ T6591] file_write_and_wait_range+0x156/0x2c0 [ 79.307268][ T6591] __generic_file_fsync+0x46/0x140 [ 79.312383][ T6591] fat_file_fsync+0x49/0x100 [ 79.316973][ T6591] vfs_fsync_range+0x10a/0x130 [ 79.321740][ T6591] generic_file_write_iter+0x1b8/0x2f0 [ 79.327205][ T6591] iter_file_splice_write+0x666/0xa60 [ 79.332579][ T6591] direct_splice_actor+0x156/0x2a0 [ 79.337692][ T6591] splice_direct_to_actor+0x312/0x680 [ 79.343066][ T6591] do_splice_direct+0xda/0x150 [ 79.347831][ T6591] do_sendfile+0x380/0x650 [ 79.352264][ T6591] __x64_sys_sendfile64+0x105/0x150 [ 79.357470][ T6591] x64_sys_call+0x2bb0/0x2ff0 [ 79.362149][ T6591] do_syscall_64+0xd2/0x200 [ 79.366676][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.372568][ T6591] [ 79.374889][ T6591] read to 0xffff88810060d114 of 4 bytes by task 6591 on cpu 1: [ 79.382428][ T6591] file_write_and_wait_range+0x10e/0x2c0 [ 79.388071][ T6591] __generic_file_fsync+0x46/0x140 [ 79.393188][ T6591] fat_file_fsync+0x49/0x100 [ 79.397779][ T6591] vfs_fsync_range+0x10a/0x130 [ 79.402548][ T6591] generic_file_write_iter+0x1b8/0x2f0 [ 79.408010][ T6591] iter_file_splice_write+0x666/0xa60 [ 79.413385][ T6591] direct_splice_actor+0x156/0x2a0 [ 79.418498][ T6591] splice_direct_to_actor+0x312/0x680 [ 79.423868][ T6591] do_splice_direct+0xda/0x150 [ 79.428630][ T6591] do_sendfile+0x380/0x650 [ 79.433055][ T6591] __x64_sys_sendfile64+0x105/0x150 [ 79.438263][ T6591] x64_sys_call+0x2bb0/0x2ff0 [ 79.442942][ T6591] do_syscall_64+0xd2/0x200 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 79.447454][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.453347][ T6591] [ 79.455669][ T6591] value changed: 0x02000021 -> 0x04000021 [ 79.461381][ T6591] [ 79.463699][ T6591] Reported by Kernel Concurrency Sanitizer on: [ 79.469849][ T6591] CPU: 1 UID: 0 PID: 6591 Comm: syz.7.1176 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.479568][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.489621][ T6591] ================================================================== [ 79.537790][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 79.537810][ T29] audit: type=1400 audit(79.476:1784): avc: denied { write } for pid=3293 comm="syz-executor" path="pipe:[490]" dev="pipefs" ino=490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 79.709552][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.828945][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.918700][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.969180][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.054296][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.067520][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.076422][ T41] bond0 (unregistering): Released all slaves [ 80.129250][ T41] tipc: Disabling bearer [ 80.134228][ T41] tipc: Left network mode [ 80.140734][ T41] hsr_slave_0: left promiscuous mode [ 80.146329][ T41] hsr_slave_1: left promiscuous mode [ 80.151893][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.159433][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.187713][ T41] team0 (unregistering): Port device team_slave_1 removed [ 80.196666][ T41] team0 (unregistering): Port device team_slave_0 removed [ 80.540656][ T41] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.590303][ T41] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.629953][ T41] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.699923][ T41] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.781844][ T41] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.819850][ T41] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.860019][ T41] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.900279][ T41] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.951260][ T41] bridge_slave_1: left allmulticast mode [ 80.956974][ T41] bridge_slave_1: left promiscuous mode [ 80.962726][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.970423][ T41] bridge_slave_0: left allmulticast mode [ 80.976093][ T41] bridge_slave_0: left promiscuous mode [ 80.981825][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.989868][ T41] bridge_slave_1: left allmulticast mode [ 80.995526][ T41] bridge_slave_1: left promiscuous mode [ 81.001166][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.008718][ T41] bridge_slave_0: left allmulticast mode [ 81.014347][ T41] bridge_slave_0: left promiscuous mode [ 81.020116][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.109720][ T41] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.118366][ T41] bond_slave_0: left promiscuous mode [ 81.124880][ T41] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.133683][ T41] bond_slave_1: left promiscuous mode [ 81.139868][ T41] $Hÿ (unregistering): Released all slaves [ 81.199726][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.209308][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.218703][ T41] bond0 (unregistering): Released all slaves [ 81.253099][ T41] hsr_slave_0: left promiscuous mode [ 81.259217][ T41] hsr_slave_1: left promiscuous mode [ 81.264882][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.272266][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.279703][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.287095][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.296652][ T41] hsr_slave_0: left promiscuous mode [ 81.302475][ T41] hsr_slave_1: left promiscuous mode [ 81.308045][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.315461][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.322875][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.330943][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.342226][ T41] veth1_macvtap: left promiscuous mode [ 81.347694][ T41] veth0_macvtap: left promiscuous mode [ 81.353206][ T41] veth1_vlan: left promiscuous mode [ 81.358445][ T41] veth0_vlan: left promiscuous mode [ 81.364001][ T41] veth1_macvtap: left promiscuous mode [ 81.369483][ T41] veth0_macvtap: left promiscuous mode [ 81.374968][ T41] veth1_vlan: left promiscuous mode [ 81.380304][ T41] veth0_vlan: left promiscuous mode [ 81.500004][ T41] team0 (unregistering): Port device team_slave_1 removed [ 81.510618][ T41] team0 (unregistering): Port device team_slave_0 removed