last executing test programs: 53.68133809s ago: executing program 4 (id=115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x0, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008050) 53.571933932s ago: executing program 4 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0xf8}}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 53.01627247s ago: executing program 4 (id=127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) unshare(0x42000000) syz_usb_disconnect(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) 51.432605464s ago: executing program 4 (id=166): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fchdir(r0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x991018, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 51.376249955s ago: executing program 4 (id=168): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 51.130142019s ago: executing program 4 (id=173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 51.103958769s ago: executing program 32 (id=173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 47.341422875s ago: executing program 3 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 47.252375156s ago: executing program 3 (id=258): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x1400, 0x400, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) 47.183055287s ago: executing program 3 (id=260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x40}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000003000000040000001200000000000000", @ANYRES32, @ANYBLOB="01f8ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f00000002c0), &(0x7f0000000440)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000)=0x1000000, &(0x7f0000000080)=r1}, 0x20) 47.115344368s ago: executing program 3 (id=262): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a4, &(0x7f00000001c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x20c00, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x1}, 0x18) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 46.855954492s ago: executing program 3 (id=268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x2, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 46.415764549s ago: executing program 3 (id=275): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 46.415575649s ago: executing program 33 (id=275): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.204478833s ago: executing program 2 (id=1366): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 1.202439943s ago: executing program 1 (id=1367): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0, 0x0, 0x10000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) rt_sigsuspend(0x0, 0x0) socket(0x1, 0x803, 0x5) 1.162138563s ago: executing program 1 (id=1369): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x14, 0x32, 0x829}, 0x14}, 0x1, 0x0, 0x0, 0x52}, 0x0) 1.136862153s ago: executing program 1 (id=1370): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 1.100225704s ago: executing program 2 (id=1372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_load(r2, &(0x7f00000002c0)={0xf97cff8c, 0x8, 'SE Linux', "48a0fe36149d7de903a50ad47ed21f1087"}, 0x21) 1.048233985s ago: executing program 2 (id=1374): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5faf, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) 974.581066ms ago: executing program 2 (id=1378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f00000005c0)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r1}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0xd0, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 954.195656ms ago: executing program 1 (id=1380): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 899.953547ms ago: executing program 2 (id=1383): unshare(0x28020480) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63db142ade2bd907f400", "fd6ed24e", "01000010ffffffff"}, 0x38) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 857.662018ms ago: executing program 0 (id=1385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x2) fchdir(r3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xa0c01c, &(0x7f0000000340)={[{@oldalloc}, {@noauto_da_alloc}, {@barrier}, {@dioread_nolock}]}, 0x1, 0x503, &(0x7f0000000880)="$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") 794.337778ms ago: executing program 2 (id=1386): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x80ffff) 782.256279ms ago: executing program 1 (id=1387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 728.441489ms ago: executing program 0 (id=1388): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 682.93131ms ago: executing program 0 (id=1390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 681.26267ms ago: executing program 5 (id=1391): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd25, 0xfffffff8}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0) 679.09986ms ago: executing program 0 (id=1392): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='security.apparmor\x00') 592.750051ms ago: executing program 0 (id=1394): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000004}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) unlinkat(r2, &(0x7f0000000080)='./bus/file0\x00', 0x200) 562.094522ms ago: executing program 5 (id=1395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xf, 0x4, 0x8, 0xacc, 0x120, 0x1}, 0x50) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r2], 0x20}}, 0x0) 520.594612ms ago: executing program 5 (id=1397): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 520.014663ms ago: executing program 0 (id=1398): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$eJzs3d9rU+cbAPDnpKm/v99WENnGGAUv5nCmtt0PB7twl2OTCdu9C2ks0tRIk4rthOnFvNnNkMEYE8but3svZf/A/gphCjKkbBe76TjpSW1t0jbamur5fCDyvnlP+p7nvOd5fU9OQgLIrZH0n0LEqxHxXRIxFBFJ1laMrHFkebvFR9cq6SOJpaXP/0pa26X19t9qv+5gVnklIn7/JuJEYX2/jfmF6XKtVp3N6qPNmcujjfmFkxdnylPVqeql8YmJ0+9OjH/w/nvbFutb5/758bO7H5/+9tjiD789OHwriTNxKGtbHcem9nVtub66MhIj2TEZjDNPbDjWy46/AJJ+7wBPZSDL88FI54ChGMiyHnj5fR0RS0BOJfIfcqq9Dmhf2/d0HfwSePjR8gXQ+viLy++NxL7WtdGBxWTNlVF6vTu8Df2nfdy5f/tW+ohe34cAeAbXb0TEqWJx/fyXZPPf0zu1hW2e7MP8B8/P3XT983an9U9hZf0THdY/Bzvk7tPYPP8LD7ahm67S9d+HHde/Kzethgey2v9aa77B5MLFWjWd2/4fEcdjcG9a3+h+zunFe0vd2lav/+6kh/rRtUp7LZjtx4Pi3rWvmSw3y88S82oPb0S81nH9m6yMf9Jh/NPjcW6LfRyt3n6jW9ua+O/fvrW4Lv6dtfRLxJsdx//xHa1k4/uTo63zYbR9Vqz3982jf3Trv9/xp+N/YOP4h5PV92sbvffx875/q93a1sQfneLvfP7vSb5olfdkz10tN5uzYxF7kk/XPz/++LXtenv7NP7jxzae/zqd//sj4sstxn/zyK+vbyn+Po3/ZE/j33vh3idf/dSt/83jT8f/nVbpePZMNv8NbRTXVnfwWY8fAAAAAAAA7CaFiDgUSaG0Ui4USqXlz3cciQOFWr3RPHGhPndpMlrflR2OwUL7TvfQqs9DjGWfh23Xx5+oT0TE4Yj4fmB/q16q1GuT/Q4eAAAAAAAAAAAAAAAAAAAAdomDXb7/n/pzoN97B+w4P/kN+bVp/m/HLz0Bu5L//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAA2+rc2bPpY2nx0bVKWp+8Mj83Xb9ycrLamC7NzFVKlfrs5dJUvT5Vq5Yq9ZnN/l6tXr88Nh5zV0eb1UZztDG/cH6mPnepef7iTHmqer46+FyiAgAAAAAAAAAAAAAAAAAAgBdLY35hulyrVWd3qpDsfBcK/SwUd8du5KdQjOfSV79nJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB47L8AAAD//84fMw8=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r2, 0x0, 0x0, 0x8000c62) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x100000800000009) 440.548484ms ago: executing program 5 (id=1400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000c00)={[], [{@smackfsroot={'smackfsroot', 0x3d, ')'}}, {@uid_lt}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, 'GPL\x00'}}]}, 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendto$packet(r0, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 236.920217ms ago: executing program 1 (id=1405): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 226.808507ms ago: executing program 5 (id=1406): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) 189.453337ms ago: executing program 6 (id=1407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) close(r0) 49.08128ms ago: executing program 6 (id=1408): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 6 (id=1409): syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60000000001406"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x3e) kernel console output (not intermixed with test programs): sysadm_t tclass=dir permissive=1 [ 50.704866][ T29] audit: type=1400 audit(1752435245.432:392): avc: denied { bind } for pid=4250 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.724245][ T29] audit: type=1400 audit(1752435245.432:393): avc: denied { listen } for pid=4250 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.743755][ T29] audit: type=1400 audit(1752435245.442:394): avc: denied { write } for pid=4250 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.847275][ T4274] SELinux: Context is not valid (left unmapped). [ 50.889228][ T4264] netlink: 'syz.0.256': attribute type 4 has an invalid length. [ 50.900413][ T4282] loop3: detected capacity change from 0 to 256 [ 50.937366][ T4284] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 50.987656][ T29] audit: type=1400 audit(1752435245.762:395): avc: denied { read } for pid=4287 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 51.034001][ T29] audit: type=1400 audit(1752435245.792:396): avc: denied { mounton } for pid=4280 comm="syz.3.262" path="/57/file0/bus" dev="loop3" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 51.035093][ T4291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.267'. [ 51.056668][ T29] audit: type=1400 audit(1752435245.792:397): avc: denied { append } for pid=4280 comm="syz.3.262" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.068811][ T4282] loop3: detected capacity change from 256 to 0 [ 51.098529][ T4289] loop5: detected capacity change from 0 to 8192 [ 51.124476][ T3305] syz-executor: attempt to access beyond end of device [ 51.124476][ T3305] loop3: rw=0, sector=12, nr_sectors = 4 limit=0 [ 51.138759][ T3305] FAT-fs (loop3): Directory bread(block 3) failed [ 51.168608][ T3305] syz-executor: attempt to access beyond end of device [ 51.168608][ T3305] loop3: rw=0, sector=0, nr_sectors = 4 limit=0 [ 51.194140][ T3305] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 51.285959][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.293648][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.307778][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.315300][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.322795][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.330305][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.337938][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.345474][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.353016][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.360572][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.368022][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.375502][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.383613][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.391103][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.398596][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.406276][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.413796][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.421317][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.428793][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.436230][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.443721][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.451261][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.458685][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.466151][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.473587][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.481120][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.488518][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.497151][ T1035] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 51.556206][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.628990][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.693418][ T4322] Illegal XDP return value 75 on prog (id 253) dev N/A, expect packet loss! [ 51.712772][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.765365][ T4333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 51.797348][ T4333] team1: entered promiscuous mode [ 51.825227][ T4333] team1: entered allmulticast mode [ 51.838285][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.857363][ T4343] loop1: detected capacity change from 0 to 1024 [ 51.941814][ T4343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.973884][ T4343] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.287: Allocating blocks 385-513 which overlap fs metadata [ 52.027765][ T4343] EXT4-fs (loop1): pa ffff888106aa3000: logic 16, phys. 129, len 24 [ 52.035907][ T4343] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 52.078784][ T51] bridge_slave_1: left allmulticast mode [ 52.084559][ T51] bridge_slave_1: left promiscuous mode [ 52.090322][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.101406][ T51] bridge_slave_0: left allmulticast mode [ 52.107154][ T51] bridge_slave_0: left promiscuous mode [ 52.113009][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.215104][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.333895][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.353235][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.364611][ T4371] loop1: detected capacity change from 0 to 1024 [ 52.374041][ T51] bond0 (unregistering): Released all slaves [ 52.393974][ T4371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.436015][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.473376][ T4318] chnl_net:caif_netlink_parms(): no params data found [ 52.513346][ T51] hsr_slave_0: left promiscuous mode [ 52.519138][ T51] hsr_slave_1: left promiscuous mode [ 52.549803][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.557350][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.579615][ T4391] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 52.601060][ T4397] loop1: detected capacity change from 0 to 128 [ 52.610404][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.618231][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.677157][ T51] veth1_macvtap: left promiscuous mode [ 52.685304][ T4410] netlink: 'syz.1.309': attribute type 17 has an invalid length. [ 52.693312][ T4410] netlink: 152 bytes leftover after parsing attributes in process `syz.1.309'. [ 52.704709][ T51] veth0_macvtap: left promiscuous mode [ 52.710274][ T51] veth1_vlan: left promiscuous mode [ 52.718583][ T51] veth0_vlan: left promiscuous mode [ 52.842846][ T51] team0 (unregistering): Port device team_slave_1 removed [ 52.862281][ T4416] loop2: detected capacity change from 0 to 8192 [ 52.871122][ T51] team0 (unregistering): Port device team_slave_0 removed [ 52.948020][ T4410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.073248][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.080376][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.105675][ T4318] bridge_slave_0: entered allmulticast mode [ 53.117058][ T3314] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 53.121740][ T4318] bridge_slave_0: entered promiscuous mode [ 53.125159][ T3314] FAT-fs (loop2): Filesystem has been set read-only [ 53.140695][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.147941][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.155380][ T4318] bridge_slave_1: entered allmulticast mode [ 53.162370][ T4318] bridge_slave_1: entered promiscuous mode [ 53.227415][ T4318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.260685][ T4318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.337730][ T4318] team0: Port device team_slave_0 added [ 53.352334][ T4318] team0: Port device team_slave_1 added [ 53.445105][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.452183][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.478240][ T4318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.500265][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.507402][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.507540][ T4471] loop5: detected capacity change from 0 to 512 [ 53.533453][ T4318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.557307][ T4471] EXT4-fs: Ignoring removed oldalloc option [ 53.577778][ T4471] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.591010][ T4471] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 53.622214][ T4318] hsr_slave_0: entered promiscuous mode [ 53.628425][ T4318] hsr_slave_1: entered promiscuous mode [ 53.634708][ T4318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.642756][ T4471] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 53.655916][ T4318] Cannot create hsr debugfs directory [ 53.666635][ T4471] EXT4-fs (loop5): 1 truncate cleaned up [ 53.681088][ T4471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.789264][ T3898] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.809827][ T4318] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 53.831330][ T4318] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 53.842080][ T4318] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 53.866016][ T4318] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 53.893151][ T4511] loop5: detected capacity change from 0 to 164 [ 53.919634][ T4511] Unable to read rock-ridge attributes [ 53.990444][ T4524] netlink: 202732 bytes leftover after parsing attributes in process `syz.0.338'. [ 54.012365][ T4521] bridge_slave_0: left allmulticast mode [ 54.018106][ T4521] bridge_slave_0: left promiscuous mode [ 54.020005][ T4524] netlink: zone id is out of range [ 54.023868][ T4521] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.028872][ T4524] netlink: zone id is out of range [ 54.041258][ T4524] netlink: zone id is out of range [ 54.046651][ T4524] netlink: zone id is out of range [ 54.051844][ T4524] netlink: zone id is out of range [ 54.057046][ T4524] netlink: zone id is out of range [ 54.062237][ T4524] netlink: zone id is out of range [ 54.067364][ T4524] netlink: zone id is out of range [ 54.074633][ T4521] bridge_slave_1: left allmulticast mode [ 54.080342][ T4521] bridge_slave_1: left promiscuous mode [ 54.086309][ T4521] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.101586][ T4521] team0: Port device team_slave_0 removed [ 54.111262][ T4521] team0: Port device team_slave_1 removed [ 54.118162][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.125805][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.141756][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.149239][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.212130][ T4318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.246831][ T4318] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.264868][ T1909] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.272016][ T1909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.294211][ T1909] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.301380][ T1909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.452940][ T4554] process 'syz.0.347' launched '/dev/fd/5' with NULL argv: empty string added [ 54.466574][ T4558] atomic_op ffff888104696d28 conn xmit_atomic 0000000000000000 [ 54.469947][ T4318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.600461][ T4567] loop2: detected capacity change from 0 to 4096 [ 54.631022][ T4567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.676292][ T4580] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.350'. [ 54.685559][ T4580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 54.783938][ T4596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 54.799041][ T4318] veth0_vlan: entered promiscuous mode [ 54.817072][ T4598] mmap: syz.5.353 (4598) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.819159][ T4318] veth1_vlan: entered promiscuous mode [ 54.863808][ T4318] veth0_macvtap: entered promiscuous mode [ 54.885918][ T4318] veth1_macvtap: entered promiscuous mode [ 54.915729][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.935440][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 54.946281][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.958443][ T4318] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.967307][ T4318] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.976153][ T4318] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.985012][ T4318] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.024921][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 55.180163][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 55.180182][ T29] audit: type=1400 audit(1752435249.952:472): avc: denied { read append } for pid=4624 comm="syz.6.276" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 55.180223][ T4625] random: crng reseeded on system resumption [ 55.224017][ T29] audit: type=1400 audit(1752435249.952:473): avc: denied { ioctl open } for pid=4624 comm="syz.6.276" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 55.399537][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.460739][ T4648] loop5: detected capacity change from 0 to 512 [ 55.515035][ T4648] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.540665][ T4648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.553366][ T29] audit: type=1326 audit(1752435250.322:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5622e929 code=0x7ffc0000 [ 55.576865][ T29] audit: type=1326 audit(1752435250.322:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5622e929 code=0x7ffc0000 [ 55.600130][ T29] audit: type=1326 audit(1752435250.322:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efc5622e929 code=0x7ffc0000 [ 55.603070][ T4648] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.623308][ T29] audit: type=1326 audit(1752435250.322:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5622e929 code=0x7ffc0000 [ 55.656827][ T29] audit: type=1326 audit(1752435250.322:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5622e929 code=0x7ffc0000 [ 55.680127][ T29] audit: type=1326 audit(1752435250.322:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc5622e929 code=0x7ffc0000 [ 55.703582][ T29] audit: type=1326 audit(1752435250.332:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5622e929 code=0x7ffc0000 [ 55.705577][ T4671] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.726882][ T29] audit: type=1326 audit(1752435250.332:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5622e929 code=0x7ffc0000 [ 55.776839][ T3898] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.858660][ T4684] loop5: detected capacity change from 0 to 512 [ 55.873244][ T4684] EXT4-fs: Ignoring removed oldalloc option [ 55.897429][ T4684] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 55.914186][ T4684] EXT4-fs (loop5): 1 truncate cleaned up [ 55.930757][ T4684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.009062][ T3898] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.109237][ T4716] loop5: detected capacity change from 0 to 4096 [ 56.121633][ T4716] EXT4-fs: test_dummy_encryption option not supported [ 56.419111][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.426641][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.444708][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.452251][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.459866][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.467345][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.474898][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.482356][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.489766][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.497288][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.504796][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.512267][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.520255][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.527837][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.535401][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.542916][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.550328][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.557807][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.565315][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.572761][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.580182][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.587711][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.595153][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.602592][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.610137][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.617600][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.625129][ T3473] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.633685][ T3473] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 56.655487][ T4755] fido_id[4755]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.751290][ T4767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.398'. [ 56.778872][ T4769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 56.787774][ T4769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 56.861502][ T4775] sd 0:0:1:0: device reset [ 56.913605][ T4671] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.953749][ T4785] loop2: detected capacity change from 0 to 1024 [ 56.966113][ T4785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.996318][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.107199][ T4794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4794 comm=syz.2.409 [ 57.378559][ T4810] wireguard0: entered promiscuous mode [ 57.605849][ T4840] syzkaller0: entered promiscuous mode [ 57.611508][ T4840] syzkaller0: entered allmulticast mode [ 57.674517][ T4850] loop5: detected capacity change from 0 to 128 [ 57.690463][ T4852] loop1: detected capacity change from 0 to 512 [ 57.697660][ T4852] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 57.733048][ T4850] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 57.741094][ T4850] FAT-fs (loop5): Filesystem has been set read-only [ 57.756129][ T4850] syz.5.429: attempt to access beyond end of device [ 57.756129][ T4850] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 57.770525][ T4850] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 57.778463][ T4850] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 57.790182][ T4859] syz.5.429: attempt to access beyond end of device [ 57.790182][ T4859] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 57.803598][ T4859] Buffer I/O error on dev loop5, logical block 2065, async page read [ 57.813614][ T4859] syz.5.429: attempt to access beyond end of device [ 57.813614][ T4859] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 57.817575][ T4857] loop1: detected capacity change from 0 to 1024 [ 57.826880][ T4859] Buffer I/O error on dev loop5, logical block 2066, async page read [ 57.827249][ T4859] syz.5.429: attempt to access beyond end of device [ 57.827249][ T4859] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 57.855325][ T4859] Buffer I/O error on dev loop5, logical block 2067, async page read [ 57.855987][ T4857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.874311][ T4859] syz.5.429: attempt to access beyond end of device [ 57.874311][ T4859] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 57.887620][ T4859] Buffer I/O error on dev loop5, logical block 2068, async page read [ 57.899683][ T4859] syz.5.429: attempt to access beyond end of device [ 57.899683][ T4859] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 57.912953][ T4859] Buffer I/O error on dev loop5, logical block 2069, async page read [ 57.916479][ T4857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.921668][ T4859] syz.5.429: attempt to access beyond end of device [ 57.921668][ T4859] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 57.946688][ T4859] Buffer I/O error on dev loop5, logical block 2070, async page read [ 57.955009][ T4859] syz.5.429: attempt to access beyond end of device [ 57.955009][ T4859] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 57.968224][ T4859] Buffer I/O error on dev loop5, logical block 2071, async page read [ 57.990102][ T4859] syz.5.429: attempt to access beyond end of device [ 57.990102][ T4859] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 58.003407][ T4859] Buffer I/O error on dev loop5, logical block 2072, async page read [ 58.013692][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.022769][ T4850] syz.5.429: attempt to access beyond end of device [ 58.022769][ T4850] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 58.036066][ T4850] Buffer I/O error on dev loop5, logical block 2065, async page read [ 58.044390][ T4850] Buffer I/O error on dev loop5, logical block 2066, async page read [ 58.393815][ T4671] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.454466][ T4671] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.537954][ T4671] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.566143][ T4671] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.594707][ T4671] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.615990][ T4671] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.700821][ T4900] loop6: detected capacity change from 0 to 1024 [ 58.713108][ T4900] EXT4-fs: Ignoring removed orlov option [ 58.733978][ T4900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.812140][ T3473] kernel write not supported for file /9/loginuid (pid: 3473 comm: kworker/0:5) [ 58.851168][ T4318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.113864][ T4933] netlink: 14 bytes leftover after parsing attributes in process `syz.6.462'. [ 59.130263][ T4935] loop5: detected capacity change from 0 to 1024 [ 59.144647][ T4933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.155473][ T4935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.188328][ T4933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.214160][ T4933] bond0 (unregistering): Released all slaves [ 59.230667][ T4939] netem: change failed [ 59.241899][ T3898] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.284072][ T4945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.468'. [ 59.325226][ T4948] loop5: detected capacity change from 0 to 2048 [ 59.353496][ T4948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.426458][ T3898] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.450398][ T4955] syzkaller0: entered promiscuous mode [ 59.455972][ T4955] syzkaller0: entered allmulticast mode [ 59.468522][ T4958] random: crng reseeded on system resumption [ 59.517471][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.472'. [ 59.986626][ T4994] pim6reg: entered allmulticast mode [ 59.995612][ T4994] pim6reg: left allmulticast mode [ 60.008238][ T4995] syz.5.489 (4995) used greatest stack depth: 9048 bytes left [ 60.028059][ T4997] netlink: 'syz.5.490': attribute type 3 has an invalid length. [ 60.147521][ T5007] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 60.187310][ T5011] netlink: 'syz.2.497': attribute type 4 has an invalid length. [ 60.195095][ T5011] netlink: 152 bytes leftover after parsing attributes in process `syz.2.497'. [ 60.287340][ T5021] loop5: detected capacity change from 0 to 1024 [ 60.296724][ T5021] EXT4-fs: Ignoring removed bh option [ 60.354947][ T5021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 60.392235][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 60.392251][ T29] audit: type=1400 audit(1752435255.172:652): avc: denied { connect } for pid=5032 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.577233][ T5047] loop2: detected capacity change from 0 to 1024 [ 60.592892][ T5047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.615855][ T5047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.688667][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.123081][ T3898] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 61.255568][ T5072] loop5: detected capacity change from 0 to 128 [ 61.383366][ T29] audit: type=1400 audit(1752435256.162:653): avc: denied { create } for pid=5082 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.387398][ T5083] vxcan1 speed is unknown, defaulting to 1000 [ 61.420190][ T5083] vxcan1 speed is unknown, defaulting to 1000 [ 61.421537][ T29] audit: type=1400 audit(1752435256.162:654): avc: denied { write } for pid=5082 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.432347][ T5083] vxcan1 speed is unknown, defaulting to 1000 [ 61.446343][ T29] audit: type=1326 audit(1752435256.192:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5079 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4782bee929 code=0x7ffc0000 [ 61.475903][ T29] audit: type=1326 audit(1752435256.192:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5079 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4782bee929 code=0x7ffc0000 [ 61.499125][ T29] audit: type=1326 audit(1752435256.192:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5079 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4782bee929 code=0x7ffc0000 [ 61.522645][ T29] audit: type=1326 audit(1752435256.192:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5079 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4782bee929 code=0x7ffc0000 [ 61.545920][ T29] audit: type=1326 audit(1752435256.192:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5079 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4782bee929 code=0x7ffc0000 [ 61.569278][ T29] audit: type=1326 audit(1752435256.192:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5079 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f4782bee929 code=0x7ffc0000 [ 61.592721][ T29] audit: type=1326 audit(1752435256.192:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5079 comm="syz.5.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4782bee929 code=0x7ffc0000 [ 61.632509][ T5083] infiniband syZ2: set active [ 61.637265][ T5083] infiniband syZ2: added vxcan1 [ 61.642582][ T4367] vxcan1 speed is unknown, defaulting to 1000 [ 61.681242][ T5083] RDS/IB: syZ2: added [ 61.689564][ T5083] smc: adding ib device syZ2 with port count 1 [ 61.697084][ T5083] smc: ib device syZ2 port 1 has pnetid [ 61.703136][ T4367] vxcan1 speed is unknown, defaulting to 1000 [ 61.709369][ T5083] vxcan1 speed is unknown, defaulting to 1000 [ 61.750189][ T5083] vxcan1 speed is unknown, defaulting to 1000 [ 61.790987][ T5099] atomic_op ffff8881131f7d28 conn xmit_atomic 0000000000000000 [ 61.803972][ T5083] vxcan1 speed is unknown, defaulting to 1000 [ 61.857633][ T5083] vxcan1 speed is unknown, defaulting to 1000 [ 61.917411][ T5083] vxcan1 speed is unknown, defaulting to 1000 [ 62.113326][ T5139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 62.280932][ T5157] loop2: detected capacity change from 0 to 512 [ 62.289214][ T5157] EXT4-fs: Ignoring removed bh option [ 62.323927][ T5157] EXT4-fs error (device loop2): __ext4_iget:5379: inode #15: block 1803188595: comm syz.2.541: invalid block [ 62.347343][ T5157] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.541: couldn't read orphan inode 15 (err -117) [ 62.360320][ T5157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.406940][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.515766][ T5187] loop2: detected capacity change from 0 to 512 [ 62.530389][ T5187] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.556243][ T5187] EXT4-fs (loop2): 1 truncate cleaned up [ 62.564654][ T5187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.581870][ T5187] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.910179][ T5240] netlink: 4 bytes leftover after parsing attributes in process `syz.6.564'. [ 62.926734][ T5240] netlink: 4 bytes leftover after parsing attributes in process `syz.6.564'. [ 63.041110][ T5257] vhci_hcd: invalid port number 96 [ 63.046310][ T5257] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 63.137273][ T3382] IPVS: starting estimator thread 0... [ 63.145481][ T5267] net_ratelimit: 4 callbacks suppressed [ 63.145497][ T5267] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 63.230895][ T5276] IPVS: using max 1824 ests per chain, 91200 per kthread [ 63.257699][ T5292] loop5: detected capacity change from 0 to 164 [ 63.302883][ T5289] loop6: detected capacity change from 0 to 1024 [ 63.318220][ T5289] EXT4-fs: Ignoring removed oldalloc option [ 63.340814][ T5292] Unable to read rock-ridge attributes [ 63.350372][ T5289] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.373969][ T5292] Unable to read rock-ridge attributes [ 63.416025][ T4318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.570709][ T5329] netlink: 'syz.5.589': attribute type 1 has an invalid length. [ 63.617696][ T5337] loop6: detected capacity change from 0 to 164 [ 63.627504][ T5337] Unable to read rock-ridge attributes [ 63.646414][ T5337] Unable to read rock-ridge attributes [ 63.780979][ T5349] netlink: 14 bytes leftover after parsing attributes in process `syz.0.597'. [ 63.823063][ T5349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.848048][ T5349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.870285][ T5349] bond0 (unregistering): Released all slaves [ 64.165444][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'. [ 64.175730][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'. [ 64.198664][ T5307] 9pnet_fd: p9_fd_create_tcp (5307): problem connecting socket to 127.0.0.1 [ 64.281127][ T5387] vhci_hcd: invalid port number 96 [ 64.286361][ T5387] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 64.422220][ T5404] vxcan1 speed is unknown, defaulting to 1000 [ 64.497896][ T5418] loop6: detected capacity change from 0 to 128 [ 64.543478][ T5420] loop2: detected capacity change from 0 to 1024 [ 64.580605][ T5420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.603933][ T5420] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #14: comm syz.2.618: attempt to clear invalid blocks 1886221359 len 1 [ 64.604153][ T5432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.622'. [ 64.629750][ T5420] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #14: comm syz.2.618: invalid indirect mapped block 262147 (level 1) [ 64.647453][ T5420] EXT4-fs error (device loop2): ext4_mb_clear_bb:6420: comm syz.2.618: Freeing blocks in system zone - Block = 0, count = 16 [ 64.697982][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.749769][ T5440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'. [ 64.758787][ T5440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.624'. [ 64.767987][ T5440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'. [ 64.787783][ T5440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.624'. [ 64.796894][ T5440] netlink: 'syz.2.624': attribute type 6 has an invalid length. [ 64.871631][ T5449] vhci_hcd: invalid port number 96 [ 64.876901][ T5449] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 64.935278][ T5458] loop2: detected capacity change from 0 to 1024 [ 64.943748][ T5458] EXT4-fs: Ignoring removed oldalloc option [ 64.963722][ T5458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.021904][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.110800][ T5476] loop6: detected capacity change from 0 to 512 [ 65.126569][ T5476] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 65.138502][ T5476] EXT4-fs (loop6): 1 truncate cleaned up [ 65.144875][ T5476] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.234088][ T4318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.235926][ T5486] loop2: detected capacity change from 0 to 128 [ 65.353331][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.360939][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.422447][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.429920][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.433339][ T5492] vxcan1 speed is unknown, defaulting to 1000 [ 65.437402][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.450944][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.458486][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.466135][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.473619][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.481084][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.488506][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.495977][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.511994][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.519462][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.526977][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.534566][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.542113][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.549530][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.557029][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.564476][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.572019][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.579441][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.586903][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.594406][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.601850][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.609342][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.616869][ T1035] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.645338][ T1035] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 65.715896][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 65.715911][ T29] audit: type=1400 audit(1752435260.492:707): avc: denied { connect } for pid=5512 comm="syz.1.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.748780][ T5506] fido_id[5506]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.788327][ T29] audit: type=1326 audit(1752435260.562:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44195ee929 code=0x7ffc0000 [ 65.811672][ T29] audit: type=1326 audit(1752435260.562:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44195ee929 code=0x7ffc0000 [ 65.838488][ T29] audit: type=1326 audit(1752435260.612:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44195ee929 code=0x7ffc0000 [ 65.863700][ T29] audit: type=1326 audit(1752435260.612:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44195ee929 code=0x7ffc0000 [ 65.887237][ T29] audit: type=1326 audit(1752435260.612:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44195ee929 code=0x7ffc0000 [ 65.910667][ T29] audit: type=1326 audit(1752435260.642:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44195ee929 code=0x7ffc0000 [ 65.934091][ T29] audit: type=1326 audit(1752435260.642:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44195ee929 code=0x7ffc0000 [ 65.957373][ T29] audit: type=1326 audit(1752435260.642:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44195ee929 code=0x7ffc0000 [ 65.996266][ T5515] loop1: detected capacity change from 0 to 1024 [ 66.003989][ T29] audit: type=1326 audit(1752435260.702:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5516 comm="syz.5.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4782bee929 code=0x7ffc0000 [ 66.049150][ T5520] loop5: detected capacity change from 0 to 1024 [ 66.060265][ T5520] EXT4-fs: Ignoring removed oldalloc option [ 66.076243][ T5515] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #14: comm syz.1.656: attempt to clear invalid blocks 1886221359 len 1 [ 66.109095][ T5515] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #14: comm syz.1.656: invalid indirect mapped block 262147 (level 1) [ 66.130375][ T5515] EXT4-fs error (device loop1): ext4_mb_clear_bb:6420: comm syz.1.656: Freeing blocks in system zone - Block = 0, count = 16 [ 66.257032][ T5544] loop1: detected capacity change from 0 to 512 [ 66.287411][ T5544] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.310313][ T5544] EXT4-fs (loop1): 1 truncate cleaned up [ 66.617151][ T5594] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 66.625637][ T5594] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 66.803933][ T5608] loop1: detected capacity change from 0 to 164 [ 66.823943][ T5608] Unable to read rock-ridge attributes [ 66.837399][ T5608] Unable to read rock-ridge attributes [ 66.904101][ T5616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 66.983227][ T5616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 67.182222][ T5649] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.189581][ T5649] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 67.263815][ T5648] loop5: detected capacity change from 0 to 8192 [ 67.441710][ T5677] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.707'. [ 67.485485][ T3898] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 67.493433][ T3898] FAT-fs (loop5): Filesystem has been set read-only [ 67.582613][ T5693] loop5: detected capacity change from 0 to 1024 [ 67.590250][ T5693] EXT4-fs: Ignoring removed orlov option [ 67.607362][ T5693] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 67.649628][ T5693] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.708: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 67.996548][ T5742] loop2: detected capacity change from 0 to 4096 [ 68.012665][ T5742] EXT4-fs: test_dummy_encryption option not supported [ 68.278330][ T5773] loop2: detected capacity change from 0 to 1024 [ 68.295682][ T5773] EXT4-fs: Ignoring removed orlov option [ 68.302354][ T5773] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 68.325133][ T5773] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.725: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 68.410746][ T5788] loop1: detected capacity change from 0 to 1024 [ 68.419894][ T5788] EXT4-fs: Ignoring removed orlov option [ 68.428462][ T5788] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 68.447685][ T5788] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.741: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 68.532496][ T5804] loop9: detected capacity change from 0 to 7 [ 68.551334][ T3299] buffer_io_error: 47766 callbacks suppressed [ 68.551362][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.566047][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.573945][ T3299] loop9: unable to read partition table [ 68.583659][ T5804] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.593070][ T5804] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.601126][ T5804] loop9: unable to read partition table [ 68.607834][ T5804] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 68.607834][ T5804] ) failed (rc=-5) [ 68.621800][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.629886][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.638376][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.681787][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.693343][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.709715][ T5817] loop1: detected capacity change from 0 to 1024 [ 68.740643][ T5817] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.736: Allocating blocks 449-513 which overlap fs metadata [ 68.765961][ T5815] EXT4-fs (loop1): pa ffff88810699a1c0: logic 48, phys. 177, len 21 [ 68.774140][ T5815] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 68.836784][ T5837] netlink: 'syz.1.744': attribute type 12 has an invalid length. [ 68.889214][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 68.927664][ T5844] wireguard0: entered promiscuous mode [ 69.032766][ T5849] loop6: detected capacity change from 0 to 1024 [ 69.039853][ T5849] EXT4-fs: Ignoring removed orlov option [ 69.046933][ T5849] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 69.092984][ T5849] EXT4-fs error (device loop6): ext4_check_all_de:659: inode #12: block 7: comm syz.6.746: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 69.126228][ T5857] loop5: detected capacity change from 0 to 512 [ 69.143825][ T5857] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.348306][ T5870] __nla_validate_parse: 3 callbacks suppressed [ 69.348321][ T5870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.753'. [ 69.487866][ T5877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.768'. [ 69.764238][ T5891] loop1: detected capacity change from 0 to 128 [ 70.008279][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 70.413220][ T5914] loop5: detected capacity change from 0 to 512 [ 70.423780][ T5914] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.452861][ T5914] EXT4-fs mount: 18 callbacks suppressed [ 70.452881][ T5914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.480980][ T5914] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.514610][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.773'. [ 70.669202][ T5927] loop1: detected capacity change from 0 to 128 [ 70.689616][ T3898] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.707325][ T5927] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 70.715305][ T5927] FAT-fs (loop1): Filesystem has been set read-only [ 70.741362][ T5927] bio_check_eod: 47767 callbacks suppressed [ 70.741389][ T5927] syz.1.786: attempt to access beyond end of device [ 70.741389][ T5927] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 70.772632][ T5927] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 70.780522][ T5927] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 70.793451][ T5927] syz.1.786: attempt to access beyond end of device [ 70.793451][ T5927] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.844272][ T5927] syz.1.786: attempt to access beyond end of device [ 70.844272][ T5927] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.871326][ T5949] syz.1.786: attempt to access beyond end of device [ 70.871326][ T5949] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 70.884577][ T5949] Buffer I/O error on dev loop1, logical block 2065, async page read [ 70.961409][ T5949] syz.1.786: attempt to access beyond end of device [ 70.961409][ T5949] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 70.974815][ T5949] syz.1.786: attempt to access beyond end of device [ 70.974815][ T5949] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 71.002492][ T5949] syz.1.786: attempt to access beyond end of device [ 71.002492][ T5949] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 71.027074][ T5949] syz.1.786: attempt to access beyond end of device [ 71.027074][ T5949] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 71.088564][ T5949] syz.1.786: attempt to access beyond end of device [ 71.088564][ T5949] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 71.105358][ T5949] syz.1.786: attempt to access beyond end of device [ 71.105358][ T5949] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 71.231030][ T5951] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.777'. [ 71.240174][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.5.777'. [ 71.420238][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.437644][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.783'. [ 71.447093][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.454577][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.462089][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.469589][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.477039][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.484551][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.492044][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.499586][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.507164][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.514754][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.522336][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.530301][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.537810][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.545327][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.552893][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.560377][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.567836][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.575619][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.583230][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.590676][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.598149][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.605595][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.613096][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.620547][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.628076][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 71.642216][ T1035] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz1] on syz0 [ 71.678339][ T6012] fido_id[6012]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.718825][ T6018] netlink: 'syz.6.788': attribute type 1 has an invalid length. [ 71.726789][ T6018] netlink: 'syz.6.788': attribute type 4 has an invalid length. [ 71.734607][ T6018] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.788'. [ 71.755227][ T6018] netlink: 'syz.6.788': attribute type 1 has an invalid length. [ 71.762965][ T6018] netlink: 'syz.6.788': attribute type 4 has an invalid length. [ 71.770752][ T6018] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.788'. [ 71.882010][ T6035] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.947030][ T6040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.797'. [ 71.961441][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 71.961458][ T29] audit: type=1400 audit(1752435266.742:802): avc: denied { create } for pid=6041 comm="syz.6.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.002711][ T29] audit: type=1400 audit(1752435266.762:803): avc: denied { write } for pid=6041 comm="syz.6.798" path="socket:[12645]" dev="sockfs" ino=12645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.073106][ T6050] loop6: detected capacity change from 0 to 512 [ 72.086441][ T6050] EXT4-fs (loop6): orphan cleanup on readonly fs [ 72.101558][ T6050] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.803: bg 0: block 248: padding at end of block bitmap is not set [ 72.108951][ T29] audit: type=1400 audit(1752435266.882:804): avc: denied { ioctl } for pid=6055 comm="syz.1.804" path="socket:[12666]" dev="sockfs" ino=12666 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.119756][ T6050] Quota error (device loop6): write_blk: dquota write failed [ 72.148904][ T6050] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 72.159270][ T6050] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.803: Failed to acquire dquot type 1 [ 72.173161][ T6050] EXT4-fs (loop6): 1 truncate cleaned up [ 72.179694][ T6050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.194310][ T6058] vxcan1 speed is unknown, defaulting to 1000 [ 72.201832][ T6050] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 72.226524][ T6050] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 72.255638][ T4318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.370582][ T6071] SELinux: Context system_u:object is not valid (left unmapped). [ 72.379514][ T29] audit: type=1400 audit(1752435267.152:805): avc: denied { relabelto } for pid=6070 comm="syz.6.809" name="cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 72.405179][ T29] audit: type=1400 audit(1752435267.152:806): avc: denied { associate } for pid=6070 comm="syz.6.809" name="cgroup.procs" dev="cgroup" ino=347 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 72.530397][ T6082] netlink: 'syz.1.813': attribute type 3 has an invalid length. [ 72.586271][ T6090] serio: Serial port ptm0 [ 72.595855][ T6094] netlink: 'syz.5.818': attribute type 1 has an invalid length. [ 72.842717][ T29] audit: type=1400 audit(1752435267.602:807): avc: denied { append } for pid=6112 comm="syz.0.827" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.886573][ T6116] vlan2: entered allmulticast mode [ 72.895544][ T6116] dummy0: entered allmulticast mode [ 72.950466][ T6123] loop5: detected capacity change from 0 to 128 [ 72.965721][ T6123] EXT4-fs: Ignoring removed nobh option [ 72.991176][ T6120] loop1: detected capacity change from 0 to 512 [ 73.003357][ T6126] loop6: detected capacity change from 0 to 1024 [ 73.017860][ T6123] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.040018][ T6123] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.056836][ T6126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.083378][ T29] audit: type=1400 audit(1752435267.852:808): avc: denied { create } for pid=6122 comm="syz.5.831" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 73.116280][ T6126] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 73.122021][ T3898] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.133831][ T6120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.155670][ T6120] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.167476][ T4318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.246626][ T6141] cgroup: fork rejected by pids controller in /syz5 [ 73.259268][ T6149] loop2: detected capacity change from 0 to 512 [ 73.274603][ T29] audit: type=1326 audit(1752435268.052:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6144 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5622e929 code=0x7ffc0000 [ 73.329582][ T6149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.370916][ T6149] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.412177][ T6156] capability: warning: `syz.0.842' uses 32-bit capabilities (legacy support in use) [ 73.453024][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.471205][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.521528][ T6160] loop1: detected capacity change from 0 to 1024 [ 73.528615][ T6160] EXT4-fs: Ignoring removed orlov option [ 73.576783][ T6160] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 73.594518][ T6163] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 73.610074][ T6160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.672380][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.739290][ T6178] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.757333][ T6178] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 73.833482][ T6187] loop1: detected capacity change from 0 to 512 [ 73.846866][ T6187] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.877793][ T6187] EXT4-fs (loop1): 1 truncate cleaned up [ 73.888326][ T6187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.903637][ T6187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.974030][ T6188] vxcan1 speed is unknown, defaulting to 1000 [ 74.053128][ T6188] chnl_net:caif_netlink_parms(): no params data found [ 74.089907][ T6188] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.097129][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.104379][ T6188] bridge_slave_0: entered allmulticast mode [ 74.110952][ T6188] bridge_slave_0: entered promiscuous mode [ 74.117793][ T6188] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.124987][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.132910][ T6188] bridge_slave_1: entered allmulticast mode [ 74.139559][ T6188] bridge_slave_1: entered promiscuous mode [ 74.158841][ T6188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.169202][ T6188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.190036][ T6188] team0: Port device team_slave_0 added [ 74.196790][ T6188] team0: Port device team_slave_1 added [ 74.212971][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.220023][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.246160][ T6188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.257665][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.264672][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.290777][ T6188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.318374][ T6188] hsr_slave_0: entered promiscuous mode [ 74.324674][ T6188] hsr_slave_1: entered promiscuous mode [ 74.330719][ T6188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.338358][ T6188] Cannot create hsr debugfs directory [ 74.394686][ T6188] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.433754][ T6188] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.493342][ T6188] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.553813][ T6188] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.647975][ T6188] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.657009][ T6188] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.668394][ T6188] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.678018][ T6188] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.715537][ T6188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.721389][ T6188] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.774699][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.781890][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.797243][ T6225] SELinux: ebitmap: truncated map [ 74.804595][ T6225] SELinux: failed to load policy [ 74.811569][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.818771][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.872120][ T6234] vxcan1 speed is unknown, defaulting to 1000 [ 74.923745][ T6188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.988649][ T6253] loop6: detected capacity change from 0 to 512 [ 74.992612][ T6250] __nla_validate_parse: 8 callbacks suppressed [ 74.992633][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 75.033126][ T6253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.067925][ T6253] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.235410][ T6272] netlink: 1 bytes leftover after parsing attributes in process `syz.2.874'. [ 75.257638][ T4318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.317450][ T6188] veth0_vlan: entered promiscuous mode [ 75.331769][ T6188] veth1_vlan: entered promiscuous mode [ 75.373250][ T6188] veth0_macvtap: entered promiscuous mode [ 75.381581][ T6188] veth1_macvtap: entered promiscuous mode [ 75.433587][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.449957][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.464254][ T6188] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.473224][ T6188] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.482094][ T6188] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.490948][ T6188] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.586619][ T6000] nci: nci_rsp_packet: unknown rsp opcode 0x10c [ 75.696544][ T6315] vlan2: entered allmulticast mode [ 75.702167][ T6315] dummy0: entered allmulticast mode [ 75.852242][ T6322] vxcan1 speed is unknown, defaulting to 1000 [ 76.462660][ T6349] vlan2: entered allmulticast mode [ 76.480003][ T6349] dummy0: entered allmulticast mode [ 76.576924][ T6340] vxcan1 speed is unknown, defaulting to 1000 [ 76.631881][ T6359] netlink: 'syz.1.908': attribute type 4 has an invalid length. [ 76.666188][ T6364] netlink: 96 bytes leftover after parsing attributes in process `syz.1.911'. [ 76.847558][ T6380] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 77.144107][ T6385] vxcan1 speed is unknown, defaulting to 1000 [ 77.163538][ T6394] rdma_op ffff8881278fdd80 conn xmit_rdma 0000000000000000 [ 77.287771][ T6401] loop1: detected capacity change from 0 to 1024 [ 77.327107][ T6401] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 77.346008][ T6401] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.359112][ T6400] SELinux: ebitmap: truncated map [ 77.361072][ T6401] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 77.369513][ T6400] SELinux: failed to load policy [ 77.372431][ T6401] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.384272][ T6401] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm +}[@: Inode bitmap for bg 0 marked uninitialized [ 77.398188][ T6401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.411667][ T6401] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.461863][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 77.461887][ T29] audit: type=1400 audit(1752435272.242:880): avc: denied { name_bind } for pid=6407 comm="syz.0.931" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 77.621660][ T6416] netlink: 'syz.0.944': attribute type 1 has an invalid length. [ 77.629384][ T6416] netlink: 'syz.0.944': attribute type 2 has an invalid length. [ 77.658208][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 77.875660][ T6425] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 78.052612][ T6430] loop2: detected capacity change from 0 to 512 [ 78.127551][ T6434] cgroup: fork rejected by pids controller in /syz1 [ 78.144212][ T6430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.167735][ T6430] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.277836][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.532065][ T5943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.544344][ T29] audit: type=1400 audit(1752435273.322:881): avc: denied { create } for pid=6478 comm="syz.6.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.565762][ T6479] netlink: 'syz.6.954': attribute type 1 has an invalid length. [ 78.584755][ T29] audit: type=1400 audit(1752435273.342:882): avc: denied { write } for pid=6478 comm="syz.6.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.643402][ T5943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.667246][ T29] audit: type=1400 audit(1752435273.442:883): avc: denied { read } for pid=6485 comm="syz.5.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.701780][ T5943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.719571][ T6492] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 78.726167][ T6492] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.733803][ T6492] vhci_hcd vhci_hcd.0: Device attached [ 78.765450][ T5943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.787996][ T6493] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 78.796446][ T6000] vhci_hcd: stop threads [ 78.800931][ T6000] vhci_hcd: release socket [ 78.805386][ T6000] vhci_hcd: disconnect device [ 78.866056][ T6507] pimreg: entered allmulticast mode [ 78.911150][ T6507] pimreg: left allmulticast mode [ 78.940363][ T5943] bridge_slave_1: left allmulticast mode [ 78.946134][ T5943] bridge_slave_1: left promiscuous mode [ 78.951963][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.962911][ T5943] bridge_slave_0: left allmulticast mode [ 78.968635][ T5943] bridge_slave_0: left promiscuous mode [ 78.974509][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.088942][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.101766][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.115109][ T5943] bond0 (unregistering): Released all slaves [ 79.147429][ T6489] vxcan1 speed is unknown, defaulting to 1000 [ 79.284233][ T5943] hsr_slave_0: left promiscuous mode [ 79.290038][ T5943] hsr_slave_1: left promiscuous mode [ 79.296629][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.304173][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.314094][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.321742][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.349400][ T5943] veth1_macvtap: left promiscuous mode [ 79.393402][ T5943] veth0_macvtap: left promiscuous mode [ 79.420246][ T5943] veth1_vlan: left promiscuous mode [ 79.437709][ T5943] veth0_vlan: left promiscuous mode [ 79.507380][ T29] audit: type=1400 audit(1752435274.282:884): avc: denied { write } for pid=6521 comm="syz.2.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.578724][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 79.595617][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 79.757466][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 79.764851][ T29] audit: type=1400 audit(1752435274.532:885): avc: denied { read } for pid=6535 comm="syz.2.971" path="socket:[13755]" dev="sockfs" ino=13755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.850249][ T6549] IPVS: stopping master sync thread 6550 ... [ 79.856726][ T6550] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 79.896586][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.903798][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.920115][ T6489] bridge_slave_0: entered allmulticast mode [ 79.930203][ T6555] loop6: detected capacity change from 0 to 512 [ 79.930653][ T6489] bridge_slave_0: entered promiscuous mode [ 79.944427][ T6555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.961167][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.968279][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.976134][ T6555] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.976: invalid block [ 79.993179][ T6489] bridge_slave_1: entered allmulticast mode [ 80.000259][ T6489] bridge_slave_1: entered promiscuous mode [ 80.009555][ T6555] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.976: invalid indirect mapped block 4294967295 (level 1) [ 80.039505][ T6555] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.976: invalid indirect mapped block 4294967295 (level 1) [ 80.064435][ T6558] loop5: detected capacity change from 0 to 8192 [ 80.074618][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.081844][ T6558] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.097813][ T6555] EXT4-fs (loop6): 2 truncates cleaned up [ 80.102660][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.111675][ T6555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.133054][ T6555] EXT4-fs (loop6): shut down requested (2) [ 80.139357][ T6555] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 80.149388][ T29] audit: type=1400 audit(1752435274.912:886): avc: denied { mounton } for pid=6566 comm="syz.2.982" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 80.149782][ T6555] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 80.170678][ T29] audit: type=1400 audit(1752435274.922:887): avc: denied { read } for pid=2977 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 80.170712][ T29] audit: type=1400 audit(1752435274.922:888): avc: denied { search } for pid=2977 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.170770][ T29] audit: type=1400 audit(1752435274.922:889): avc: denied { search } for pid=2977 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.256008][ T6489] team0: Port device team_slave_0 added [ 80.264147][ T4318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.275934][ T6489] team0: Port device team_slave_1 added [ 80.309329][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.316417][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.342482][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.360750][ T6576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'. [ 80.370153][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.377422][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.403887][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.416235][ T6578] loop6: detected capacity change from 0 to 1024 [ 80.448652][ T6578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.466427][ T6489] hsr_slave_0: entered promiscuous mode [ 80.472846][ T6489] hsr_slave_1: entered promiscuous mode [ 80.479114][ T6489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.488249][ T6489] Cannot create hsr debugfs directory [ 80.514759][ T4318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.777758][ T6489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.793230][ T6489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.803969][ T6489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.813919][ T6489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.026929][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.034251][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.103348][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.127516][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.145078][ T6621] loop6: detected capacity change from 0 to 512 [ 81.152250][ T6621] EXT4-fs: Ignoring removed bh option [ 81.166810][ T6621] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.176068][ T6621] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 81.182407][ T6622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.997'. [ 81.187918][ T6621] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 81.203174][ T6621] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 81.211934][ T6621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.224247][ T6600] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.232647][ T6621] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 81.233375][ T6600] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.256620][ T6600] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.265560][ T6600] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.275912][ T4318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.358640][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.378814][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.408386][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.415682][ T5958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.429842][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.437098][ T5958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.498603][ T6602] vxcan1 speed is unknown, defaulting to 1000 [ 81.553264][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.642928][ T6489] veth0_vlan: entered promiscuous mode [ 81.654901][ T6489] veth1_vlan: entered promiscuous mode [ 81.675564][ T6489] veth0_macvtap: entered promiscuous mode [ 81.683984][ T6489] veth1_macvtap: entered promiscuous mode [ 81.697524][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.710775][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.722362][ T6489] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.731373][ T6489] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.740281][ T6489] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.749167][ T6489] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.807559][ T6645] loop1: detected capacity change from 0 to 128 [ 82.369891][ T6668] loop2: detected capacity change from 0 to 512 [ 82.385867][ T6668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.423786][ T6668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.438201][ T6668] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.593644][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 82.593661][ T29] audit: type=1400 audit(1752435277.372:896): avc: denied { bind } for pid=6680 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.630476][ T29] audit: type=1400 audit(1752435277.402:897): avc: denied { setopt } for pid=6680 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.656764][ T6682] loop5: detected capacity change from 0 to 512 [ 82.662314][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.680538][ T6682] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.692885][ T29] audit: type=1400 audit(1752435277.452:898): avc: denied { remount } for pid=6683 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.714044][ T6682] EXT4-fs (loop5): 1 truncate cleaned up [ 82.720241][ T6682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.746095][ T6689] random: crng reseeded on system resumption [ 82.754373][ T6682] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.764022][ T6687] SELinux: ebitmap start bit (132096) is beyond the end of the bitmap (1472) [ 82.774307][ T6687] SELinux: failed to load policy [ 82.807916][ T6691] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1021'. [ 82.834643][ T29] audit: type=1400 audit(1752435277.612:899): avc: denied { getopt } for pid=6692 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.909852][ T6699] loop2: detected capacity change from 0 to 1024 [ 82.929087][ T29] audit: type=1326 audit(1752435277.702:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.0.1024" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc5622e929 code=0x0 [ 82.935143][ T6699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.967760][ T6699] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.990719][ T6699] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm syz.2.1025: lblock 1 mapped to illegal pblock 1 (length 15) [ 83.006217][ T6699] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 83.018699][ T6699] EXT4-fs (loop2): This should not happen!! Data will be lost [ 83.018699][ T6699] [ 83.048731][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.104740][ T6704] SELinux: failed to load policy [ 83.183039][ T6710] netlink: 'syz.6.1029': attribute type 1 has an invalid length. [ 83.446928][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1033'. [ 83.479601][ T6728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1036'. [ 83.488743][ T29] audit: type=1400 audit(1752435278.262:901): avc: denied { accept } for pid=6725 comm="syz.2.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.508561][ T29] audit: type=1400 audit(1752435278.262:902): avc: denied { read } for pid=6725 comm="syz.2.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.566571][ T6733] loop1: detected capacity change from 0 to 1024 [ 83.592247][ T6733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.631945][ T6489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.800299][ T6751] loop5: detected capacity change from 0 to 1024 [ 83.807276][ T6752] loop2: detected capacity change from 0 to 1024 [ 83.817354][ T6751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.842023][ T6752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.905351][ T6752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.975433][ T6751] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1048: Allocating blocks 449-513 which overlap fs metadata [ 84.003701][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.069592][ T6750] EXT4-fs (loop5): pa ffff88810699a7e0: logic 48, phys. 177, len 21 [ 84.077782][ T6750] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 84.102948][ T6768] 9p: Unknown access argument : -22 [ 84.145919][ T6188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.278908][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 84.440174][ T6791] loop6: detected capacity change from 0 to 1024 [ 84.457320][ T6791] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.480318][ T6791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.616119][ T4318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.701753][ T6807] loop1: detected capacity change from 0 to 512 [ 84.713684][ T6807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.730790][ T6809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6809 comm=syz.6.1071 [ 84.742134][ T6807] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1070: invalid indirect mapped block 4294967295 (level 1) [ 84.758361][ T6807] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1070: invalid indirect mapped block 4294967295 (level 1) [ 84.786515][ T6807] EXT4-fs (loop1): 2 truncates cleaned up [ 84.821237][ T29] audit: type=1326 audit(1752435279.592:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.6.1075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2e898e929 code=0x0 [ 84.846072][ T6807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.893698][ T6807] EXT4-fs (loop1): shut down requested (2) [ 84.899944][ T6807] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 84.899984][ T6818] wireguard0: entered promiscuous mode [ 84.910141][ T6807] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 84.926851][ T29] audit: type=1400 audit(1752435279.702:904): avc: denied { search } for pid=2977 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.967080][ T6489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.119749][ T6831] loop1: detected capacity change from 0 to 8192 [ 85.129240][ T6831] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.404352][ T6840] loop2: detected capacity change from 0 to 8192 [ 85.713379][ T6851] vlan2: entered allmulticast mode [ 85.718768][ T6851] bridge_slave_0: entered allmulticast mode [ 85.813746][ T29] audit: type=1326 audit(1752435280.592:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.6.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2e89858e7 code=0x7ffc0000 [ 85.844473][ T6857] wireguard0: entered promiscuous mode [ 85.986914][ T6867] loop2: detected capacity change from 0 to 1024 [ 85.987828][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 86.004787][ T6871] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 86.061556][ T6867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.100326][ T6867] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1095: error while reading EA inode 20 err=-116 [ 86.114452][ T6883] loop6: detected capacity change from 0 to 128 [ 86.134695][ T6883] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.147812][ T6867] EXT4-fs (loop2): Remounting filesystem read-only [ 86.157562][ T6883] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.171544][ T6867] EXT4-fs warning (device loop2): ext4_xattr_block_set:2190: inode #19: comm syz.2.1095: dec ref error=-30 [ 86.201897][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.245582][ T4318] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.325513][ T6901] loop2: detected capacity change from 0 to 8192 [ 86.334034][ T6901] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.436621][ T6921] loop6: detected capacity change from 0 to 512 [ 86.446531][ T6921] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.474643][ T6921] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.487662][ T6921] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.537767][ T6926] loop5: detected capacity change from 0 to 512 [ 86.549284][ T6926] EXT4-fs (loop5): orphan cleanup on readonly fs [ 86.570917][ T6926] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.1115: bad orphan inode 13 [ 86.585201][ T6926] ext4_test_bit(bit=12, block=18) = 1 [ 86.590660][ T6926] is_bad_inode(inode)=0 [ 86.594884][ T6926] NEXT_ORPHAN(inode)=2130706432 [ 86.599758][ T6926] max_ino=32 [ 86.603047][ T6926] i_nlink=1 [ 86.607709][ T6926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.639718][ T6188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.657041][ T4318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.676106][ T6929] loop5: detected capacity change from 0 to 512 [ 86.695728][ T6929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.721621][ T6929] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.754644][ T6929] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.1116: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 86.775922][ T6929] EXT4-fs (loop5): Remounting filesystem read-only [ 86.929377][ T6941] loop6: detected capacity change from 0 to 1024 [ 86.961153][ T6941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.982522][ T6944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.011580][ T4318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.080398][ T6947] loop6: detected capacity change from 0 to 4096 [ 87.130196][ T6947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.416794][ T6960] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 87.553660][ T6188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.712231][ T4318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.762361][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 87.762379][ T29] audit: type=1326 audit(1752435282.542:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c9ee929 code=0x7ffc0000 [ 87.768745][ T6981] loop5: detected capacity change from 0 to 1024 [ 87.791827][ T29] audit: type=1326 audit(1752435282.542:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c9ee929 code=0x7ffc0000 [ 87.828364][ T1035] Process accounting resumed [ 87.842733][ T6972] Falling back ldisc for ttyS3. [ 87.849060][ T6981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.862963][ T6982] wireguard0: entered promiscuous mode [ 87.906087][ T6981] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1134: Allocating blocks 481-513 which overlap fs metadata [ 87.925705][ T29] audit: type=1326 audit(1752435282.602:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f503c9ee929 code=0x7ffc0000 [ 87.949171][ T29] audit: type=1326 audit(1752435282.602:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c9ee929 code=0x7ffc0000 [ 87.972608][ T29] audit: type=1326 audit(1752435282.602:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f503c9ee929 code=0x7ffc0000 [ 87.996139][ T29] audit: type=1326 audit(1752435282.602:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c9ee929 code=0x7ffc0000 [ 88.010351][ T6981] EXT4-fs (loop5): pa ffff88810699a770: logic 352, phys. 465, len 3 [ 88.019549][ T29] audit: type=1326 audit(1752435282.602:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f503c9ee929 code=0x7ffc0000 [ 88.019582][ T29] audit: type=1326 audit(1752435282.602:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c9ee929 code=0x7ffc0000 [ 88.027617][ T6981] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, [ 88.050880][ T29] audit: type=1326 audit(1752435282.602:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f503c9ee929 code=0x7ffc0000 [ 88.050923][ T29] audit: type=1326 audit(1752435282.602:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503c9ee929 code=0x7ffc0000 [ 88.130136][ T6981] free 0, pa_free 1 [ 88.164415][ T6994] loop2: detected capacity change from 0 to 1024 [ 88.175685][ T6994] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 88.185976][ T6994] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.1138: inode #4294967295: comm syz.2.1138: iget: illegal inode # [ 88.200599][ T6994] EXT4-fs (loop2): no journal found [ 88.205988][ T6994] EXT4-fs (loop2): can't get journal size [ 88.213835][ T6188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.223219][ T6994] EXT4-fs (loop2): failed to initialize system zone (-22) [ 88.230635][ T6994] EXT4-fs (loop2): mount failed [ 88.409906][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1145'. [ 88.429281][ T7009] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 88.480084][ T7015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7015 comm=syz.6.1148 [ 88.510677][ T7019] loop2: detected capacity change from 0 to 512 [ 88.537802][ T7019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 88.707913][ T7019] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.744604][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 88.831860][ T7037] loop6: detected capacity change from 0 to 1024 [ 88.849661][ T7037] EXT4-fs: Ignoring removed nobh option [ 88.884152][ T7037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.911271][ T7043] loop9: detected capacity change from 0 to 7 [ 88.921403][ T4318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.307833][ T7066] loop2: detected capacity change from 0 to 128 [ 89.332899][ T7066] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.449698][ T7075] wireguard0: entered promiscuous mode [ 89.504316][ T7082] syzkaller1: entered promiscuous mode [ 89.509879][ T7082] syzkaller1: entered allmulticast mode [ 89.616526][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.624124][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.641831][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.649430][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.656967][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.658887][ T7092] vxcan1 speed is unknown, defaulting to 1000 [ 89.664499][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.678099][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.685682][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.693301][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.700723][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.708169][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.715621][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.789394][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.797107][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.804619][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.812192][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.819749][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.827369][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.835023][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.842517][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.850070][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.857623][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.865137][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.872701][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.880153][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.887669][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.895184][ T1035] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 89.905649][ T7106] pim6reg1: entered promiscuous mode [ 89.911060][ T7106] pim6reg1: entered allmulticast mode [ 89.913481][ T1035] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 89.960934][ T7111] syzkaller1: entered promiscuous mode [ 89.966488][ T7111] syzkaller1: entered allmulticast mode [ 90.005178][ T7114] loop5: detected capacity change from 0 to 256 [ 90.030140][ T7116] loop1: detected capacity change from 0 to 1024 [ 90.042468][ T7114] FAT-fs (loop5): bogus number of FAT sectors [ 90.048608][ T7114] FAT-fs (loop5): Can't find a valid FAT filesystem [ 90.139494][ T7126] loop1: detected capacity change from 0 to 512 [ 90.174953][ T7126] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.186579][ T7126] Cannot find add_set index 0 as target [ 90.205880][ T7128] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 90.241990][ T7134] wireguard0: entered promiscuous mode [ 90.411600][ T7148] vhci_hcd: invalid port number 236 [ 90.602964][ T7168] loop6: detected capacity change from 0 to 8192 [ 90.631987][ T7168] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.685070][ T7178] wireguard0: entered promiscuous mode [ 90.801547][ T7201] serio: Serial port ptm0 [ 90.889084][ T7211] 9pnet: p9_errstr2errno: server reported unknown error @vlen=2 Invalid name [ 90.889084][ T7211] [ 90.905145][ T7215] loop2: detected capacity change from 0 to 128 [ 90.915205][ T7215] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.036739][ T7228] wireguard0: entered promiscuous mode [ 91.056708][ T23] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 91.064286][ T23] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 91.071943][ T23] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 91.080007][ T23] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 91.101532][ T7235] fido_id[7235]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.961610][ T7300] loop5: detected capacity change from 0 to 512 [ 91.984241][ T7300] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.1267: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 92.007399][ T7300] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.1267: Bad quota inode: 3, type: 0 [ 92.031229][ T7300] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 92.049302][ T7300] EXT4-fs (loop5): mount failed [ 92.093183][ T7300] SELinux: failed to load policy [ 92.101133][ T7294] vxcan1 speed is unknown, defaulting to 1000 [ 92.207749][ T7312] sctp: [Deprecated]: syz.2.1272 (pid 7312) Use of int in maxseg socket option. [ 92.207749][ T7312] Use struct sctp_assoc_value instead [ 92.235377][ T7314] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1273'. [ 92.287090][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1276'. [ 92.443351][ T7326] blktrace: Concurrent blktraces are not allowed on loop10 [ 92.544156][ T7335] loop5: detected capacity change from 0 to 128 [ 92.555406][ T7335] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 92.563341][ T7335] FAT-fs (loop5): Filesystem has been set read-only [ 92.570290][ T7337] netlink: 'syz.0.1283': attribute type 12 has an invalid length. [ 92.578562][ T7335] bio_check_eod: 17793 callbacks suppressed [ 92.578577][ T7335] syz.5.1284: attempt to access beyond end of device [ 92.578577][ T7335] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 92.602407][ T7335] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 92.610298][ T7335] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 92.625237][ T7335] syz.5.1284: attempt to access beyond end of device [ 92.625237][ T7335] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.649267][ T323] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 92.729213][ T7346] program syz.0.1289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.749419][ T7346] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 92.780170][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 92.780221][ T29] audit: type=1400 audit(1752435287.552:1186): avc: denied { watch watch_reads } for pid=7351 comm="syz.6.1291" path="/156" dev="tmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.827208][ T29] audit: type=1400 audit(1752435287.602:1187): avc: denied { create } for pid=7353 comm="syz.0.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.861457][ T4367] kernel read not supported for file inotify (pid: 4367 comm: kworker/1:6) [ 92.870775][ T29] audit: type=1400 audit(1752435287.632:1188): avc: denied { connect } for pid=7353 comm="syz.0.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.916490][ T7356] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1293'. [ 92.925585][ T29] audit: type=1400 audit(1752435287.692:1189): avc: denied { write } for pid=7360 comm="syz.6.1295" lport=45524 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 92.949821][ T29] audit: type=1400 audit(1752435287.692:1190): avc: denied { setopt } for pid=7360 comm="syz.6.1295" lport=45524 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 92.975232][ T7356] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1293'. [ 93.055287][ T7372] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 93.063236][ T7372] netlink: 'syz.0.1301': attribute type 4 has an invalid length. [ 93.071084][ T7372] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1301'. [ 93.086063][ T7374] loop6: detected capacity change from 0 to 1024 [ 93.100279][ T7374] EXT4-fs: Ignoring removed nobh option [ 93.105949][ T7374] EXT4-fs: Ignoring removed bh option [ 93.113802][ T7372] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 93.121641][ T7372] netlink: 'syz.0.1301': attribute type 4 has an invalid length. [ 93.129413][ T7372] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1301'. [ 93.147505][ T29] audit: type=1400 audit(1752435287.922:1191): avc: denied { map } for pid=7373 comm="syz.6.1300" path="/159/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 93.148135][ T7374] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1300: Allocating blocks 481-513 which overlap fs metadata [ 93.170060][ T29] audit: type=1400 audit(1752435287.922:1192): avc: denied { execute } for pid=7373 comm="syz.6.1300" path="/159/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 93.296143][ T7322] vxcan1 speed is unknown, defaulting to 1000 [ 93.423619][ T29] audit: type=1400 audit(1752435288.202:1193): avc: denied { ioctl } for pid=7383 comm="syz.6.1304" path="socket:[17211]" dev="sockfs" ino=17211 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.449476][ T29] audit: type=1400 audit(1752435288.202:1194): avc: denied { setopt } for pid=7383 comm="syz.6.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.483004][ T7384] team_slave_0: entered promiscuous mode [ 93.488772][ T7384] team_slave_1: entered promiscuous mode [ 93.496677][ T7386] team_slave_0: left promiscuous mode [ 93.502217][ T7386] team_slave_1: left promiscuous mode [ 93.550088][ T29] audit: type=1326 audit(1752435288.302:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.6.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e898e929 code=0x7ffc0000 [ 93.840218][ T7404] loop5: detected capacity change from 0 to 128 [ 93.955328][ T7404] syz.5.1312: attempt to access beyond end of device [ 93.955328][ T7404] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 93.990479][ T7412] batadv_slave_1: entered promiscuous mode [ 94.012706][ T7412] batadv_slave_1: left promiscuous mode [ 94.048295][ T7418] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.177614][ T7427] loop5: detected capacity change from 0 to 1024 [ 94.224695][ T7433] loop6: detected capacity change from 0 to 128 [ 94.240617][ T7427] EXT4-fs: inline encryption not supported [ 94.254135][ T7433] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.267982][ T7427] EXT4-fs: Ignoring removed bh option [ 94.312646][ T7427] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e857c028, mo2=0002] [ 94.336648][ T7439] loop9: detected capacity change from 0 to 7 [ 94.338004][ T7427] System zones: 1-12 [ 94.348423][ T3299] buffer_io_error: 17799 callbacks suppressed [ 94.348466][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.365286][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.373262][ T3299] loop9: unable to read partition table [ 94.402740][ T7439] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.410935][ T7439] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.418928][ T7439] loop9: unable to read partition table [ 94.441337][ T7439] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 94.441337][ T7439] ) failed (rc=-5) [ 94.471263][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.479277][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.497761][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.527380][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.537602][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.740200][ T7458] syz.0.1336: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 94.754948][ T7458] CPU: 1 UID: 0 PID: 7458 Comm: syz.0.1336 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 94.754985][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.755002][ T7458] Call Trace: [ 94.755009][ T7458] [ 94.755018][ T7458] __dump_stack+0x1d/0x30 [ 94.755121][ T7458] dump_stack_lvl+0xe8/0x140 [ 94.755162][ T7458] dump_stack+0x15/0x1b [ 94.755181][ T7458] warn_alloc+0x12b/0x1a0 [ 94.755217][ T7458] ? audit_log_end+0x1d7/0x1f0 [ 94.755302][ T7458] ? audit_log_end+0x1d7/0x1f0 [ 94.755407][ T7458] __vmalloc_node_range_noprof+0x9c/0xe00 [ 94.755447][ T7458] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 94.755486][ T7458] ? slow_avc_audit+0x104/0x140 [ 94.755522][ T7458] ? should_fail_ex+0x30/0x280 [ 94.755628][ T7458] ? xskq_create+0x36/0xe0 [ 94.755658][ T7458] vmalloc_user_noprof+0x7d/0xb0 [ 94.755688][ T7458] ? xskq_create+0x80/0xe0 [ 94.755714][ T7458] xskq_create+0x80/0xe0 [ 94.755735][ T7458] xsk_init_queue+0x95/0xf0 [ 94.755811][ T7458] xsk_setsockopt+0x3de/0x510 [ 94.755867][ T7458] ? __pfx_xsk_setsockopt+0x10/0x10 [ 94.755887][ T7458] __sys_setsockopt+0x184/0x200 [ 94.755983][ T7458] __x64_sys_setsockopt+0x64/0x80 [ 94.756020][ T7458] x64_sys_call+0x2bd5/0x2fb0 [ 94.756047][ T7458] do_syscall_64+0xd2/0x200 [ 94.756098][ T7458] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.756123][ T7458] ? clear_bhb_loop+0x40/0x90 [ 94.756146][ T7458] ? clear_bhb_loop+0x40/0x90 [ 94.756174][ T7458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.756269][ T7458] RIP: 0033:0x7efc5622e929 [ 94.756296][ T7458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.756331][ T7458] RSP: 002b:00007efc54897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.756355][ T7458] RAX: ffffffffffffffda RBX: 00007efc56455fa0 RCX: 00007efc5622e929 [ 94.756445][ T7458] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 94.756457][ T7458] RBP: 00007efc562b0b39 R08: 0000000000000004 R09: 0000000000000000 [ 94.756469][ T7458] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 94.756480][ T7458] R13: 0000000000000000 R14: 00007efc56455fa0 R15: 00007ffdc5235db8 [ 94.756499][ T7458] [ 94.756517][ T7458] Mem-Info: [ 94.986909][ T7458] active_anon:6069 inactive_anon:10 isolated_anon:0 [ 94.986909][ T7458] active_file:9542 inactive_file:12983 isolated_file:0 [ 94.986909][ T7458] unevictable:0 dirty:343 writeback:0 [ 94.986909][ T7458] slab_reclaimable:3266 slab_unreclaimable:18560 [ 94.986909][ T7458] mapped:29375 shmem:223 pagetables:1079 [ 94.986909][ T7458] sec_pagetables:0 bounce:0 [ 94.986909][ T7458] kernel_misc_reclaimable:0 [ 94.986909][ T7458] free:1882631 free_pcp:7703 free_cma:0 [ 95.032033][ T7458] Node 0 active_anon:24276kB inactive_anon:40kB active_file:38168kB inactive_file:51932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117500kB dirty:1372kB writeback:0kB shmem:892kB writeback_tmp:0kB kernel_stack:4352kB pagetables:4316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 95.060999][ T7458] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.089741][ T7458] lowmem_reserve[]: 0 2882 7860 7860 [ 95.095417][ T7458] Node 0 DMA32 free:2947828kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 95.125691][ T7458] lowmem_reserve[]: 0 0 4978 4978 [ 95.130796][ T7458] Node 0 Normal free:4567336kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24276kB inactive_anon:40kB active_file:38168kB inactive_file:51932kB unevictable:0kB writepending:1372kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:27292kB local_pcp:22104kB free_cma:0kB [ 95.163082][ T7458] lowmem_reserve[]: 0 0 0 0 [ 95.167665][ T7458] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 95.180508][ T7458] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947828kB [ 95.196872][ T7458] Node 0 Normal: 882*4kB (ME) 682*8kB (UME) 343*16kB (ME) 213*32kB (UM) 174*64kB (UM) 39*128kB (UM) 41*256kB (UME) 29*512kB (UM) 21*1024kB (UM) 13*2048kB (UME) 1088*4096kB (UM) = 4567336kB [ 95.215777][ T7458] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 95.225224][ T7458] 22743 total pagecache pages [ 95.229934][ T7458] 10 pages in swap cache [ 95.234227][ T7458] Free swap = 124956kB [ 95.238581][ T7458] Total swap = 124996kB [ 95.242816][ T7458] 2097051 pages RAM [ 95.246770][ T7458] 0 pages HighMem/MovableOnly [ 95.251578][ T7458] 80812 pages reserved [ 95.389404][ T7467] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 95.396069][ T7467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.403737][ T7467] vhci_hcd vhci_hcd.0: Device attached [ 95.415906][ T7467] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 95.422486][ T7467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.430115][ T7467] vhci_hcd vhci_hcd.0: Device attached [ 95.455505][ T7467] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 95.462093][ T7467] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 95.469932][ T7467] vhci_hcd vhci_hcd.0: Device attached [ 95.515307][ T7467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 95.543113][ T7467] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(11) [ 95.549856][ T7467] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.557367][ T7467] vhci_hcd vhci_hcd.0: Device attached [ 95.578179][ T7467] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(13) [ 95.584883][ T7467] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 95.592560][ T7467] vhci_hcd vhci_hcd.0: Device attached [ 95.603830][ T7467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 95.620946][ T7467] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(17) [ 95.627631][ T7467] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 95.635342][ T7467] vhci_hcd vhci_hcd.0: Device attached [ 95.651831][ T3473] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 95.677382][ T7484] vhci_hcd: connection closed [ 95.677577][ T7482] vhci_hcd: connection closed [ 95.681190][ T5950] vhci_hcd: stop threads [ 95.682680][ T7480] vhci_hcd: connection closed [ 95.687029][ T5950] vhci_hcd: release socket [ 95.693716][ T7468] vhci_hcd: connection reset by peer [ 95.696024][ T5950] vhci_hcd: disconnect device [ 95.718301][ T7474] vhci_hcd: connection closed [ 95.718444][ T7470] vhci_hcd: connection closed [ 95.770546][ T5950] vhci_hcd: stop threads [ 95.779709][ T5950] vhci_hcd: release socket [ 95.784187][ T5950] vhci_hcd: disconnect device [ 95.791096][ T5950] vhci_hcd: stop threads [ 95.795394][ T5950] vhci_hcd: release socket [ 95.799843][ T5950] vhci_hcd: disconnect device [ 95.807144][ T5950] vhci_hcd: stop threads [ 95.811468][ T5950] vhci_hcd: release socket [ 95.815923][ T5950] vhci_hcd: disconnect device [ 95.825998][ T5950] vhci_hcd: stop threads [ 95.830342][ T5950] vhci_hcd: release socket [ 95.834901][ T5950] vhci_hcd: disconnect device [ 95.856790][ T5950] vhci_hcd: stop threads [ 95.861208][ T5950] vhci_hcd: release socket [ 95.865643][ T5950] vhci_hcd: disconnect device [ 95.948685][ T7492] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 95.955268][ T7492] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.962872][ T7492] vhci_hcd vhci_hcd.0: Device attached [ 95.988872][ T7492] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 95.995565][ T7492] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.003241][ T7492] vhci_hcd vhci_hcd.0: Device attached [ 96.019560][ T7492] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 96.026158][ T7492] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 96.033950][ T7492] vhci_hcd vhci_hcd.0: Device attached [ 96.059842][ T7492] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 96.066480][ T7492] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 96.074051][ T7492] vhci_hcd vhci_hcd.0: Device attached [ 96.082924][ T7492] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 96.089586][ T7492] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 96.097288][ T7492] vhci_hcd vhci_hcd.0: Device attached [ 96.105854][ T7492] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 96.113586][ T7505] vxcan1 speed is unknown, defaulting to 1000 [ 96.125778][ T7492] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 96.132464][ T7492] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.140256][ T7492] vhci_hcd vhci_hcd.0: Device attached [ 96.153098][ T7492] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(17) [ 96.159758][ T7492] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 96.167327][ T7492] vhci_hcd vhci_hcd.0: Device attached [ 96.178905][ T7510] vhci_hcd: connection closed [ 96.179188][ T5960] vhci_hcd: stop threads [ 96.181074][ T4367] vhci_hcd: vhci_device speed not set [ 96.183951][ T5960] vhci_hcd: release socket [ 96.198091][ T5960] vhci_hcd: disconnect device [ 96.219416][ T7504] vhci_hcd: connection closed [ 96.219545][ T7507] vhci_hcd: connection closed [ 96.219697][ T7493] vhci_hcd: connection closed [ 96.224586][ T5960] vhci_hcd: stop threads [ 96.230162][ T7501] vhci_hcd: connection closed [ 96.233843][ T5960] vhci_hcd: release socket [ 96.233860][ T5960] vhci_hcd: disconnect device [ 96.235853][ T5960] vhci_hcd: stop threads [ 96.238260][ T7496] vhci_hcd: connection closed [ 96.242929][ T5960] vhci_hcd: release socket [ 96.242947][ T5960] vhci_hcd: disconnect device [ 96.250033][ T4367] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 96.254266][ T7499] vhci_hcd: connection closed [ 96.260613][ T7513] loop6: detected capacity change from 0 to 512 [ 96.289223][ T7494] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 96.299457][ T5960] vhci_hcd: stop threads [ 96.303859][ T5960] vhci_hcd: release socket [ 96.308335][ T5960] vhci_hcd: disconnect device [ 96.309098][ T7513] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.329019][ T5960] vhci_hcd: stop threads [ 96.333432][ T5960] vhci_hcd: release socket [ 96.337929][ T5960] vhci_hcd: disconnect device [ 96.348989][ T5960] vhci_hcd: stop threads [ 96.353484][ T5960] vhci_hcd: release socket [ 96.358086][ T5960] vhci_hcd: disconnect device [ 96.367172][ T5960] vhci_hcd: stop threads [ 96.372120][ T5960] vhci_hcd: release socket [ 96.376685][ T5960] vhci_hcd: disconnect device [ 96.541997][ T7525] loop6: detected capacity change from 0 to 512 [ 96.566611][ T7525] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 96.590199][ T7525] EXT4-fs (loop6): 1 truncate cleaned up [ 96.714287][ T7535] Falling back ldisc for ptm0. [ 96.795743][ T7554] loop5: detected capacity change from 0 to 128 [ 96.849761][ T7554] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.903188][ T7566] SELinux: policydb version 922656840 does not match my version range 15-34 [ 96.912512][ T7566] SELinux: failed to load policy [ 96.955759][ T7570] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 97.118691][ T7587] pim6reg1: entered promiscuous mode [ 97.124239][ T7587] pim6reg1: entered allmulticast mode [ 97.129879][ T7591] loop5: detected capacity change from 0 to 128 [ 97.148345][ T7591] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.240664][ T7598] loop1: detected capacity change from 0 to 1024 [ 97.539470][ T7626] loop5: detected capacity change from 0 to 1024 [ 97.549572][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1399'. [ 97.571407][ T7626] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 97.599742][ T7626] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 97.638595][ T7598] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 97.831877][ T7643] loop1: detected capacity change from 0 to 2048 [ 98.020523][ T7641] ================================================================== [ 98.028674][ T7641] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 98.037316][ T7641] [ 98.039666][ T7641] write to 0xffff888101a735e8 of 8 bytes by task 7646 on cpu 0: [ 98.047328][ T7641] shmem_file_splice_read+0x470/0x600 [ 98.052745][ T7641] splice_direct_to_actor+0x26c/0x680 [ 98.058175][ T7641] do_splice_direct+0xda/0x150 [ 98.062980][ T7641] do_sendfile+0x380/0x650 [ 98.067431][ T7641] __x64_sys_sendfile64+0x105/0x150 [ 98.072667][ T7641] x64_sys_call+0xb39/0x2fb0 [ 98.077307][ T7641] do_syscall_64+0xd2/0x200 [ 98.081855][ T7641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.087782][ T7641] [ 98.090159][ T7641] write to 0xffff888101a735e8 of 8 bytes by task 7641 on cpu 1: [ 98.097808][ T7641] shmem_file_splice_read+0x470/0x600 [ 98.103227][ T7641] splice_direct_to_actor+0x26c/0x680 [ 98.108643][ T7641] do_splice_direct+0xda/0x150 [ 98.113465][ T7641] do_sendfile+0x380/0x650 [ 98.117926][ T7641] __x64_sys_sendfile64+0x105/0x150 [ 98.123164][ T7641] x64_sys_call+0xb39/0x2fb0 [ 98.127793][ T7641] do_syscall_64+0xd2/0x200 [ 98.132329][ T7641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.138263][ T7641] [ 98.140610][ T7641] value changed: 0x0000000000001e8f -> 0x0000000000001e94 [ 98.147744][ T7641] [ 98.150087][ T7641] Reported by Kernel Concurrency Sanitizer on: [ 98.156347][ T7641] CPU: 1 UID: 0 PID: 7641 Comm: syz.5.1406 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 98.168868][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.178946][ T7641] ================================================================== [ 100.691014][ T3473] usb 13-1: enqueue for inactive port 0 [ 100.696614][ T3473] usb 13-1: enqueue for inactive port 0 [ 100.770945][ T3473] vhci_hcd: vhci_device speed not set [ 101.341645][ T4367] usb 1-1: enqueue for inactive port 0 [ 101.347144][ T4367] usb 1-1: enqueue for inactive port 0 [ 101.420900][ T4367] vhci_hcd: vhci_device speed not set