last executing test programs: 1m22.330506998s ago: executing program 4 (id=1188): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x9, 0x3c, 0x0, 0xd55, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x4}, 0xa8, 0x3, 0x19a2, 0x3, 0x401, 0x2, 0x81, 0x0, 0x3, 0x0, 0x1000}, 0x0, 0x2, 0xffffffffffffffff, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) 1m22.268177623s ago: executing program 4 (id=1191): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) 1m22.198280428s ago: executing program 4 (id=1194): socket$inet6(0xa, 0x5, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x6, 0x7fffffff, 0x4}, 0x0, 0x0) 1m21.238983355s ago: executing program 4 (id=1222): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000180)={[{@nobh}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1m20.746418865s ago: executing program 4 (id=1235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r2) 1m20.444889119s ago: executing program 4 (id=1243): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000c00)={[], [{@smackfsroot={'smackfsroot', 0x3d, ')'}}, {@uid_lt}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, 'GPL\x00'}}]}, 0x6, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0x3}, &(0x7f0000000240)=0x8) 1m13.091697279s ago: executing program 5 (id=1406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m13.004215356s ago: executing program 5 (id=1410): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r2, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r2, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m12.565150221s ago: executing program 5 (id=1421): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 1m12.512404955s ago: executing program 5 (id=1424): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m12.280553884s ago: executing program 5 (id=1430): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioperm(0x7, 0x81, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 1m12.277415574s ago: executing program 34 (id=1430): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioperm(0x7, 0x81, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 20.053776722s ago: executing program 7 (id=2843): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x7) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 19.851022268s ago: executing program 7 (id=2850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) 19.770356624s ago: executing program 7 (id=2854): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 19.734440717s ago: executing program 7 (id=2855): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 19.613219547s ago: executing program 7 (id=2857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0xf, 0x40, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x7fffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb41}}, 0x0, 0x0, 0x3b, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb612120800a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e5f, 0x1ff, @loopback, 0xbbc}, 0x1c) 19.299992582s ago: executing program 7 (id=2864): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000739ba6ced6942f5b80752e85c32aa54c738f44a16f2946a5f310c62df242cfff0e3a801dfdfc272b6fbccb7e27f88b3a1ba67a4e8600"/84, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 19.258583305s ago: executing program 35 (id=2864): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000739ba6ced6942f5b80752e85c32aa54c738f44a16f2946a5f310c62df242cfff0e3a801dfdfc272b6fbccb7e27f88b3a1ba67a4e8600"/84, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 7.180541264s ago: executing program 6 (id=3224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x2a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0) 7.150354497s ago: executing program 6 (id=3225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1c, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8, 0x0, 0x0, 0x1000}}}}}}, 0x0) 7.130509948s ago: executing program 6 (id=3226): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba416f7b1fc251409afd53815f775ab04810637bd8c9b2606a8512ee5622829a369d77900cfc7987f950003fb657f4c17131695efdcead8816ddae634049c3dab49a0ca36b1d5d93c8dac8fa0ba2a74f55d159667e3b52ec903f439a21a023b4bc7bf4463d73f5ae46a680f138c34f0ab2e8503ce342bfb26e481f087a08d410a8886335ac1fda0df344dfbb68b6bb8fcc2bf9a85fe835f350fb281e1159b093d52c519a3d61cd4979941c87ebf52404bdb04ebce4e1980314c1b03a674a86d6cf027b9076559eecadd6cbc5daab4002468d3653a11bbcb9cf625b1e4fe49a398e63200944d4ecee2741a09daf3650edb6a8dca6dc705873b78767c0e942a766c8be2bf425eeba3c277f09332f84fe9f24272059625703661763ed5efd08af27a1b6ccc3a7ae63ff339676e5caa6447e4a0575131495bc643681ca8e18b95bc7db66366c50cd89c9a59746da83dcced2526003b48e250bb7a20eabaf34e950fd1eeb6cce37de630e51a067e786dc3ecde5d2218962d33adde6734636adcf597b93be0cc3f307127d2b0df08a75d14f41ed41237db5e7b10fdacd56231cd781566b26080a06edbd7af51e6310233f0cea9aea8fe2c08a94cdc1ae11c6bef6f0fb5d4155567b47db0c4fc61940d157fc5a1df14ff33bd638b56b200b032cd99504751cb6c29d8252e6ebd0c1ac4c3df73d335aaf060f54d6a4f1c225eaca5e3f313a1d29f940d7a9fcaa040d7cab55550954a3c4d8bd772890fff6eadf3de96a396758e", 0x2e5}], 0x1}}], 0x1, 0x400c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 5.895476457s ago: executing program 6 (id=3237): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 5.848860431s ago: executing program 6 (id=3241): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 5.729162421s ago: executing program 6 (id=3243): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x2292}], 0x1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) fcntl$setpipe(r0, 0x407, 0x8001a0) 5.728840831s ago: executing program 36 (id=3243): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x2292}], 0x1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) fcntl$setpipe(r0, 0x407, 0x8001a0) 1.393263408s ago: executing program 9 (id=3338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 940.347974ms ago: executing program 9 (id=3347): syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(r2, 0x5437, 0x300) 875.5943ms ago: executing program 1 (id=3351): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') mount$bind(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340), 0x8000, 0x0) 612.552711ms ago: executing program 1 (id=3358): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x80, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) io_uring_enter(r0, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 604.453801ms ago: executing program 8 (id=3359): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create(0x4) epoll_pwait(r2, &(0x7f0000000200)=[{}], 0x1, 0xb, 0x0, 0x0) 564.378045ms ago: executing program 3 (id=3360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) gettid() timer_create(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/tcp\x00') preadv(r2, &(0x7f0000002280)=[{&(0x7f0000002180)=""/18, 0x12}], 0x1, 0x10001, 0x5) 540.125936ms ago: executing program 8 (id=3363): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32], 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000740)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 484.507281ms ago: executing program 3 (id=3364): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = fsmount(r0, 0x1, 0x8) fchdir(r3) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 468.090302ms ago: executing program 1 (id=3365): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x1, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) 467.771312ms ago: executing program 8 (id=3366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc00) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}]}, 0x48}}, 0x4048000) 399.635928ms ago: executing program 8 (id=3368): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) timer_create(0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x40, 0x7, 0x2, 0xf00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x0, 0x0, 0x0, 0x5, 0x800000007, 0x0, 0x5, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 399.117728ms ago: executing program 1 (id=3369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000240)="94", 0x1) tee(r2, r4, 0x8f5, 0x100000000000000) 375.19161ms ago: executing program 8 (id=3370): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') mount$bind(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340), 0x8000, 0x0) 310.171625ms ago: executing program 3 (id=3372): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x6}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) 309.457945ms ago: executing program 1 (id=3382): poll(0x0, 0x0, 0x7) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x101d0}}, 0x10, 0x0}, 0x0) 268.716968ms ago: executing program 1 (id=3373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000400)) 267.539799ms ago: executing program 3 (id=3385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x60010020, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 238.859891ms ago: executing program 0 (id=3374): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create(0x4) epoll_pwait(r2, &(0x7f0000000200)=[{}], 0x1, 0xb, 0x0, 0x0) 206.504423ms ago: executing program 0 (id=3375): mkdir(&(0x7f0000000040)='./file0\x00', 0xa0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 146.802438ms ago: executing program 0 (id=3376): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 146.698558ms ago: executing program 3 (id=3377): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 141.329198ms ago: executing program 8 (id=3378): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8, 0x9) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 113.912881ms ago: executing program 0 (id=3379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x1}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) 84.427273ms ago: executing program 9 (id=3380): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) dup3(r3, r2, 0x0) 74.883124ms ago: executing program 3 (id=3381): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 55.086376ms ago: executing program 9 (id=3383): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rt_sigpending(0x0, 0x0) 45.758626ms ago: executing program 0 (id=3386): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = fsmount(r0, 0x1, 0x8) fchdir(r3) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 30.521027ms ago: executing program 9 (id=3387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) 3.13515ms ago: executing program 9 (id=3388): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_mrelease(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x2000, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x4, 0x84082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x3a, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 0s ago: executing program 0 (id=3389): unshare(0x2a060400) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) kernel console output (not intermixed with test programs): 4][ T8685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.701791][ T29] audit: type=1400 audit(1755568307.024:2641): avc: denied { write } for pid=8701 comm="syz.3.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.790465][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2005'. [ 125.799763][ T8706] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2005'. [ 125.809250][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2005'. [ 125.825737][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2007'. [ 125.855930][ T8706] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2005'. [ 125.865435][ T8706] netlink: 'syz.6.2005': attribute type 6 has an invalid length. [ 125.882922][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.162814][ T29] audit: type=1400 audit(1755568307.504:2642): avc: denied { append } for pid=8731 comm="syz.3.2018" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.163403][ T8732] program syz.3.2018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.231601][ T29] audit: type=1400 audit(1755568307.504:2643): avc: denied { open } for pid=8731 comm="syz.3.2018" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.246840][ T8737] loop1: detected capacity change from 0 to 512 [ 126.338014][ T8744] hsr_slave_0 (unregistering): left promiscuous mode [ 126.351393][ T8737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.365844][ T8737] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.380706][ T29] audit: type=1326 audit(1755568307.724:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c831aebe9 code=0x7ffc0000 [ 126.382214][ T8747] loop3: detected capacity change from 0 to 2048 [ 126.407849][ T29] audit: type=1326 audit(1755568307.754:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9c831aebe9 code=0x7ffc0000 [ 126.434561][ T29] audit: type=1326 audit(1755568307.754:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c831aebe9 code=0x7ffc0000 [ 126.458069][ T29] audit: type=1326 audit(1755568307.754:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c831aebe9 code=0x7ffc0000 [ 126.510015][ T8747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.578243][ T8761] netlink: 'syz.6.2028': attribute type 10 has an invalid length. [ 126.603851][ T8761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.649471][ T8761] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 126.667119][ T8764] bond0: entered promiscuous mode [ 126.672378][ T8764] bond_slave_0: entered promiscuous mode [ 126.678415][ T8764] bond_slave_1: entered promiscuous mode [ 126.692816][ T8764] dummy0: entered promiscuous mode [ 126.698148][ T8764] batadv0: entered promiscuous mode [ 126.826690][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.940544][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.223805][ T8809] loop1: detected capacity change from 0 to 2048 [ 127.311818][ T8809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.388106][ T8828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.486188][ T8828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.547936][ T8837] gtp0: entered promiscuous mode [ 127.584173][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.785134][ T8863] geneve3: entered promiscuous mode [ 127.790566][ T8863] geneve3: entered allmulticast mode [ 127.810582][ T5355] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.831898][ T5355] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.852662][ T5355] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.869385][ T5355] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.089723][ T8870] loop6: detected capacity change from 0 to 2048 [ 128.119155][ T8870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.301565][ T6896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.339053][ T8883] netlink: 'syz.6.2083': attribute type 83 has an invalid length. [ 128.441871][ T8889] loop7: detected capacity change from 0 to 512 [ 128.464227][ T8889] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2086: corrupted inode contents [ 128.504431][ T8889] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.2086: mark_inode_dirty error [ 128.538155][ T8889] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2086: corrupted inode contents [ 128.550476][ T8889] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.2086: mark_inode_dirty error [ 128.576793][ T8889] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2086: corrupted inode contents [ 128.622383][ T8889] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 128.642446][ T8900] SELinux: ebitmap: truncated map [ 128.660911][ T8889] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2086: corrupted inode contents [ 128.680661][ T8900] SELinux: failed to load policy [ 128.716079][ T8889] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.2086: mark_inode_dirty error [ 128.728873][ T8889] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 128.740715][ T8889] EXT4-fs (loop7): 1 truncate cleaned up [ 128.746769][ T8889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.760960][ T5330] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:17: Failed to release dquot type 1 [ 128.766244][ T8889] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.888341][ T7322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.352592][ T8944] __nla_validate_parse: 3 callbacks suppressed [ 129.352620][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2108'. [ 129.399390][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2108'. [ 129.426564][ T8952] netlink: 'syz.0.2111': attribute type 10 has an invalid length. [ 129.445666][ T8952] team0 (unregistering): Port device team_slave_0 removed [ 129.454370][ T8952] team0 (unregistering): Port device team_slave_1 removed [ 129.500755][ T8956] macvlan2: entered promiscuous mode [ 129.520233][ T8956] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 129.545353][ T8956] macvlan3: entered promiscuous mode [ 129.552632][ T8956] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 130.339847][ T8998] macvlan2: entered promiscuous mode [ 130.348420][ T8998] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 130.364147][ T8998] macvlan3: entered promiscuous mode [ 130.372797][ T8998] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 130.485389][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 130.485409][ T29] audit: type=1400 audit(1755568311.824:2783): avc: denied { connect } for pid=9001 comm="syz.0.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.555464][ T29] audit: type=1326 audit(1755568311.894:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.6.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832d96ebe9 code=0x7ffc0000 [ 130.579456][ T29] audit: type=1326 audit(1755568311.894:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.6.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832d96ebe9 code=0x7ffc0000 [ 130.603031][ T29] audit: type=1326 audit(1755568311.894:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.6.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832d96ebe9 code=0x7ffc0000 [ 130.626559][ T29] audit: type=1326 audit(1755568311.894:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.6.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832d96ebe9 code=0x7ffc0000 [ 130.650151][ T29] audit: type=1326 audit(1755568311.894:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.6.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832d96ebe9 code=0x7ffc0000 [ 130.736835][ T29] audit: type=1326 audit(1755568312.084:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.7.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9cadebe9 code=0x7ffc0000 [ 130.760618][ T29] audit: type=1326 audit(1755568312.084:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.7.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9cadebe9 code=0x7ffc0000 [ 130.794043][ T9015] loop7: detected capacity change from 0 to 1024 [ 130.804147][ T9015] EXT4-fs: Ignoring removed nobh option [ 130.824702][ T9015] EXT4-fs: Ignoring removed bh option [ 130.839868][ T29] audit: type=1326 audit(1755568312.134:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.7.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3d9cadebe9 code=0x7ffc0000 [ 130.863486][ T29] audit: type=1326 audit(1755568312.134:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.7.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3d9cadec23 code=0x7ffc0000 [ 130.914150][ T9015] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.934118][ T9015] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.012379][ T7322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.026861][ T9029] loop3: detected capacity change from 0 to 512 [ 131.033740][ T9029] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.043593][ T9029] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.061022][ T9029] EXT4-fs (loop3): 1 truncate cleaned up [ 131.076301][ T9029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.243276][ T9047] loop1: detected capacity change from 0 to 128 [ 131.260958][ T9047] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.309254][ T9047] ext4 filesystem being mounted at /437/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.426710][ T9062] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2159'. [ 131.446669][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.536658][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2163'. [ 131.563976][ T41] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.574587][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2163'. [ 131.591482][ T41] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.616771][ T41] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.629352][ T41] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.635085][ T9077] loop6: detected capacity change from 0 to 512 [ 131.746932][ T9077] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 131.773624][ T9077] EXT4-fs (loop6): 1 truncate cleaned up [ 131.796392][ T9077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.835651][ T6896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.953633][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.081336][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2178'. [ 132.156012][ T9110] Falling back ldisc for ttyS3. [ 132.263931][ T9139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2188'. [ 132.506310][ T9170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2192'. [ 132.692679][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2196'. [ 133.165441][ T9265] loop6: detected capacity change from 0 to 4096 [ 133.181877][ T9265] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.312576][ T9281] ref_ctr increment failed for inode: 0x948 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881044af8c0 [ 133.329293][ T9280] uprobe: syz.3.2208:9280 failed to unregister, leaking uprobe [ 133.341383][ T6896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.378536][ T2993] udevd[2993]: worker [3296] terminated by signal 33 (Unknown signal 33) [ 133.387607][ T2993] udevd[2993]: worker [3296] failed while handling '/devices/virtual/block/loop6' [ 133.580902][ T9317] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2215'. [ 133.717021][ T9337] serio: Serial port ptm0 [ 133.846082][ T9354] loop3: detected capacity change from 0 to 128 [ 134.476724][ T9346] syz.0.2230 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 134.490922][ T9346] CPU: 1 UID: 0 PID: 9346 Comm: syz.0.2230 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 134.490953][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.491040][ T9346] Call Trace: [ 134.491046][ T9346] [ 134.491054][ T9346] __dump_stack+0x1d/0x30 [ 134.491073][ T9346] dump_stack_lvl+0xe8/0x140 [ 134.491091][ T9346] dump_stack+0x15/0x1b [ 134.491105][ T9346] dump_header+0x81/0x220 [ 134.491205][ T9346] oom_kill_process+0x342/0x400 [ 134.491238][ T9346] out_of_memory+0x979/0xb80 [ 134.491325][ T9346] try_charge_memcg+0x5e6/0x9e0 [ 134.491353][ T9346] obj_cgroup_charge_pages+0xa6/0x150 [ 134.491382][ T9346] __memcg_kmem_charge_page+0x9f/0x170 [ 134.491509][ T9346] __alloc_frozen_pages_noprof+0x188/0x360 [ 134.491560][ T9346] alloc_pages_mpol+0xb3/0x250 [ 134.491594][ T9346] alloc_pages_noprof+0x90/0x130 [ 134.491697][ T9346] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 134.491808][ T9346] __kvmalloc_node_noprof+0x30f/0x4e0 [ 134.491837][ T9346] ? ip_set_alloc+0x1f/0x30 [ 134.491877][ T9346] ? ip_set_alloc+0x1f/0x30 [ 134.491906][ T9346] ? __kmalloc_cache_noprof+0x189/0x320 [ 134.491983][ T9346] ip_set_alloc+0x1f/0x30 [ 134.492011][ T9346] hash_netiface_create+0x282/0x740 [ 134.492044][ T9346] ? __pfx_hash_netiface_create+0x10/0x10 [ 134.492192][ T9346] ip_set_create+0x3cc/0x960 [ 134.492228][ T9346] ? __nla_parse+0x40/0x60 [ 134.492261][ T9346] nfnetlink_rcv_msg+0x4c3/0x590 [ 134.492368][ T9346] netlink_rcv_skb+0x123/0x220 [ 134.492385][ T9346] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 134.492474][ T9346] nfnetlink_rcv+0x16b/0x1690 [ 134.492591][ T9346] ? __list_del_entry_valid_or_report+0x65/0x130 [ 134.492633][ T9346] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 134.492686][ T9346] ? should_fail_ex+0x30/0x280 [ 134.492704][ T9346] ? selinux_nlmsg_lookup+0x99/0x890 [ 134.492740][ T9346] ? __rcu_read_unlock+0x34/0x70 [ 134.492759][ T9346] ? __netlink_lookup+0x266/0x2a0 [ 134.492782][ T9346] netlink_unicast+0x5bd/0x690 [ 134.492983][ T9346] netlink_sendmsg+0x58b/0x6b0 [ 134.493004][ T9346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.493023][ T9346] __sock_sendmsg+0x142/0x180 [ 134.493050][ T9346] ____sys_sendmsg+0x31e/0x4e0 [ 134.493135][ T9346] ___sys_sendmsg+0x17b/0x1d0 [ 134.493222][ T9346] __x64_sys_sendmsg+0xd4/0x160 [ 134.493324][ T9346] x64_sys_call+0x191e/0x2ff0 [ 134.493353][ T9346] do_syscall_64+0xd2/0x200 [ 134.493378][ T9346] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.493466][ T9346] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.493545][ T9346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.493625][ T9346] RIP: 0033:0x7f9c831aebe9 [ 134.493644][ T9346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.493704][ T9346] RSP: 002b:00007f9c81c0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.493729][ T9346] RAX: ffffffffffffffda RBX: 00007f9c833d5fa0 RCX: 00007f9c831aebe9 [ 134.493740][ T9346] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 134.493751][ T9346] RBP: 00007f9c83231e19 R08: 0000000000000000 R09: 0000000000000000 [ 134.493762][ T9346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.493773][ T9346] R13: 00007f9c833d6038 R14: 00007f9c833d5fa0 R15: 00007ffecbed1bc8 [ 134.493791][ T9346] [ 134.493801][ T9346] memory: usage 307200kB, limit 307200kB, failcnt 130 [ 134.660201][ T9384] serio: Serial port ptm0 [ 134.663543][ T9346] memory+swap: usage 307212kB, limit 9007199254740988kB, failcnt 0 [ 134.663563][ T9346] kmem: usage 306984kB, limit 9007199254740988kB, failcnt 0 [ 134.663580][ T9346] Memory cgroup stats for /syz0: [ 134.848788][ T9346] cache 24576 [ 134.857102][ T9346] rss 196608 [ 134.860359][ T9346] shmem 0 [ 134.863308][ T9346] mapped_file 24576 [ 134.867138][ T9346] dirty 4096 [ 134.870344][ T9346] writeback 0 [ 134.873648][ T9346] workingset_refault_anon 6 [ 134.878752][ T9346] workingset_refault_file 0 [ 134.883270][ T9346] swap 12288 [ 134.886493][ T9346] swapcached 0 [ 134.889880][ T9346] pgpgin 142156 [ 134.893348][ T9346] pgpgout 142102 [ 134.896949][ T9346] pgfault 121790 [ 134.900522][ T9346] pgmajfault 7 [ 134.903918][ T9346] inactive_anon 0 [ 134.907676][ T9346] active_anon 0 [ 134.911234][ T9346] inactive_file 0 [ 134.914902][ T9346] active_file 0 [ 134.918395][ T9346] unevictable 221184 [ 134.922309][ T9346] hierarchical_memory_limit 314572800 [ 134.927716][ T9346] hierarchical_memsw_limit 9223372036854771712 [ 134.933947][ T9346] total_cache 24576 [ 134.937791][ T9346] total_rss 196608 [ 134.941526][ T9346] total_shmem 0 [ 134.945068][ T9346] total_mapped_file 24576 [ 134.949450][ T9346] total_dirty 4096 [ 134.953261][ T9346] total_writeback 0 [ 134.957111][ T9346] total_workingset_refault_anon 6 [ 134.962166][ T9346] total_workingset_refault_file 0 [ 134.967283][ T9346] total_swap 12288 [ 134.971043][ T9346] total_swapcached 0 [ 134.974937][ T9346] total_pgpgin 142156 [ 134.978972][ T9346] total_pgpgout 142102 [ 134.983116][ T9346] total_pgfault 121790 [ 134.987278][ T9346] total_pgmajfault 7 [ 134.991265][ T9346] total_inactive_anon 0 [ 134.995450][ T9346] total_active_anon 0 [ 134.999683][ T9346] total_inactive_file 0 [ 135.003958][ T9346] total_active_file 0 [ 135.008023][ T9346] total_unevictable 221184 [ 135.012461][ T9346] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2230,pid=9344,uid=0 [ 135.027212][ T9346] Memory cgroup out of memory: Killed process 9344 (syz.0.2230) total-vm:95812kB, anon-rss:1072kB, file-rss:22116kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 135.075808][ T9387] Falling back ldisc for ttyS3. [ 135.203523][ T9346] syz.0.2230 (9346) used greatest stack depth: 7536 bytes left [ 135.222644][ T9395] ip6gre1: entered allmulticast mode [ 135.349363][ T9411] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9411 comm=syz.3.2257 [ 135.361970][ T9411] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9411 comm=syz.3.2257 [ 135.379717][ T9413] cgroup: Invalid name [ 135.416492][ T9418] pim6reg1: entered promiscuous mode [ 135.421934][ T9418] pim6reg1: entered allmulticast mode [ 135.634301][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 135.634319][ T29] audit: type=1326 audit(1755568316.974:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.6.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832d96ebe9 code=0x7ffc0000 [ 135.676512][ T29] audit: type=1326 audit(1755568317.014:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.6.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f832d96ebe9 code=0x7ffc0000 [ 135.700057][ T29] audit: type=1326 audit(1755568317.014:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.6.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832d96ebe9 code=0x7ffc0000 [ 135.723607][ T29] audit: type=1326 audit(1755568317.014:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.6.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832d96ebe9 code=0x7ffc0000 [ 135.766748][ T9435] loop6: detected capacity change from 0 to 2048 [ 135.789358][ T29] audit: type=1400 audit(1755568317.124:2939): avc: denied { link } for pid=9434 comm="syz.6.2268" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.835028][ T9442] ref_ctr increment failed for inode: 0x3c5 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881044aa280 [ 135.847869][ T9441] uprobe: syz.6.2269:9441 failed to unregister, leaking uprobe [ 135.919886][ T9452] __nla_validate_parse: 1 callbacks suppressed [ 135.919907][ T9452] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2270'. [ 135.936198][ T9440] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2270'. [ 136.003268][ T9458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2277'. [ 136.067638][ T29] audit: type=1400 audit(1755568317.414:2940): avc: denied { unlink } for pid=3309 comm="syz-executor" name="file0" dev="tmpfs" ino=2385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 136.179457][ T29] audit: type=1400 audit(1755568317.524:2941): avc: denied { map } for pid=9470 comm="syz.7.2281" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.262504][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2283'. [ 136.302312][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2283'. [ 136.455752][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2286'. [ 136.496183][ T29] audit: type=1326 audit(1755568317.844:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.7.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9cadebe9 code=0x7ffc0000 [ 136.519822][ T29] audit: type=1326 audit(1755568317.844:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.7.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9cadebe9 code=0x7ffc0000 [ 136.524754][ T9486] loop1: detected capacity change from 0 to 512 [ 136.583675][ T9486] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.619514][ T9486] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.655813][ T29] audit: type=1326 audit(1755568317.894:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.7.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3d9cadebe9 code=0x7ffc0000 [ 136.681997][ T9486] EXT4-fs (loop1): 1 truncate cleaned up [ 136.701539][ T9486] EXT4-fs mount: 2 callbacks suppressed [ 136.701557][ T9486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.904151][ T9498] loop3: detected capacity change from 0 to 2048 [ 136.977573][ T9498] loop3: p1 < > p4 [ 137.005610][ T9498] loop3: p4 size 8388608 extends beyond EOD, truncated [ 137.055402][ T9504] loop6: detected capacity change from 0 to 128 [ 137.243601][ T9510] tipc: Enabled bearer , priority 0 [ 137.255228][ T9510] tipc: Disabling bearer [ 137.272786][ T9517] netlink: 'syz.0.2299': attribute type 39 has an invalid length. [ 137.440244][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.528595][ T9543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2310'. [ 137.609318][ T9558] loop6: detected capacity change from 0 to 512 [ 137.642055][ T9558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.662517][ T9558] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.718084][ T6896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.959004][ T9596] pim6reg1: entered promiscuous mode [ 137.964382][ T9596] pim6reg1: entered allmulticast mode [ 138.098569][ T9614] loop3: detected capacity change from 0 to 1024 [ 138.105725][ T9614] EXT4-fs: Ignoring removed orlov option [ 138.129935][ T9614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.406729][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.575215][ T9647] loop7: detected capacity change from 0 to 128 [ 138.799404][ T9665] loop6: detected capacity change from 0 to 1024 [ 138.847825][ T9665] EXT4-fs: Ignoring removed orlov option [ 138.879283][ T9665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.952588][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2357'. [ 139.264454][ T9688] loop3: detected capacity change from 0 to 512 [ 139.312241][ T9688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.338190][ T9688] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.506678][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2366'. [ 139.591445][ T6896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.600909][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.096958][ T9731] loop6: detected capacity change from 0 to 512 [ 140.139423][ T9731] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.2380: Failed to acquire dquot type 1 [ 140.168509][ T9731] EXT4-fs (loop6): 1 truncate cleaned up [ 140.183571][ T9731] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.213038][ T9731] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.279848][ T6896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.725348][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 140.725369][ T29] audit: type=1400 audit(1755568322.064:3113): avc: denied { read } for pid=9763 comm="syz.0.2395" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 140.754920][ T29] audit: type=1400 audit(1755568322.064:3114): avc: denied { open } for pid=9763 comm="syz.0.2395" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 140.778651][ T29] audit: type=1400 audit(1755568322.064:3115): avc: denied { ioctl } for pid=9763 comm="syz.0.2395" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 141.036973][ T9780] loop7: detected capacity change from 0 to 512 [ 141.053803][ T9780] EXT4-fs: Ignoring removed bh option [ 141.088765][ T9780] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.098023][ T9780] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 141.126815][ T9780] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 141.148092][ T9780] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 141.173775][ T9780] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.213522][ T7322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.339038][ T9802] loop6: detected capacity change from 0 to 164 [ 141.353159][ T29] audit: type=1400 audit(1755568322.694:3116): avc: denied { mount } for pid=9801 comm="syz.6.2412" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 141.383523][ T9806] ipvlan2: entered promiscuous mode [ 141.390529][ T9806] bridge0: port 1(ipvlan2) entered blocking state [ 141.392651][ T9802] syz.6.2412: attempt to access beyond end of device [ 141.392651][ T9802] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 141.397206][ T9806] bridge0: port 1(ipvlan2) entered disabled state [ 141.417781][ T9806] ipvlan2: entered allmulticast mode [ 141.423100][ T9806] bridge0: entered allmulticast mode [ 141.428858][ T9806] ipvlan2: left allmulticast mode [ 141.434000][ T9806] bridge0: left allmulticast mode [ 141.443724][ T9802] syz.6.2412: attempt to access beyond end of device [ 141.443724][ T9802] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 141.472482][ T29] audit: type=1400 audit(1755568322.814:3117): avc: denied { unmount } for pid=6896 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 141.650487][ T9826] loop1: detected capacity change from 0 to 512 [ 141.682446][ T9829] loop7: detected capacity change from 0 to 512 [ 141.691246][ T9826] EXT4-fs: Ignoring removed nobh option [ 141.723004][ T9826] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2422: corrupted inode contents [ 141.747702][ T9826] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.2422: mark_inode_dirty error [ 141.770208][ T9829] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.771849][ T9826] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2422: corrupted inode contents [ 141.843774][ T9829] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.857137][ T9826] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.2422: mark_inode_dirty error [ 141.869463][ T9826] Quota error (device loop1): write_blk: dquota write failed [ 141.877592][ T9826] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 141.891650][ T9826] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2422: Failed to acquire dquot type 0 [ 141.904540][ T9826] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2422: corrupted inode contents [ 141.950862][ T9826] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.2422: mark_inode_dirty error [ 141.982703][ T9826] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2422: corrupted inode contents [ 141.999551][ T9842] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2426'. [ 142.017910][ T7322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.039358][ T9826] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2422: mark_inode_dirty error [ 142.064812][ T9826] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2422: corrupted inode contents [ 142.107181][ T9826] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 142.148386][ T9826] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2422: corrupted inode contents [ 142.189725][ T9826] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.2422: mark_inode_dirty error [ 142.215421][ T9826] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 142.230175][ T9826] EXT4-fs (loop1): 1 truncate cleaned up [ 142.259360][ T9826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.274469][ T9826] ext4 filesystem being mounted at /477/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.294931][ T9851] ipvlan2: entered promiscuous mode [ 142.335576][ T9851] bridge0: port 3(ipvlan2) entered blocking state [ 142.342116][ T9851] bridge0: port 3(ipvlan2) entered disabled state [ 142.351507][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.361410][ T9851] ipvlan2: entered allmulticast mode [ 142.366860][ T9851] bridge0: entered allmulticast mode [ 142.409971][ T9851] ipvlan2: left allmulticast mode [ 142.415076][ T9851] bridge0: left allmulticast mode [ 142.529464][ T9857] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2434'. [ 142.565607][ T29] audit: type=1400 audit(1755568323.904:3118): avc: denied { mount } for pid=9860 comm="+}[@" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 142.604219][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2437'. [ 142.645683][ T29] audit: type=1400 audit(1755568323.934:3119): avc: denied { mount } for pid=9860 comm="+}[@" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 142.655893][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2437'. [ 142.679285][ T9867] netlink: 'syz.1.2438': attribute type 10 has an invalid length. [ 142.713060][ T9867] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 142.785881][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2440'. [ 142.822478][ T9870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.892500][ T9870] vlan0: entered allmulticast mode [ 142.897872][ T9870] bond3: entered allmulticast mode [ 142.978423][ T9877] loop1: detected capacity change from 0 to 2048 [ 143.037552][ T9877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.057672][ T9877] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.2443: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 143.085172][ T29] audit: type=1400 audit(1755568324.424:3120): avc: denied { read write } for pid=9880 comm="syz.3.2444" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.097472][ T9877] EXT4-fs (loop1): Remounting filesystem read-only [ 143.181541][ T9883] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2445'. [ 143.245404][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.329230][ T9888] netlink: 'syz.1.2446': attribute type 13 has an invalid length. [ 143.410193][ T9888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.572444][ T9896] netlink: 'syz.3.2450': attribute type 1 has an invalid length. [ 143.580310][ T9896] netlink: 'syz.3.2450': attribute type 4 has an invalid length. [ 143.588112][ T9896] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2450'. [ 143.624636][ T9900] netlink: 'syz.3.2450': attribute type 1 has an invalid length. [ 143.632540][ T9900] netlink: 'syz.3.2450': attribute type 4 has an invalid length. [ 143.640340][ T9900] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2450'. [ 143.960214][ T9918] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.977540][ T9918] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 144.168627][ T9924] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 144.457301][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2472'. [ 144.501976][ T9942] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2472'. [ 144.575283][ T9944] loop6: detected capacity change from 0 to 2048 [ 144.636246][ T9944] loop6: p1 < > p4 [ 144.641107][ T9944] loop6: p4 size 8388608 extends beyond EOD, truncated [ 144.661770][ T2993] loop6: p1 < > p4 [ 144.671018][ T9951] loop7: detected capacity change from 0 to 1024 [ 144.690695][ T9951] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.713810][ T2993] loop6: p4 size 8388608 extends beyond EOD, truncated [ 144.786873][ T9951] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 144.826463][ T4165] udevd[4165]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 144.837690][ T3713] udevd[3713]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 144.869858][ T3713] udevd[3713]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 144.880110][ T4165] udevd[4165]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 144.953752][ T9966] netlink: 'syz.6.2481': attribute type 3 has an invalid length. [ 145.011630][ T9970] loop3: detected capacity change from 0 to 256 [ 145.385245][ T9993] pim6reg: entered allmulticast mode [ 145.409954][ T9993] pim6reg: left allmulticast mode [ 145.452937][ T7322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.526453][T10003] geneve0: entered allmulticast mode [ 145.606841][T10012] atomic_op ffff888115461128 conn xmit_atomic 0000000000000000 [ 145.716110][T10020] loop6: detected capacity change from 0 to 1024 [ 145.760574][T10020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.818789][ T6896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.889907][T10034] syzkaller1: entered promiscuous mode [ 145.895882][T10034] syzkaller1: entered allmulticast mode [ 145.953343][T10038] loop7: detected capacity change from 0 to 2048 [ 145.971500][T10036] loop1: detected capacity change from 0 to 512 [ 146.003956][T10044] batman_adv: batadv0: adding TT local entry 24:02:48:ff:05:00 to non-existent VLAN 1280 [ 146.014575][ T3713] loop7: p1 < > p4 [ 146.023377][T10036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.025085][ T3713] loop7: p4 size 8388608 extends beyond EOD, truncated [ 146.038276][T10036] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.080671][T10038] loop7: p1 < > p4 [ 146.085493][T10038] loop7: p4 size 8388608 extends beyond EOD, truncated [ 146.150685][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.169783][ T3713] udevd[3713]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 146.169893][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 146.226153][ T4165] udevd[4165]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 146.236734][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 146.257407][T10061] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 146.314871][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 146.314913][ T29] audit: type=1326 audit(1755568327.655:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.0.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c831aebe9 code=0x7ffc0000 [ 146.350457][ T29] audit: type=1326 audit(1755568327.665:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.0.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c831aebe9 code=0x7ffc0000 [ 146.374151][ T29] audit: type=1326 audit(1755568327.665:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.0.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c831aebe9 code=0x7ffc0000 [ 146.397826][ T29] audit: type=1326 audit(1755568327.665:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.0.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c831aebe9 code=0x7ffc0000 [ 146.421394][ T29] audit: type=1326 audit(1755568327.665:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.0.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c831aebe9 code=0x7ffc0000 [ 146.444955][ T29] audit: type=1326 audit(1755568327.665:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.0.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c831aebe9 code=0x7ffc0000 [ 146.468561][ T29] audit: type=1326 audit(1755568327.665:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.0.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c831aebe9 code=0x7ffc0000 [ 146.492198][ T29] audit: type=1326 audit(1755568327.665:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.0.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c831aebe9 code=0x7ffc0000 [ 146.526948][ T29] audit: type=1326 audit(1755568327.725:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.0.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c831aebe9 code=0x7ffc0000 [ 146.550610][ T29] audit: type=1326 audit(1755568327.725:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10067 comm="syz.0.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c831aebe9 code=0x7ffc0000 [ 146.635651][T10079] hub 9-0:1.0: USB hub found [ 146.640419][T10079] hub 9-0:1.0: 8 ports detected [ 146.927434][T10109] loop6: detected capacity change from 0 to 1024 [ 146.982234][T10109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.028152][T10109] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2544: Allocating blocks 385-513 which overlap fs metadata [ 147.070578][T10109] EXT4-fs (loop6): pa ffff888105540460: logic 16, phys. 129, len 24 [ 147.078786][T10109] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 147.093148][T10119] __nla_validate_parse: 3 callbacks suppressed [ 147.093168][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2547'. [ 147.131919][T10119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.144726][ T6896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.165710][T10119] vlan2: entered allmulticast mode [ 147.170909][T10119] bond2: entered allmulticast mode [ 147.269592][T10128] loop1: detected capacity change from 0 to 1024 [ 147.277076][T10129] geneve0: entered allmulticast mode [ 147.300619][T10128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.369825][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.747653][T10152] openvswitch: netlink: Message has 6 unknown bytes. [ 147.771331][T10155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.782042][T10155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.792551][T10155] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000010 [ 148.014635][T10176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.064717][T10176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.090191][T10180] netlink: 'syz.3.2574': attribute type 10 has an invalid length. [ 148.098642][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2573'. [ 148.114035][T10181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.122509][T10180] syz_tun: entered promiscuous mode [ 148.132814][T10180] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 148.147722][T10176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.160160][T10180] netlink: 'syz.3.2574': attribute type 10 has an invalid length. [ 148.171228][T10181] vlan1: entered allmulticast mode [ 148.176431][T10181] bond3: entered allmulticast mode [ 148.193077][T10180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.202792][T10180] team0: Port device bond0 added [ 148.227825][T10176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.261553][T10188] netlink: 'syz.7.2578': attribute type 27 has an invalid length. [ 148.303995][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.311352][T10188] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.322497][T10188] bond0: left promiscuous mode [ 148.327459][T10188] bond_slave_0: left promiscuous mode [ 148.333015][T10188] bond_slave_1: left promiscuous mode [ 148.338908][T10188] batadv0: left promiscuous mode [ 148.441189][T10188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.458924][T10188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.487637][T10211] netlink: 'syz.0.2587': attribute type 10 has an invalid length. [ 148.512458][T10188] team1: left promiscuous mode [ 148.517362][T10188] team1: left allmulticast mode [ 148.524299][T10188] geneve3: left promiscuous mode [ 148.529608][T10188] geneve3: left allmulticast mode [ 148.535732][T10188] macvlan2: left promiscuous mode [ 148.541017][T10214] netlink: 'syz.0.2587': attribute type 10 has an invalid length. [ 148.550545][T10188] ip6gre1: left allmulticast mode [ 148.571502][T10211] syz_tun: entered promiscuous mode [ 148.581477][T10211] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 148.593552][ T5382] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.602924][ T5382] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.611907][ T5382] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 148.621550][ T5382] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.630684][ T5382] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.639698][ T5382] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 148.664864][ T5382] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.673826][ T5382] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.682932][ T5382] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 148.697899][ T5382] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.706922][ T5382] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.716184][ T5382] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 148.732282][T10220] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.734956][ T5382] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.751325][ T5382] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.760850][ T5382] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.771729][ T5382] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.910069][T10237] netlink: 'syz.0.2596': attribute type 1 has an invalid length. [ 149.200993][T10259] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 149.259203][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'. [ 149.268337][T10267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2610'. [ 149.277431][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'. [ 149.286864][T10267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2610'. [ 149.295870][T10267] netlink: 'syz.0.2610': attribute type 6 has an invalid length. [ 149.400391][T10280] loop1: detected capacity change from 0 to 512 [ 149.414562][T10280] EXT4-fs: Ignoring removed nobh option [ 149.437643][T10280] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2614: corrupted inode contents [ 149.468581][T10280] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.2614: mark_inode_dirty error [ 149.484016][T10280] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2614: corrupted inode contents [ 149.501566][T10280] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.2614: mark_inode_dirty error [ 149.514964][T10280] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2614: Failed to acquire dquot type 0 [ 149.529234][T10280] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2614: corrupted inode contents [ 149.541597][T10280] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.2614: mark_inode_dirty error [ 149.561354][T10280] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2614: corrupted inode contents [ 149.574207][T10280] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2614: mark_inode_dirty error [ 149.588730][T10280] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2614: corrupted inode contents [ 149.605228][T10280] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 149.624105][T10295] loop9: detected capacity change from 0 to 7 [ 149.632304][T10280] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2614: corrupted inode contents [ 149.660602][T10280] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.2614: mark_inode_dirty error [ 149.673341][T10280] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 149.683622][T10280] EXT4-fs (loop1): 1 truncate cleaned up [ 149.691562][T10280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.706911][T10280] ext4 filesystem being mounted at /514/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.724122][T10302] bridge: RTM_NEWNEIGH with invalid ether address [ 149.747088][T10280] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2614: corrupted inode contents [ 149.763264][T10280] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.2614: mark_inode_dirty error [ 149.776289][T10280] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2614: corrupted inode contents [ 149.795366][T10280] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2614: mark_inode_dirty error [ 149.808871][T10280] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2614: corrupted inode contents [ 149.821665][T10280] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2614: mark_inode_dirty error [ 149.833448][T10280] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2614: corrupted inode contents [ 149.850048][T10280] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.2614: mark_inode_dirty error [ 149.861952][T10280] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem [ 149.938562][T10324] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2631'. [ 150.072511][T10333] loop6: detected capacity change from 0 to 4096 [ 150.092654][T10333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.199990][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.214483][T10351] openvswitch: netlink: Message has 6 unknown bytes. [ 150.223933][ T5382] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:53: Failed to release dquot type 1 [ 150.257090][T10356] loop7: detected capacity change from 0 to 1024 [ 150.267370][T10356] EXT4-fs: Ignoring removed orlov option [ 150.273196][T10356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.285162][ T6896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.316377][T10356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.407687][ T7322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.508903][T10381] loop7: detected capacity change from 0 to 2048 [ 150.549606][T10381] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.628703][T10381] random: crng reseeded on system resumption [ 150.680717][ T7322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.965702][T10440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2664'. [ 151.091283][T10456] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2672'. [ 151.231602][ T4313] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 151.250158][ T4313] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.267886][T10473] loop1: detected capacity change from 0 to 128 [ 151.308260][T10474] fido_id[10474]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 151.439393][T10481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2693'. [ 151.694235][T10501] vxlan0: entered promiscuous mode [ 151.702341][ T5358] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.724438][ T5358] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.745058][ T5358] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.761053][ T5358] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.776249][T10503] netlink: 'syz.3.2692': attribute type 6 has an invalid length. [ 151.842398][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 151.842413][ T29] audit: type=1400 audit(1755568333.185:3342): avc: denied { nlmsg_write } for pid=10508 comm="syz.0.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.198121][ T29] audit: type=1326 audit(1755568333.545:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10530 comm=77DEA305FF07 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f832d96ebe9 code=0x0 [ 152.241649][T10535] netlink: 'syz.3.2709': attribute type 10 has an invalid length. [ 152.246783][T10538] __nla_validate_parse: 5 callbacks suppressed [ 152.246809][T10538] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2710'. [ 152.249733][T10535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2709'. [ 152.277784][T10539] loop6: detected capacity change from 0 to 512 [ 152.284402][T10539] EXT4-fs: Ignoring removed nobh option [ 152.290447][T10535] dummy0: entered promiscuous mode [ 152.297051][T10535] bond0: (slave dummy0): Releasing backup interface [ 152.310321][T10538] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2710'. [ 152.324492][T10539] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.2706: corrupted inode contents [ 152.343032][T10539] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.2706: mark_inode_dirty error [ 152.357441][T10539] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.2706: corrupted inode contents [ 152.370919][T10539] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.2706: mark_inode_dirty error [ 152.385708][T10539] Quota error (device loop6): write_blk: dquota write failed [ 152.394385][T10539] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 152.404953][T10539] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.2706: Failed to acquire dquot type 0 [ 152.428556][T10539] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2706: corrupted inode contents [ 152.440942][T10539] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.2706: mark_inode_dirty error [ 152.458450][T10539] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2706: corrupted inode contents [ 152.481924][T10539] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.2706: mark_inode_dirty error [ 152.522343][T10539] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2706: corrupted inode contents [ 152.537910][T10539] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 152.546784][T10539] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2706: corrupted inode contents [ 152.572753][T10539] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.2706: mark_inode_dirty error [ 152.595142][T10539] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 152.605607][T10539] EXT4-fs (loop6): 1 truncate cleaned up [ 152.611754][T10539] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.626052][T10539] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.627055][T10566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10566 comm=syz.0.2719 [ 152.645568][T10539] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2706: corrupted inode contents [ 152.661632][T10539] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.2706: mark_inode_dirty error [ 152.673252][T10539] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2706: corrupted inode contents [ 152.685593][T10539] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.2706: mark_inode_dirty error [ 152.697349][T10539] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2706: corrupted inode contents [ 152.709636][T10539] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.2706: mark_inode_dirty error [ 152.722099][T10539] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2706: corrupted inode contents [ 152.734985][T10539] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.2706: mark_inode_dirty error [ 152.746655][T10539] EXT4-fs error (device loop6) in ext4_setattr:6071: Corrupt filesystem [ 152.762357][ T29] audit: type=1400 audit(1755568334.105:3344): avc: denied { sqpoll } for pid=10568 comm="syz.3.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 152.799774][ T29] audit: type=1326 audit(1755568334.145:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10571 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 152.825810][ T29] audit: type=1326 audit(1755568334.155:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10571 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 152.849498][ T29] audit: type=1326 audit(1755568334.155:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10571 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 152.873020][ T29] audit: type=1326 audit(1755568334.155:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10571 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 152.896675][ T29] audit: type=1326 audit(1755568334.155:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10571 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 152.946011][T10574] netlink: 'syz.3.2724': attribute type 10 has an invalid length. [ 152.953961][T10574] dummy0: left promiscuous mode [ 152.960968][T10574] team0: Port device dummy0 added [ 153.038192][ T6896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.047625][ T5358] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:41: Failed to release dquot type 1 [ 153.167013][T10592] tipc: Started in network mode [ 153.171984][T10592] tipc: Node identity a22188e74999, cluster identity 4711 [ 153.179271][T10592] tipc: Enabled bearer , priority 0 [ 153.190312][T10592] tipc: Disabling bearer [ 153.427616][T10617] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2732'. [ 153.549255][T10637] netlink: 'syz.7.2738': attribute type 10 has an invalid length. [ 153.557223][T10637] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2738'. [ 153.571111][T10637] dummy0: entered promiscuous mode [ 153.585228][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2737'. [ 153.615479][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2737'. [ 153.754755][T10665] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2744'. [ 153.769392][T10665] bridge0: entered promiscuous mode [ 153.778093][T10665] bridge0: port 3(macvlan3) entered blocking state [ 153.784951][T10665] bridge0: port 3(macvlan3) entered disabled state [ 153.815226][T10665] macvlan3: entered allmulticast mode [ 153.820705][T10665] bridge0: entered allmulticast mode [ 153.845199][T10665] macvlan3: left allmulticast mode [ 153.850390][T10665] bridge0: left allmulticast mode [ 153.870788][T10665] bridge0: left promiscuous mode [ 153.946237][T10688] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2750'. [ 154.007742][T10694] loop7: detected capacity change from 0 to 1024 [ 154.031372][T10694] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 154.042503][T10694] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 154.054390][T10700] tipc: Enabled bearer , priority 0 [ 154.067258][T10694] JBD2: no valid journal superblock found [ 154.073079][T10694] EXT4-fs (loop7): Could not load journal inode [ 154.085613][T10700] tipc: Disabling bearer [ 154.118254][T10694] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 154.199141][T10724] loop7: detected capacity change from 0 to 512 [ 154.227733][T10724] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2757: bg 0: block 248: padding at end of block bitmap is not set [ 154.248142][T10724] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2757: Failed to acquire dquot type 1 [ 154.260638][T10724] EXT4-fs (loop7): 1 truncate cleaned up [ 154.284480][T10724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.299292][T10724] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.348955][ T7322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.350625][T10742] netlink: 'syz.3.2762': attribute type 1 has an invalid length. [ 154.366001][T10742] netlink: 'syz.3.2762': attribute type 4 has an invalid length. [ 154.373744][T10742] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2762'. [ 154.401883][T10749] netlink: 'syz.3.2762': attribute type 1 has an invalid length. [ 154.409829][T10749] netlink: 'syz.3.2762': attribute type 4 has an invalid length. [ 154.455852][T10757] bridge0: entered promiscuous mode [ 154.462098][T10757] bridge0: port 3(macvlan0) entered blocking state [ 154.468804][T10757] bridge0: port 3(macvlan0) entered disabled state [ 154.482789][T10757] macvlan0: entered allmulticast mode [ 154.488336][T10757] bridge0: entered allmulticast mode [ 154.496002][T10757] macvlan0: left allmulticast mode [ 154.497813][T10761] netlink: 'syz.7.2765': attribute type 10 has an invalid length. [ 154.501186][T10757] bridge0: left allmulticast mode [ 154.516588][T10757] bridge0: left promiscuous mode [ 154.524268][T10761] dummy0: left promiscuous mode [ 154.532433][T10761] team0: Port device dummy0 added [ 154.709914][T10791] netlink: 'syz.3.2770': attribute type 27 has an invalid length. [ 154.729024][T10784] loop7: detected capacity change from 0 to 8192 [ 154.749721][T10791] syz_tun: left promiscuous mode [ 154.762429][T10791] geneve0: left allmulticast mode [ 154.781202][ T5355] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.816748][T10796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.827196][T10796] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.843239][T10796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.862383][ T5355] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.879413][ T5355] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.896738][ T5355] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.929651][T10809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.947707][T10809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.975788][ T4309] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.983356][ T4309] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.990891][ T4309] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.000460][ T4309] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.007991][ T4309] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.015586][ T4309] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.023234][ T4309] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.030796][ T4309] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.038266][ T4309] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.046647][ T4309] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz1] on syz0 [ 155.076599][T10818] fido_id[10818]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.931977][T10906] netlink: 'syz.0.2796': attribute type 10 has an invalid length. [ 156.149111][T10943] netlink: 'syz.1.2803': attribute type 3 has an invalid length. [ 156.296691][T10967] bridge0: entered promiscuous mode [ 156.327278][T10967] bridge0: port 1(macvlan2) entered blocking state [ 156.333883][T10967] bridge0: port 1(macvlan2) entered disabled state [ 156.342154][T10967] macvlan2: entered allmulticast mode [ 156.347689][T10967] bridge0: entered allmulticast mode [ 156.373917][T10967] macvlan2: left allmulticast mode [ 156.379161][T10967] bridge0: left allmulticast mode [ 156.400434][T10967] bridge0: left promiscuous mode [ 156.786671][T11057] bridge0: entered promiscuous mode [ 156.794293][T11057] bridge0: port 3(macvlan2) entered blocking state [ 156.801168][T11057] bridge0: port 3(macvlan2) entered disabled state [ 156.808308][T11057] macvlan2: entered allmulticast mode [ 156.813788][T11057] bridge0: entered allmulticast mode [ 156.820128][T11057] macvlan2: left allmulticast mode [ 156.825355][T11057] bridge0: left allmulticast mode [ 156.831206][T11057] bridge0: left promiscuous mode [ 157.003274][T11074] netlink: 'syz.7.2833': attribute type 27 has an invalid length. [ 157.016073][T11074] vxlan0: left promiscuous mode [ 157.021186][T11072] loop6: detected capacity change from 0 to 8192 [ 157.022297][ T5355] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.055263][T11074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.063755][T11074] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.074271][T11074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.090569][ T5355] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.101349][ T5355] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.111567][ T5355] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.179143][T11085] loop6: detected capacity change from 0 to 1024 [ 157.206606][T11085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.227812][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 157.227830][ T29] audit: type=1326 audit(157.202:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.7.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9cadebe9 code=0x7ffc0000 [ 157.257263][ T29] audit: type=1326 audit(157.202:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.7.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d9cadebe9 code=0x7ffc0000 [ 157.280240][ T29] audit: type=1326 audit(157.202:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.7.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9cadebe9 code=0x7ffc0000 [ 157.303190][ T29] audit: type=1326 audit(157.202:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.7.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f3d9cadebe9 code=0x7ffc0000 [ 157.326762][ T29] audit: type=1326 audit(157.302:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.7.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9cadebe9 code=0x7ffc0000 [ 157.349742][ T29] audit: type=1326 audit(157.302:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.7.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9cadebe9 code=0x7ffc0000 [ 157.352396][ T6896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.403409][T11096] loop7: detected capacity change from 0 to 1024 [ 157.415594][T11096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.432314][ T29] audit: type=1400 audit(157.392:3477): avc: denied { map } for pid=11097 comm="syz.1.2844" path="socket:[31635]" dev="sockfs" ino=31635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.484019][T11096] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.509640][T11110] loop3: detected capacity change from 0 to 1024 [ 157.525488][T11110] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 157.553128][ T29] audit: type=1400 audit(157.522:3478): avc: denied { read } for pid=11107 comm="syz.3.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.586158][ T7322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.678287][T11130] loop3: detected capacity change from 0 to 1024 [ 157.718155][T11130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.735887][T11117] bond0: left promiscuous mode [ 157.740743][T11117] bond_slave_0: left promiscuous mode [ 157.746552][T11117] dummy0: left promiscuous mode [ 157.751526][T11117] bond0: left allmulticast mode [ 157.756599][T11117] bond_slave_0: left allmulticast mode [ 157.762570][T11117] dummy0: left allmulticast mode [ 157.768985][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.841390][T11117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.857578][T11117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.921241][T11117] bond1: left allmulticast mode [ 157.942467][T11117] team1: left promiscuous mode [ 157.947464][T11117] team1: left allmulticast mode [ 158.014970][T11135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.031993][T11135] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.066455][T11135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.094037][ T310] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.104955][ T310] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.114440][T11180] __nla_validate_parse: 10 callbacks suppressed [ 158.114462][T11180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2863'. [ 158.130581][ T310] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.142409][T11180] bridge0: entered promiscuous mode [ 158.149802][T11180] bridge0: port 3(macvlan0) entered blocking state [ 158.156503][T11180] bridge0: port 3(macvlan0) entered disabled state [ 158.163476][T11180] macvlan0: entered allmulticast mode [ 158.169052][T11180] bridge0: entered allmulticast mode [ 158.177888][T11180] macvlan0: left allmulticast mode [ 158.183093][T11180] bridge0: left allmulticast mode [ 158.189420][T11180] bridge0: left promiscuous mode [ 158.201738][ T310] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.273178][ T29] audit: type=1326 audit(158.242:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11193 comm="syz.3.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 158.296268][ T29] audit: type=1326 audit(158.242:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11193 comm="syz.3.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 158.299003][T11194] loop1: detected capacity change from 0 to 1024 [ 158.328166][T11196] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2868'. [ 158.356427][T11200] loop6: detected capacity change from 0 to 1024 [ 158.364481][T11194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.373293][T11200] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.379143][T11205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2870'. [ 158.383071][T11200] EXT4-fs: Ignoring removed bh option [ 158.410514][T11194] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.2867: lblock 1 mapped to illegal pblock 1 (length 15) [ 158.434868][T11194] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 158.447453][T11194] EXT4-fs (loop1): This should not happen!! Data will be lost [ 158.447453][T11194] [ 158.458387][T11200] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.462103][T11194] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 158.527360][ T5330] bridge_slave_1: left allmulticast mode [ 158.533289][ T5330] bridge_slave_1: left promiscuous mode [ 158.539090][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.567369][ T5330] bridge_slave_0: left allmulticast mode [ 158.573068][ T5330] bridge_slave_0: left promiscuous mode [ 158.578777][ T5330] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.595995][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.611024][ T6896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.664516][T11222] loop1: detected capacity change from 0 to 8192 [ 158.694602][ T5330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.705155][ T5330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.714887][ T5330] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 158.724966][ T5330] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 158.733900][ T5330] bond0 (unregistering): Released all slaves [ 158.777814][ T5330] tipc: Left network mode [ 158.822762][ T5330] hsr_slave_1: left promiscuous mode [ 158.829741][ T5330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.838477][ T5330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.885872][ T5330] team0 (unregistering): Port device team_slave_1 removed [ 158.896543][ T5330] team0 (unregistering): Port device team_slave_0 removed [ 158.925232][ T5330] team0 (unregistering): Port device dummy0 removed [ 158.941095][T11197] chnl_net:caif_netlink_parms(): no params data found [ 158.995781][T11222] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 159.003396][T11222] FAT-fs (loop1): Filesystem has been set read-only [ 159.047348][T11197] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.055207][T11197] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.063012][T11197] bridge_slave_0: entered allmulticast mode [ 159.070204][T11197] bridge_slave_0: entered promiscuous mode [ 159.077231][T11197] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.084407][T11197] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.093354][T11197] bridge_slave_1: entered allmulticast mode [ 159.100089][T11197] bridge_slave_1: entered promiscuous mode [ 159.123395][T11197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.134041][T11197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.154630][T11197] team0: Port device team_slave_0 added [ 159.161591][T11197] team0: Port device team_slave_1 added [ 159.178916][T11197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.186045][T11197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.212073][T11197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.223295][T11197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.230303][T11197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.256240][T11197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.284191][T11197] hsr_slave_0: entered promiscuous mode [ 159.290726][T11197] hsr_slave_1: entered promiscuous mode [ 159.296875][T11197] debugfs: 'hsr0' already exists in 'hsr' [ 159.302616][T11197] Cannot create hsr debugfs directory [ 159.374672][T11197] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 159.383739][T11197] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 159.393112][T11197] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 159.402569][T11197] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 159.443999][T11197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.460669][T11197] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.470811][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.477971][ T5330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.490405][ T5382] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.497594][ T5382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.564470][T11197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.682786][T11197] veth0_vlan: entered promiscuous mode [ 159.690963][T11197] veth1_vlan: entered promiscuous mode [ 159.707394][T11197] veth0_macvtap: entered promiscuous mode [ 159.715447][T11197] veth1_macvtap: entered promiscuous mode [ 159.727870][T11197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.740734][T11197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.751656][ T5382] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.763153][ T5382] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.773292][ T5382] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.785313][ T5382] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.867074][T11275] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2878'. [ 159.894253][T11275] bridge0: entered promiscuous mode [ 159.908854][T11275] bridge0: port 3(macvlan2) entered blocking state [ 159.915750][T11275] bridge0: port 3(macvlan2) entered disabled state [ 159.927510][T11275] macvlan2: entered allmulticast mode [ 159.932960][T11275] bridge0: entered allmulticast mode [ 159.942538][T11275] macvlan2: left allmulticast mode [ 159.947906][T11275] bridge0: left allmulticast mode [ 159.957807][T11275] bridge0: left promiscuous mode [ 159.969539][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2882'. [ 160.039968][T11298] validate_nla: 1 callbacks suppressed [ 160.039985][T11298] netlink: 'syz.0.2890': attribute type 27 has an invalid length. [ 160.060877][T11298] syz_tun: left promiscuous mode [ 160.068588][T11298] ip6gre1: left allmulticast mode [ 160.084351][T11298] gtp0: left promiscuous mode [ 160.105373][T11304] loop6: detected capacity change from 0 to 128 [ 160.120552][T11298] macvlan2: left promiscuous mode [ 160.186620][T11306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.209976][T11306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.372638][T11326] loop1: detected capacity change from 0 to 1024 [ 160.383817][T11330] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2905'. [ 160.393419][T11326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.404480][T11330] bridge0: entered promiscuous mode [ 160.411743][T11330] bridge0: port 3(macvlan2) entered blocking state [ 160.418468][T11330] bridge0: port 3(macvlan2) entered disabled state [ 160.425337][T11330] macvlan2: entered allmulticast mode [ 160.430794][T11330] bridge0: entered allmulticast mode [ 160.436927][T11330] macvlan2: left allmulticast mode [ 160.442134][T11330] bridge0: left allmulticast mode [ 160.448103][T11326] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 160.463746][T11326] System zones: 0-1, 3-36 [ 160.474479][T11330] bridge0: left promiscuous mode [ 160.483548][T11326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.548330][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.658971][T11345] netlink: 'syz.6.2912': attribute type 27 has an invalid length. [ 160.726336][T11345] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.733597][T11345] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.766321][T11345] bond0: left promiscuous mode [ 160.771162][T11345] bond_slave_0: left promiscuous mode [ 160.776754][T11345] bond_slave_1: left promiscuous mode [ 160.802845][T11345] dummy0: left promiscuous mode [ 160.807924][T11345] batadv0: left promiscuous mode [ 160.887035][T11345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.899855][T11345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.933720][T11345] geneve0: left allmulticast mode [ 160.982891][T11345] team1: left promiscuous mode [ 160.987855][T11345] team1: left allmulticast mode [ 160.999577][T11348] bridge0: port 1(macsec1) entered blocking state [ 161.006211][T11348] bridge0: port 1(macsec1) entered disabled state [ 161.014392][T11348] macsec1: entered allmulticast mode [ 161.019903][T11348] bridge0: entered allmulticast mode [ 161.037113][T11348] macsec1: left allmulticast mode [ 161.042275][T11348] bridge0: left allmulticast mode [ 161.077089][T11350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.085668][T11350] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.096893][T11350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.113811][ T5344] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.140205][ T5344] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.163204][ T5344] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.173262][ T5344] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.276358][T11380] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2928'. [ 161.291975][T11381] bond0: entered promiscuous mode [ 161.297262][T11381] bond_slave_0: entered promiscuous mode [ 161.303080][T11381] bond_slave_1: entered promiscuous mode [ 161.308900][T11381] syz_tun: entered promiscuous mode [ 161.320754][T11381] bond0: left promiscuous mode [ 161.325677][T11381] bond_slave_0: left promiscuous mode [ 161.331311][T11381] bond_slave_1: left promiscuous mode [ 161.337213][T11381] syz_tun: left promiscuous mode [ 162.226867][T11495] netlink: 'syz.8.2932': attribute type 27 has an invalid length. [ 162.233727][T11494] loop6: detected capacity change from 0 to 1024 [ 162.246878][T11494] EXT4-fs: Ignoring removed orlov option [ 162.271944][T11494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.285671][T11501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2934'. [ 162.298793][T11495] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.306090][T11495] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.350033][T11495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.361584][T11495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.425605][T11502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.435366][T11502] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.445839][T11502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.463950][T11501] bridge0: entered promiscuous mode [ 162.469927][T11501] bridge0: port 3(macvlan0) entered blocking state [ 162.476600][T11501] bridge0: port 3(macvlan0) entered disabled state [ 162.484006][T11501] macvlan0: entered allmulticast mode [ 162.489486][T11501] bridge0: entered allmulticast mode [ 162.495554][T11501] macvlan0: left allmulticast mode [ 162.500768][T11501] bridge0: left allmulticast mode [ 162.506539][T11501] bridge0: left promiscuous mode [ 162.516053][ T5355] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.536788][ T5355] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.546514][ T5355] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.558469][ T5355] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.635600][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2939'. [ 162.644692][T11514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2939'. [ 162.653845][T11514] netlink: 'syz.0.2939': attribute type 6 has an invalid length. [ 162.665191][ T6896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.720622][T11526] bridge_slave_1: left allmulticast mode [ 162.726575][T11526] bridge_slave_1: left promiscuous mode [ 162.732382][T11526] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.754970][T11526] bridge_slave_0: left allmulticast mode [ 162.760694][T11526] bridge_slave_0: left promiscuous mode [ 162.766633][T11526] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.779644][T11530] futex_wake_op: syz.1.2949 tries to shift op by -1; fix this program [ 163.142437][T11567] bridge0: entered promiscuous mode [ 163.148593][T11567] bridge0: port 3(macsec1) entered blocking state [ 163.155405][T11567] bridge0: port 3(macsec1) entered disabled state [ 163.162401][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 163.162418][ T29] audit: type=1400 audit(163.132:3552): avc: denied { read } for pid=11568 comm="syz.1.2967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.165241][T11567] macsec1: entered allmulticast mode [ 163.192692][T11567] bridge0: entered allmulticast mode [ 163.200551][T11567] macsec1: left allmulticast mode [ 163.205722][T11567] bridge0: left allmulticast mode [ 163.225630][T11567] bridge0: left promiscuous mode [ 163.408224][ T29] audit: type=1326 audit(163.372:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806c03ebe9 code=0x7ffc0000 [ 163.476963][T11596] tipc: Started in network mode [ 163.481923][T11596] tipc: Node identity ac1414aa, cluster identity 4711 [ 163.484175][ T29] audit: type=1326 audit(163.382:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f806c03ebe9 code=0x7ffc0000 [ 163.491695][T11596] tipc: New replicast peer: 100.1.1.1 [ 163.511621][ T29] audit: type=1326 audit(163.392:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806c03ebe9 code=0x7ffc0000 [ 163.517223][T11596] tipc: Enabled bearer , priority 10 [ 163.540081][ T29] audit: type=1326 audit(163.392:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f806c03ebe9 code=0x7ffc0000 [ 163.573335][ T29] audit: type=1326 audit(163.542:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.3.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 163.596533][ T29] audit: type=1326 audit(163.542:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.3.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 163.630493][ T29] audit: type=1326 audit(163.542:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806c03ebe9 code=0x7ffc0000 [ 163.653577][ T29] audit: type=1326 audit(163.552:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806c03ebe9 code=0x7ffc0000 [ 163.702653][ T29] audit: type=1400 audit(163.672:3561): avc: denied { mounton } for pid=11602 comm="syz.3.2981" path="/628/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 163.861260][T11619] loop1: detected capacity change from 0 to 512 [ 163.872604][T11619] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 163.887150][T11619] EXT4-fs (loop1): 1 truncate cleaned up [ 163.895787][T11619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.928092][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.050415][T11636] __nla_validate_parse: 8 callbacks suppressed [ 164.050432][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2995'. [ 164.105568][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2995'. [ 164.345480][T11653] loop6: detected capacity change from 0 to 512 [ 164.352465][T11655] loop1: detected capacity change from 0 to 128 [ 164.352627][T11653] EXT4-fs: Ignoring removed oldalloc option [ 164.370617][T11653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 164.381348][T11653] System zones: 1-12 [ 164.406338][T11653] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3003: Parent and EA inode have the same ino 15 [ 164.406491][T11661] netlink: 'syz.3.3006': attribute type 27 has an invalid length. [ 164.429056][T11653] EXT4-fs (loop6): 1 orphan inode deleted [ 164.435536][T11653] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.450188][T11653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.481881][T11662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.493389][T11662] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.509337][T11662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.634263][ T4309] tipc: Node number set to 2886997162 [ 164.639402][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3013'. [ 164.640428][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 164.662103][T11677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.797785][T11694] loop6: detected capacity change from 0 to 128 [ 165.470894][T11759] bond0: (slave syz_tun): Releasing backup interface [ 165.483060][T11759] team0: Port device bond0 removed [ 165.492119][T11759] team0: Port device dummy0 removed [ 165.500930][T11759] bridge_slave_0: left allmulticast mode [ 165.506684][T11759] bridge_slave_0: left promiscuous mode [ 165.512407][T11759] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.523128][T11759] bridge_slave_1: left allmulticast mode [ 165.528854][T11759] bridge_slave_1: left promiscuous mode [ 165.534693][T11759] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.543520][T11759] bond0: (slave bond_slave_0): Releasing backup interface [ 165.551633][T11759] bond0: (slave bond_slave_1): Releasing backup interface [ 165.560668][T11759] team0: Port device team_slave_0 removed [ 165.567969][T11759] team0: Port device team_slave_1 removed [ 165.574509][T11759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.582411][T11759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.625359][T11762] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3050'. [ 165.634504][T11762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3050'. [ 165.643500][T11762] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3050'. [ 165.662031][T11762] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3050'. [ 165.671287][T11762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3050'. [ 165.680353][T11762] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3050'. [ 165.782133][T11769] netlink: 'syz.1.3051': attribute type 5 has an invalid length. [ 166.064970][T11795] netlink: zone id is out of range [ 166.217391][T11821] ip6gre1: entered allmulticast mode [ 166.423422][T11848] pimreg: entered allmulticast mode [ 166.438176][T11848] pimreg: left allmulticast mode [ 166.468415][T11856] tipc: New replicast peer: 255.255.255.83 [ 166.474485][T11856] tipc: Enabled bearer , priority 10 [ 166.677771][T11888] netlink: 'syz.3.3105': attribute type 2 has an invalid length. [ 166.685668][T11888] netlink: 'syz.3.3105': attribute type 1 has an invalid length. [ 166.733344][T11896] bridge0: port 3(vlan2) entered blocking state [ 166.740182][T11896] bridge0: port 3(vlan2) entered disabled state [ 166.746901][T11896] vlan2: entered allmulticast mode [ 166.752077][T11896] bridge0: entered allmulticast mode [ 166.758399][T11896] vlan2: left allmulticast mode [ 166.763468][T11896] bridge0: left allmulticast mode [ 167.227698][T11929] wireguard0: entered promiscuous mode [ 167.233272][T11929] wireguard0: entered allmulticast mode [ 167.519528][T11958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.527428][T11958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.536005][T11958] bond0: (slave batadv0): Releasing backup interface [ 167.756602][T11980] loop6: detected capacity change from 0 to 512 [ 167.765771][T11980] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.3141: casefold flag without casefold feature [ 167.781025][T11980] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3141: couldn't read orphan inode 15 (err -117) [ 167.808317][T11980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.002725][T12011] loop3: detected capacity change from 0 to 1024 [ 168.017366][T12011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.039742][T12011] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 168.055355][ T6896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.067763][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.238812][T12035] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 168.245390][T12035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.253020][T12035] vhci_hcd vhci_hcd.0: Device attached [ 168.283883][T12035] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 168.290523][T12035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.298137][T12035] vhci_hcd vhci_hcd.0: Device attached [ 168.310112][T12035] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 168.310694][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 168.310754][ T29] audit: type=1400 audit(168.282:3738): avc: denied { execute } for pid=12042 comm="syz.1.3163" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 168.316764][T12035] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 168.317012][T12035] vhci_hcd vhci_hcd.0: Device attached [ 168.391798][T12047] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 168.438969][T12035] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 168.445630][T12035] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 168.453295][T12035] vhci_hcd vhci_hcd.0: Device attached [ 168.474501][T12035] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 168.481218][T12035] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 168.488751][T12035] vhci_hcd vhci_hcd.0: Device attached [ 168.494411][ T4314] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 168.543828][T12035] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 168.550493][T12035] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 168.558165][T12035] vhci_hcd vhci_hcd.0: Device attached [ 168.595994][T12047] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(18) [ 168.602661][T12047] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 168.610549][T12047] vhci_hcd vhci_hcd.0: Device attached [ 168.643145][T12071] vhci_hcd: connection closed [ 168.643534][T12065] vhci_hcd: connection closed [ 168.648363][ T41] vhci_hcd: stop threads [ 168.657407][ T41] vhci_hcd: release socket [ 168.661877][ T41] vhci_hcd: disconnect device [ 168.671518][T12061] vhci_hcd: connection closed [ 168.671629][T12043] vhci_hcd: connection closed [ 168.672199][T12040] vhci_hcd: connection closed [ 168.681314][ T41] vhci_hcd: stop threads [ 168.684455][T12036] vhci_hcd: connection reset by peer [ 168.686173][ T41] vhci_hcd: release socket [ 168.690449][T12053] vhci_hcd: connection closed [ 168.695741][ T41] vhci_hcd: disconnect device [ 168.714373][ T41] vhci_hcd: stop threads [ 168.718719][ T41] vhci_hcd: release socket [ 168.723157][ T41] vhci_hcd: disconnect device [ 168.732599][ T41] vhci_hcd: stop threads [ 168.737055][ T41] vhci_hcd: release socket [ 168.741527][ T41] vhci_hcd: disconnect device [ 168.747017][ T29] audit: type=1326 audit(168.722:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.8.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8504dfebe9 code=0x7ffc0000 [ 168.770886][ T41] vhci_hcd: stop threads [ 168.775253][ T41] vhci_hcd: release socket [ 168.779743][ T41] vhci_hcd: disconnect device [ 168.780875][ T29] audit: type=1326 audit(168.722:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.8.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8504dfebe9 code=0x7ffc0000 [ 168.807402][ T29] audit: type=1326 audit(168.742:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.8.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f8504dfebe9 code=0x7ffc0000 [ 168.830384][ T29] audit: type=1326 audit(168.742:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.8.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8504dfebe9 code=0x7ffc0000 [ 168.853331][ T29] audit: type=1326 audit(168.742:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.8.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8504dfebe9 code=0x7ffc0000 [ 168.860879][ T41] vhci_hcd: stop threads [ 168.880642][ T41] vhci_hcd: release socket [ 168.885109][ T41] vhci_hcd: disconnect device [ 168.893581][ T41] vhci_hcd: stop threads [ 168.897950][ T41] vhci_hcd: release socket [ 168.902407][ T41] vhci_hcd: disconnect device [ 168.954676][ T29] audit: type=1326 audit(168.922:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12080 comm="syz.1.3175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806c03ebe9 code=0x0 [ 169.104019][T12094] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 169.105504][ T29] audit: type=1400 audit(169.072:3745): avc: denied { ioctl } for pid=12093 comm="+}[@" path="socket:[34482]" dev="sockfs" ino=34482 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.170025][T12099] __nla_validate_parse: 12 callbacks suppressed [ 169.170040][T12099] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3182'. [ 169.375443][ T29] audit: type=1326 audit(169.352:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12116 comm="syz.8.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8504dfebe9 code=0x7ffc0000 [ 169.398555][ T29] audit: type=1326 audit(169.352:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12116 comm="syz.8.3190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8504dfebe9 code=0x7ffc0000 [ 169.463223][T12121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12121 comm=syz.3.3192 [ 169.502306][T12127] loop8: detected capacity change from 0 to 512 [ 169.514663][T12127] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.3195: casefold flag without casefold feature [ 169.533325][T12127] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3195: couldn't read orphan inode 15 (err -117) [ 169.548132][T12127] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.747629][T11197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.967840][T12175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.991579][T12175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.276492][T12191] netlink: 'syz.6.3224': attribute type 298 has an invalid length. [ 170.756404][T12208] macvtap0: refused to change device tx_queue_len [ 170.817291][T12212] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 170.823874][T12212] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.831447][T12212] vhci_hcd vhci_hcd.0: Device attached [ 170.842065][T12212] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5) [ 170.848692][T12212] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.856422][T12212] vhci_hcd vhci_hcd.0: Device attached [ 170.864794][T12212] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(7) [ 170.871523][T12212] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.879013][T12212] vhci_hcd vhci_hcd.0: Device attached [ 170.885750][T12212] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.894864][T12212] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(11) [ 170.901509][T12212] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 170.909207][T12212] vhci_hcd vhci_hcd.0: Device attached [ 170.933667][T12206] SELinux: ebitmap: truncated map [ 170.933852][T12212] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(13) [ 170.945404][T12212] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.949764][T12206] SELinux: failed to load policy [ 170.952888][T12212] vhci_hcd vhci_hcd.0: Device attached [ 170.973754][T12223] vhci_hcd vhci_hcd.0: pdev(8) rhport(6) sockfd(15) [ 170.980415][T12223] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 170.988032][T12223] vhci_hcd vhci_hcd.0: Device attached [ 171.011096][T12212] vhci_hcd vhci_hcd.0: pdev(8) rhport(7) sockfd(17) [ 171.017830][T12212] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 171.025483][T12212] vhci_hcd vhci_hcd.0: Device attached [ 171.039464][T12228] vhci_hcd: connection closed [ 171.039504][T12219] vhci_hcd: connection closed [ 171.044289][T12217] vhci_hcd: connection closed [ 171.049014][T12213] vhci_hcd: connection closed [ 171.053759][T12215] vhci_hcd: connection closed [ 171.058713][T12221] vhci_hcd: connection closed [ 171.063776][T12224] vhci_hcd: connection closed [ 171.068841][ T5382] vhci_hcd: stop threads [ 171.077938][ T5382] vhci_hcd: release socket [ 171.082356][ T5382] vhci_hcd: disconnect device [ 171.087414][ T5382] vhci_hcd: stop threads [ 171.091763][ T5382] vhci_hcd: release socket [ 171.093888][ T4296] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 171.096284][ T5382] vhci_hcd: disconnect device [ 171.105790][T12214] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 171.108650][ T5382] vhci_hcd: stop threads [ 171.118528][ T5382] vhci_hcd: release socket [ 171.123026][ T5382] vhci_hcd: disconnect device [ 171.127811][ T5382] vhci_hcd: stop threads [ 171.132140][ T5382] vhci_hcd: release socket [ 171.136678][ T5382] vhci_hcd: disconnect device [ 171.141474][ T5382] vhci_hcd: stop threads [ 171.145800][ T5382] vhci_hcd: release socket [ 171.150236][ T5382] vhci_hcd: disconnect device [ 171.155249][ T5382] vhci_hcd: stop threads [ 171.159566][ T5382] vhci_hcd: release socket [ 171.164023][ T5382] vhci_hcd: disconnect device [ 171.168876][ T5382] vhci_hcd: stop threads [ 171.173205][ T5382] vhci_hcd: release socket [ 171.177692][ T5382] vhci_hcd: disconnect device [ 171.602804][T12242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3239'. [ 171.662447][T12244] loop8: detected capacity change from 0 to 8192 [ 171.800139][T12256] macvtap0: refused to change device tx_queue_len [ 171.879857][ T5382] bridge_slave_1: left allmulticast mode [ 171.885602][ T5382] bridge_slave_1: left promiscuous mode [ 171.891333][ T5382] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.902616][ T5382] bridge_slave_0: left allmulticast mode [ 171.908386][ T5382] bridge_slave_0: left promiscuous mode [ 171.914213][ T5382] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.125751][ T5382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.135082][ T5382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.144401][ T5382] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 172.152885][ T5382] bond0 (unregistering): Released all slaves [ 172.161446][ T5382] bond1 (unregistering): Released all slaves [ 172.220800][ T5382] hsr_slave_0: left promiscuous mode [ 172.226510][ T5382] hsr_slave_1: left promiscuous mode [ 172.264236][ T5382] team0 (unregistering): Port device team_slave_1 removed [ 172.274221][ T5382] team0 (unregistering): Port device team_slave_0 removed [ 172.342402][T12251] chnl_net:caif_netlink_parms(): no params data found [ 172.378894][T12251] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.386154][T12251] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.393574][T12251] bridge_slave_0: entered allmulticast mode [ 172.400228][T12251] bridge_slave_0: entered promiscuous mode [ 172.407181][T12251] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.414306][T12251] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.421573][T12251] bridge_slave_1: entered allmulticast mode [ 172.428163][T12251] bridge_slave_1: entered promiscuous mode [ 172.444784][T12251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.455622][T12251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.476335][T12251] team0: Port device team_slave_0 added [ 172.483145][T12251] team0: Port device team_slave_1 added [ 172.500761][T12251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.507991][T12251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.534045][T12251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.545336][T12251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.552303][T12251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.578285][T12251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.604542][T12251] hsr_slave_0: entered promiscuous mode [ 172.610615][T12251] hsr_slave_1: entered promiscuous mode [ 172.616565][T12251] debugfs: 'hsr0' already exists in 'hsr' [ 172.622294][T12251] Cannot create hsr debugfs directory [ 172.689838][T12251] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 172.698540][T12251] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 172.707361][T12251] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 172.717089][T12251] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 172.731922][T12251] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.739087][T12251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.746351][T12251] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.753397][T12251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.782081][T12251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.796142][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.804184][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.817889][T12251] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.826895][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.834031][ T5330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.848440][ T5382] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.855566][ T5382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.915106][T12251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.020498][T12251] veth0_vlan: entered promiscuous mode [ 173.028533][T12251] veth1_vlan: entered promiscuous mode [ 173.044036][T12251] veth0_macvtap: entered promiscuous mode [ 173.051485][T12251] veth1_macvtap: entered promiscuous mode [ 173.062851][T12251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.074014][T12251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.085096][ T5382] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.094408][ T5382] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.104860][ T5382] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.115714][ T5382] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.155592][T12307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3263'. [ 173.256155][T12320] loop9: detected capacity change from 0 to 128 [ 173.382611][T12329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3261'. [ 173.703875][ T4314] usb 1-1: enqueue for inactive port 0 [ 173.709563][ T4314] usb 1-1: enqueue for inactive port 0 [ 173.743345][T12352] netlink: 'syz.8.3272': attribute type 13 has an invalid length. [ 173.776418][T12352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.792067][ T4314] vhci_hcd: vhci_device speed not set [ 173.977476][T12360] netlink: 'syz.0.3275': attribute type 10 has an invalid length. [ 173.988312][T12360] ipvlan0: entered allmulticast mode [ 173.993865][T12360] veth0_vlan: entered allmulticast mode [ 174.018049][T12362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3278'. [ 174.034131][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3279'. [ 174.044156][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3279'. [ 174.053853][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3279'. [ 174.063186][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3279'. [ 174.123949][T12370] loop3: detected capacity change from 0 to 1024 [ 174.132801][T12370] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 174.163111][T12370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.183575][T12375] bond0: entered promiscuous mode [ 174.188677][T12375] bond_slave_0: entered promiscuous mode [ 174.194498][T12375] bond_slave_1: entered promiscuous mode [ 174.200222][T12375] macvlan2: entered promiscuous mode [ 174.205880][T12375] syz_tun: entered promiscuous mode [ 174.214963][T12375] batadv0: entered promiscuous mode [ 174.224126][T12375] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 174.245186][T12375] hsr1: entered allmulticast mode [ 174.250342][T12375] bond0: entered allmulticast mode [ 174.255572][T12375] bond_slave_0: entered allmulticast mode [ 174.261312][T12375] bond_slave_1: entered allmulticast mode [ 174.267105][T12375] macvlan2: entered allmulticast mode [ 174.272531][T12375] syz_tun: entered allmulticast mode [ 174.277942][T12375] batadv0: entered allmulticast mode [ 174.291638][T12375] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 174.331535][T12375] bond0: left promiscuous mode [ 174.336453][T12375] bond_slave_0: left promiscuous mode [ 174.342068][T12375] bond_slave_1: left promiscuous mode [ 174.347643][T12375] macvlan2: left promiscuous mode [ 174.352773][T12375] syz_tun: left promiscuous mode [ 174.358787][T12375] batadv0: left promiscuous mode [ 174.425644][T12381] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3285'. [ 174.458706][T12383] loop9: detected capacity change from 0 to 8192 [ 174.477323][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.516461][T12392] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3291'. [ 174.549968][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 174.549987][ T29] audit: type=1400 audit(174.522:3857): avc: denied { ioctl } for pid=12386 comm="syz.0.3288" path="socket:[37279]" dev="sockfs" ino=37279 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.584061][ T29] audit: type=1326 audit(174.522:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 174.607059][ T29] audit: type=1326 audit(174.522:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 174.630052][ T29] audit: type=1326 audit(174.532:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 174.652990][ T29] audit: type=1326 audit(174.532:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 174.676002][ T29] audit: type=1326 audit(174.532:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 174.696168][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3292'. [ 174.698947][ T29] audit: type=1326 audit(174.532:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 174.712269][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3292'. [ 174.730831][ T29] audit: type=1326 audit(174.532:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 174.762680][ T29] audit: type=1326 audit(174.532:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 174.767246][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3292'. [ 174.785658][ T29] audit: type=1326 audit(174.532:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd2c514ebe9 code=0x7ffc0000 [ 174.800626][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3292'. [ 174.998645][T12413] bond0: entered promiscuous mode [ 175.003863][T12413] bond_slave_0: entered promiscuous mode [ 175.009677][T12413] bond_slave_1: entered promiscuous mode [ 175.018981][T12413] batadv0: entered promiscuous mode [ 175.025217][T12413] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 175.036603][T12413] hsr1: entered allmulticast mode [ 175.041646][T12413] bond0: entered allmulticast mode [ 175.046980][T12413] bond_slave_0: entered allmulticast mode [ 175.052703][T12413] bond_slave_1: entered allmulticast mode [ 175.058488][T12413] batadv0: entered allmulticast mode [ 175.064182][T12413] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 175.072734][T12413] bond0: left promiscuous mode [ 175.077581][T12413] bond_slave_0: left promiscuous mode [ 175.083054][T12413] bond_slave_1: left promiscuous mode [ 175.088996][T12413] batadv0: left promiscuous mode [ 175.206132][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3306'. [ 175.217677][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3306'. [ 175.438774][T12442] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3313'. [ 175.467866][T12445] bond0: entered promiscuous mode [ 175.473050][T12445] bond_slave_0: entered promiscuous mode [ 175.478828][T12445] bond_slave_1: entered promiscuous mode [ 175.486467][T12445] batadv0: entered promiscuous mode [ 175.492247][T12445] hsr1: entered allmulticast mode [ 175.497376][T12445] bond0: entered allmulticast mode [ 175.502552][T12445] bond_slave_0: entered allmulticast mode [ 175.508656][T12445] bond_slave_1: entered allmulticast mode [ 175.514559][T12445] batadv0: entered allmulticast mode [ 175.520526][T12445] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 175.529496][T12445] bond0: left promiscuous mode [ 175.534408][T12445] bond_slave_0: left promiscuous mode [ 175.539906][T12445] bond_slave_1: left promiscuous mode [ 175.545900][T12445] batadv0: left promiscuous mode [ 175.754289][T12461] futex_wake_op: syz.9.3320 tries to shift op by -1; fix this program [ 175.777702][T12463] netlink: 'syz.3.3323': attribute type 13 has an invalid length. [ 175.812451][T12463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.839095][T12463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.902296][T12476] loop9: detected capacity change from 0 to 512 [ 175.914829][T12476] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 175.928275][T12476] EXT4-fs (loop9): 1 truncate cleaned up [ 175.934815][T12476] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.937645][T12478] loop3: detected capacity change from 0 to 1024 [ 175.958567][T12478] EXT4-fs: Ignoring removed orlov option [ 175.983909][T12478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.000876][T12251] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.057513][T12492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3337'. [ 176.155368][ T4296] usb 17-1: enqueue for inactive port 0 [ 176.165324][ T4296] usb 17-1: enqueue for inactive port 0 [ 176.269142][ T4296] vhci_hcd: vhci_device speed not set [ 176.281592][T12503] netlink: 'syz.1.3341': attribute type 13 has an invalid length. [ 176.317792][T12503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.471917][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.492006][T12515] loop3: detected capacity change from 0 to 512 [ 176.511506][T12515] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 176.528439][T12515] EXT4-fs (loop3): 1 truncate cleaned up [ 176.536329][T12515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.603956][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.988100][T12559] sch_fq: defrate 4294967295 ignored. [ 176.999206][T12557] loop3: detected capacity change from 0 to 512 [ 177.015953][T12557] EXT4-fs: Ignoring removed oldalloc option [ 177.031048][T12557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 177.040933][T12557] System zones: 1-12 [ 177.050171][T12557] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.3364: Parent and EA inode have the same ino 15 [ 177.065132][T12557] EXT4-fs (loop3): 1 orphan inode deleted [ 177.071744][T12557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.088525][T12557] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.448770][T12602] ================================================================== [ 177.456918][T12602] BUG: KCSAN: data-race in unix_maybe_add_creds / unix_release_sock [ 177.465019][T12602] [ 177.467353][T12602] write to 0xffff888103568a20 of 8 bytes by task 12610 on cpu 0: [ 177.475074][T12602] unix_release_sock+0x21f/0x790 [ 177.480218][T12602] unix_release+0x58/0x80 [ 177.484572][T12602] sock_close+0x6b/0x150 [ 177.488832][T12602] __fput+0x298/0x650 [ 177.492839][T12602] ____fput+0x1c/0x30 [ 177.496842][T12602] task_work_run+0x12e/0x1a0 [ 177.501484][T12602] exit_to_user_mode_loop+0xe4/0x100 [ 177.506783][T12602] do_syscall_64+0x1d6/0x200 [ 177.511389][T12602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.517294][T12602] [ 177.519626][T12602] read to 0xffff888103568a20 of 8 bytes by task 12602 on cpu 1: [ 177.527265][T12602] unix_maybe_add_creds+0x196/0x1e0 [ 177.532478][T12602] unix_dgram_sendmsg+0x629/0xfe0 [ 177.537522][T12602] __sock_sendmsg+0x142/0x180 [ 177.542222][T12602] sock_write_iter+0x165/0x1b0 [ 177.547005][T12602] io_write+0x60f/0xd40 [ 177.551169][T12602] __io_issue_sqe+0xfe/0x2e0 [ 177.555776][T12602] io_issue_sqe+0x53/0x970 [ 177.560197][T12602] io_submit_sqes+0x664/0x1050 [ 177.564968][T12602] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 177.570526][T12602] __x64_sys_io_uring_enter+0x78/0x90 [ 177.575999][T12602] x64_sys_call+0x2de1/0x2ff0 [ 177.580686][T12602] do_syscall_64+0xd2/0x200 [ 177.585271][T12602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.591177][T12602] [ 177.593506][T12602] value changed: 0xffff888106fc7400 -> 0x0000000000000000 [ 177.600621][T12602] [ 177.602952][T12602] Reported by Kernel Concurrency Sanitizer on: [ 177.609103][T12602] CPU: 1 UID: 0 PID: 12602 Comm: syz.3.3381 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 177.621616][T12602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.631686][T12602] ==================================================================