last executing test programs: 3.443848733s ago: executing program 4 (id=1721): pipe2$9p(&(0x7f00000000c0), 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000e1bcd9820000008000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_bond\x00', {0x2}, 0x5}) io_setup(0x6, &(0x7f0000001380)) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=0xffffffffffffffff, 0x12) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYBLOB='\x00@\x00\x00'], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$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") 3.394982493s ago: executing program 1 (id=1723): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioprio_set$pid(0x3, 0x0, 0x4004) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$inet6(0xa, 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='contention_end\x00', r3}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0xa000, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=@bloom_filter={0x1e, 0x7fffffff, 0x9, 0x2, 0x40100, 0xffffffffffffffff, 0x525, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x6, @void, @value, @void, @value}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 2.951937582s ago: executing program 2 (id=1728): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000000)='2', 0x1, 0x4fed0) sendfile(r0, r3, 0x0, 0x100001) 2.813084941s ago: executing program 3 (id=1730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a0300"], 0x34}}, 0x0) 2.693682781s ago: executing program 0 (id=1731): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000006c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000700)=0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000007000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000030a9e5450000000000", @ANYRES32=r0, @ANYBLOB], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000c00000000000000000000000800010001000000"], 0x1c}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000007000010080001000100"/28], 0x1c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getrlimit(0xd, &(0x7f0000000300)) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000030000008500000050000000950000000000000080000000000000005979000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000500)={0xa6, 0x29, 0x2, {0x6, [{{0x20, 0x2, 0x8}, 0x6, 0x5, 0x7, './file0'}, {{0x10, 0x0, 0x5}, 0x8c, 0x7, 0x7, './file0'}, {{0x80, 0x3, 0x7}, 0x8, 0x9, 0x7, './file0'}, {{0x40, 0x1, 0x3}, 0x1, 0x2, 0x7, './file0'}, {{0x0, 0x0, 0x4}, 0x5, 0x7f, 0x7, './file0'}]}}, 0xa6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x80000}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x200000000000011, 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000240), 0x208e26b) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000001000070100f821200100000000325b38", @ANYRES32=0x0, @ANYBLOB="020000000080000008001b000f0000000500100004d26b03aaafd63191343aef8bb64d5ef685197be03d740c7bdc2efcf6075b244314e1a6e1"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000340)={@private0}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0xfffffffffffffde1, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000509004d8c14cb0000000000000000004c00", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000500100006000000"], 0x30}, 0x1, 0xffffa888}, 0x0) poll(&(0x7f00000008c0)=[{r9, 0x4686}, {r10, 0x8606}], 0x2, 0x0) 2.396685629s ago: executing program 3 (id=1732): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r6, 0x0, 0x0, 0x4fed0) sendfile(r0, r5, 0x0, 0x100001) 2.258180149s ago: executing program 2 (id=1733): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="71050707020163060604f908092a01d0"], 0x10) 2.039963788s ago: executing program 2 (id=1734): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.003715658s ago: executing program 3 (id=1735): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) pselect6(0x0, 0x0, &(0x7f0000000200)={0x7fffffff, 0xfffffffffffffff4, 0x2, 0x1, 0x3, 0x0, 0x6, 0x8000}, &(0x7f0000000280)={0x7, 0x4, 0x57d, 0x6, 0x9, 0x1, 0x5, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={[0xd]}, 0x8}) 1.916884557s ago: executing program 2 (id=1736): mkdir(&(0x7f0000000140)='./control\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='sys_enter\x00', r0}, 0x18) rmdir(&(0x7f0000000100)='./control\x00') 1.768386587s ago: executing program 2 (id=1737): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='W', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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"/917, 0x395}, {0x0}], 0x2}}], 0x2, 0x40000) 1.630964596s ago: executing program 4 (id=1738): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x148, 0x1170, 0x1170, 0x0, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x322, 0xffffffff], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x21}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x4e23, 0x0, 0x0, 0x0, 0x4e22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfe}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'vlan1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 1.538987926s ago: executing program 3 (id=1739): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r2, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x5406, &(0x7f00000010c0)={0x2ce4, 0x81, 0x0, 0x1ff, 0x0, "610400"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xc, 0x4, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x0, r4}) 1.538227916s ago: executing program 4 (id=1740): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000fe0000010000000008000500ac1414ff"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000000000000000f7ff00000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r2], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x80) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4c8204, 0x1f0) flock(r4, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r6, 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) 1.488713356s ago: executing program 1 (id=1741): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x5, [@typedef={0xc, 0x0, 0x0, 0x8, 0x5}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x4c, 0x0, 0x38, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x4, 0x1}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @float={0xd, 0x0, 0x0, 0x10, 0xc}, @const={0xe, 0x0, 0x0, 0xa, 0x5}, @struct={0x7, 0x6, 0x0, 0x4, 0x1, 0x8, [{0x10, 0x0, 0x6a}, {0xe, 0x3, 0x9}, {0xd, 0x5}, {0x1, 0x0, 0xffffffff}, {0x4, 0x5, 0x4a684ae1}, {0xe, 0x4, 0x8}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0xc1, 0x0, 0x0, 0x20, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}], 0x2, 0x1) 1.437459716s ago: executing program 0 (id=1742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.390237966s ago: executing program 1 (id=1743): syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x72, 0x40, 0xd4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x2, 0x2, 0x3}, {0x6, 0x24, 0x1a, 0x7, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x80, 0x5e, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x48, 0x10, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0x3, 0x3}}}}}}}]}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 1.085039074s ago: executing program 0 (id=1744): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) socket$packet(0x11, 0x2, 0x300) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) 916.951484ms ago: executing program 2 (id=1745): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000006c0)={@multicast2, @multicast2, 0x0}, &(0x7f0000000700)=0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000007000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000030a9e5450000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000000000500"/27], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000c00000000000000000000000800010001000000"], 0x1c}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000007000010080001000100"/28], 0x1c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getrlimit(0xd, &(0x7f0000000300)) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000030000008500000050000000950000000000000080000000000000005979000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000500)={0xa6, 0x29, 0x2, {0x6, [{{0x20, 0x2, 0x8}, 0x6, 0x5, 0x7, './file0'}, {{0x10, 0x0, 0x5}, 0x8c, 0x7, 0x7, './file0'}, {{0x80, 0x3, 0x7}, 0x8, 0x9, 0x7, './file0'}, {{0x40, 0x1, 0x3}, 0x1, 0x2, 0x7, './file0'}, {{0x0, 0x0, 0x4}, 0x5, 0x7f, 0x7, './file0'}]}}, 0xa6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x80000}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x200000000000011, 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000240), 0x208e26b) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000001000070100f821200100000000325b38", @ANYRES32=0x0, @ANYBLOB="020000000080000008001b000f0000000500100004d26b03aaafd63191343aef8bb64d5ef685197be03d740c7bdc2efcf6075b244314e1a6e1"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000340)={@private0}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0xfffffffffffffde1, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000509004d8c14cb0000000000000000004c00", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000500100006000000"], 0x30}, 0x1, 0xffffa888}, 0x0) poll(&(0x7f00000008c0)=[{r9, 0x4686}, {r10, 0x8606}], 0x2, 0x0) 831.081903ms ago: executing program 1 (id=1746): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x115) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x0) 808.652194ms ago: executing program 1 (id=1747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 635.902143ms ago: executing program 3 (id=1748): syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x72, 0x40, 0xd4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x2, 0x2, 0x3}, {0x6, 0x24, 0x1a, 0x7, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x80, 0x5e, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x48, 0x10, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0x3, 0x3}}}}}}}]}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 602.282152ms ago: executing program 4 (id=1749): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0xfecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f0000000000)='2', 0x1, 0x4fed0) sendfile(r0, r5, 0x0, 0x100001) 376.928411ms ago: executing program 4 (id=1750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x80000000000000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$selinux_attr(r3, 0x0, 0x0) 350.725322ms ago: executing program 0 (id=1751): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b400000000000000798bdc5e07398a6a63bb06d817768c100000000000006300f8ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffda6, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2={0xff, 0x3}}}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0xf8a3e46612eadfa}, 0xc, &(0x7f0000001a80)={&(0x7f0000001900)={0x124, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x9, 0x7ff, 0x9, 0x4, 0x4]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7000000}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x1c, 0x17, [0x20, 0x10001, 0x3, 0xffff, 0x80000000, 0xff]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x79c}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x84}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x124}}, 0x400c000) 283.413231ms ago: executing program 0 (id=1752): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='sys_enter\x00', r0}, 0x18) inotify_init1(0x0) 278.638751ms ago: executing program 4 (id=1753): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000fe0000010000000008000500ac1414ff"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000000000000000f7ff00000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r3], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x80) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4c8204, 0x1f0) flock(r5, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 201.115351ms ago: executing program 0 (id=1754): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='W', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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"/917, 0x395}, {&(0x7f00000003c0)}], 0x2}}], 0x2, 0x40000) 199.917721ms ago: executing program 1 (id=1755): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000fe0000010000000008000500ac1414ff"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000000000000000f7ff00000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r3], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x80) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4c8204, 0x1f0) flock(r5, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 3 (id=1756): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f0000000000), 0x0, 0x4fed0) sendfile(r0, r5, 0x0, 0x100001) kernel console output (not intermixed with test programs): 1622][ T29] audit: type=1400 audit(1735430882.378:2025): avc: denied { write } for pid=7166 comm="syz.4.1097" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.093331][ T29] audit: type=1400 audit(1735430882.378:2026): avc: denied { add_name } for pid=7166 comm="syz.4.1097" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.114096][ T29] audit: type=1400 audit(1735430882.378:2027): avc: denied { create } for pid=7166 comm="syz.4.1097" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 180.138979][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.157239][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.165761][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.557083][ T7190] can0: slcan on ttyS3. [ 180.922172][ T7210] loop4: detected capacity change from 0 to 512 [ 180.931244][ T7210] EXT4-fs: Ignoring removed nobh option [ 180.940428][ T7210] ext4: Bad value for 'max_dir_size_kb' [ 180.974499][ T7210] SELinux: policydb version 96 does not match my version range 15-33 [ 180.982705][ T7210] SELinux: failed to load policy [ 180.989438][ T7210] xt_hashlimit: max too large, truncated to 1048576 [ 180.997611][ T7210] Cannot find set identified by id 0 to match [ 181.023681][ T7213] loop4: detected capacity change from 0 to 512 [ 181.037797][ T7213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.053252][ T7213] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.066668][ T7213] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 181.171945][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.237727][ T7232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.264344][ T7187] can0 (unregistered): slcan off ttyS3. [ 181.270556][ T7232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.360771][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.374621][ T7245] loop3: detected capacity change from 0 to 1024 [ 181.415175][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.423404][ T7245] EXT4-fs: Ignoring removed orlov option [ 181.429170][ T7245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.506268][ T7245] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 181.525984][ T7245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.657044][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.011812][ T7263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.021445][ T7263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.101510][ T7267] loop1: detected capacity change from 0 to 1024 [ 182.108233][ T7267] EXT4-fs: Ignoring removed orlov option [ 182.113949][ T7267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.135429][ T7267] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 182.143979][ T7267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.194638][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.356020][ T7286] syz.0.1132: attempt to access beyond end of device [ 182.356020][ T7286] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 182.373535][ T7286] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.494353][ T7288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1132'. [ 183.020847][ T7286] syz.0.1132 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 183.035146][ T7286] CPU: 0 UID: 0 PID: 7286 Comm: syz.0.1132 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 183.045936][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 183.056002][ T7286] Call Trace: [ 183.059330][ T7286] [ 183.062255][ T7286] dump_stack_lvl+0xf2/0x150 [ 183.066909][ T7286] dump_stack+0x15/0x1a [ 183.071100][ T7286] dump_header+0x83/0x2d0 [ 183.075419][ T7286] oom_kill_process+0x341/0x4c0 [ 183.080304][ T7286] out_of_memory+0x9af/0xbe0 [ 183.084925][ T7286] ? css_next_descendant_pre+0x11c/0x140 [ 183.090621][ T7286] mem_cgroup_out_of_memory+0x13e/0x190 [ 183.096243][ T7286] try_charge_memcg+0x508/0x7f0 [ 183.101099][ T7286] ? trie_lookup_elem+0x402/0x460 [ 183.106183][ T7286] obj_cgroup_charge_pages+0xbd/0x1a0 [ 183.111705][ T7286] __memcg_kmem_charge_page+0x9d/0x170 [ 183.117160][ T7286] __alloc_pages_noprof+0x1bc/0x340 [ 183.122536][ T7286] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 183.128007][ T7286] alloc_pages_noprof+0xe1/0x100 [ 183.133030][ T7286] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 183.138999][ T7286] __kvmalloc_node_noprof+0x121/0x170 [ 183.145534][ T7286] ? ip_set_alloc+0x1f/0x30 [ 183.150438][ T7286] ip_set_alloc+0x1f/0x30 [ 183.154820][ T7286] hash_netiface_create+0x273/0x730 [ 183.160037][ T7286] ? __nla_parse+0x40/0x60 [ 183.164575][ T7286] ? __pfx_hash_netiface_create+0x10/0x10 [ 183.170289][ T7286] ip_set_create+0x359/0x8a0 [ 183.174932][ T7286] ? memchr+0x1/0x50 [ 183.178960][ T7286] ? __nla_parse+0x40/0x60 [ 183.183384][ T7286] nfnetlink_rcv_msg+0x4a9/0x570 [ 183.188452][ T7286] netlink_rcv_skb+0x12c/0x230 [ 183.193204][ T7286] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 183.198668][ T7286] nfnetlink_rcv+0x16c/0x15d0 [ 183.203503][ T7286] ? kmem_cache_free+0xdc/0x2d0 [ 183.208363][ T7286] ? nlmon_xmit+0x51/0x60 [ 183.212911][ T7286] ? __kfree_skb+0x102/0x150 [ 183.217525][ T7286] ? consume_skb+0x49/0x160 [ 183.222149][ T7286] ? nlmon_xmit+0x51/0x60 [ 183.226463][ T7286] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 183.231730][ T7286] ? __dev_queue_xmit+0xb6e/0x2090 [ 183.236888][ T7286] ? rb_insert_color+0x263/0x290 [ 183.241848][ T7286] ? ref_tracker_free+0x3a5/0x410 [ 183.246968][ T7286] ? __dev_queue_xmit+0x186/0x2090 [ 183.252158][ T7286] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 183.257607][ T7286] netlink_unicast+0x599/0x670 [ 183.262381][ T7286] netlink_sendmsg+0x5cc/0x6e0 [ 183.267165][ T7286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.272435][ T7286] __sock_sendmsg+0x140/0x180 [ 183.277102][ T7286] ____sys_sendmsg+0x312/0x410 [ 183.281854][ T7286] __sys_sendmsg+0x19d/0x230 [ 183.286465][ T7286] __x64_sys_sendmsg+0x46/0x50 [ 183.291239][ T7286] x64_sys_call+0x2734/0x2dc0 [ 183.295912][ T7286] do_syscall_64+0xc9/0x1c0 [ 183.300397][ T7286] ? clear_bhb_loop+0x55/0xb0 [ 183.305059][ T7286] ? clear_bhb_loop+0x55/0xb0 [ 183.309863][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.315826][ T7286] RIP: 0033:0x7f4b35015d29 [ 183.320246][ T7286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.339980][ T7286] RSP: 002b:00007f4b33681038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.348408][ T7286] RAX: ffffffffffffffda RBX: 00007f4b35205fa0 RCX: 00007f4b35015d29 [ 183.356391][ T7286] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008 [ 183.364346][ T7286] RBP: 00007f4b35091b08 R08: 0000000000000000 R09: 0000000000000000 [ 183.372355][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.380368][ T7286] R13: 0000000000000000 R14: 00007f4b35205fa0 R15: 00007ffca0f37a28 [ 183.388352][ T7286] [ 183.391529][ T7286] memory: usage 307200kB, limit 307200kB, failcnt 2341 [ 183.398451][ T7286] memory+swap: usage 323780kB, limit 9007199254740988kB, failcnt 0 [ 183.406369][ T7286] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 183.413648][ T7286] Memory cgroup stats for /syz0: [ 183.413941][ T7286] cache 0 [ 183.421943][ T7286] rss 0 [ 183.424720][ T7286] shmem 0 [ 183.427653][ T7286] mapped_file 0 [ 183.431134][ T7286] dirty 0 [ 183.434062][ T7286] writeback 0 [ 183.437358][ T7286] workingset_refault_anon 174 [ 183.442048][ T7286] workingset_refault_file 319 [ 183.446811][ T7286] swap 16977920 [ 183.450270][ T7286] swapcached 0 [ 183.453670][ T7286] pgpgin 202105 [ 183.453677][ T7294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.457155][ T7286] pgpgout 202105 [ 183.457171][ T7286] pgfault 279607 [ 183.457178][ T7286] pgmajfault 64 [ 183.467373][ T7294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.469023][ T7286] inactive_anon 0 [ 183.487386][ T7286] active_anon 0 [ 183.490922][ T7286] inactive_file 0 [ 183.494581][ T7286] active_file 0 [ 183.498031][ T7286] unevictable 0 [ 183.501560][ T7286] hierarchical_memory_limit 314572800 [ 183.506978][ T7286] hierarchical_memsw_limit 9223372036854771712 [ 183.513189][ T7286] total_cache 0 [ 183.516731][ T7286] total_rss 0 [ 183.520055][ T7286] total_shmem 0 [ 183.523508][ T7286] total_mapped_file 0 [ 183.527532][ T7286] total_dirty 0 [ 183.530987][ T7286] total_writeback 0 [ 183.534833][ T7286] total_workingset_refault_anon 174 [ 183.540023][ T7286] total_workingset_refault_file 319 [ 183.545330][ T7286] total_swap 16977920 [ 183.549312][ T7286] total_swapcached 0 [ 183.553202][ T7286] total_pgpgin 202105 [ 183.557194][ T7286] total_pgpgout 202105 [ 183.561325][ T7286] total_pgfault 279607 [ 183.565471][ T7286] total_pgmajfault 64 [ 183.569455][ T7286] total_inactive_anon 0 [ 183.573607][ T7286] total_active_anon 0 [ 183.577610][ T7286] total_inactive_file 0 [ 183.581785][ T7286] total_active_file 0 [ 183.585770][ T7286] total_unevictable 0 [ 183.589747][ T7286] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1132,pid=7285,uid=0 [ 183.604362][ T7286] Memory cgroup out of memory: Killed process 7285 (syz.0.1132) total-vm:93648kB, anon-rss:916kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 184.176283][ T7311] siw: device registration error -23 [ 184.467808][ T7320] loop4: detected capacity change from 0 to 512 [ 184.507058][ T7320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.549503][ T7327] syz.1.1146: attempt to access beyond end of device [ 184.549503][ T7327] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 184.564737][ T7320] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.597796][ T7320] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 184.647841][ T7327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.700688][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.793508][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1146'. [ 185.144755][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 185.144767][ T29] audit: type=1400 audit(1735430887.458:2110): avc: denied { name_bind } for pid=7345 comm="syz.4.1152" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 185.295462][ T7353] loop2: detected capacity change from 0 to 512 [ 185.302557][ T7353] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.359296][ T7353] EXT4-fs (loop2): 1 truncate cleaned up [ 185.390243][ T7353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.417195][ T7356] loop4: detected capacity change from 0 to 128 [ 185.454115][ T7356] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.513713][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.526887][ T7356] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.792973][ T7363] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1156'. [ 185.807220][ T7363] bridge4: entered promiscuous mode [ 185.812480][ T7363] bridge4: entered allmulticast mode [ 186.004212][ T29] audit: type=1400 audit(1735430888.308:2111): avc: denied { read } for pid=7364 comm="syz.2.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.104390][ T7367] loop1: detected capacity change from 0 to 512 [ 186.114265][ T29] audit: type=1400 audit(1735430888.418:2112): avc: denied { bind } for pid=7368 comm="syz.2.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.134593][ T29] audit: type=1400 audit(1735430888.418:2113): avc: denied { setopt } for pid=7368 comm="syz.2.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.166889][ T7373] loop2: detected capacity change from 0 to 1024 [ 186.175049][ T7367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.179266][ T7373] EXT4-fs: Ignoring removed orlov option [ 186.191765][ T7367] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.193300][ T7373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.213344][ T7367] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 186.225593][ T7373] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 186.235161][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.290809][ T7373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.327228][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.339372][ T29] audit: type=1400 audit(1735430888.648:2114): avc: denied { create } for pid=7378 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.361621][ T29] audit: type=1400 audit(1735430888.648:2115): avc: denied { ioctl } for pid=7378 comm="syz.1.1164" path="socket:[14054]" dev="sockfs" ino=14054 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.437732][ T7381] netlink: 'syz.4.1165': attribute type 10 has an invalid length. [ 186.448790][ T7381] team0: Port device netdevsim1 added [ 186.458805][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.511281][ T7386] batman_adv: batadv0: Adding interface: dummy0 [ 186.517615][ T7386] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.600009][ T7389] loop1: detected capacity change from 0 to 512 [ 186.606803][ T7389] EXT4-fs: test_dummy_encryption option not supported [ 186.619296][ T7386] batman_adv: batadv0: Interface activated: dummy0 [ 186.678085][ T7391] loop0: detected capacity change from 0 to 128 [ 186.761031][ T7391] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.835814][ T29] audit: type=1400 audit(1735430889.118:2116): avc: denied { read } for pid=7393 comm="syz.2.1170" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 186.858516][ T29] audit: type=1400 audit(1735430889.118:2117): avc: denied { open } for pid=7393 comm="syz.2.1170" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 186.915713][ T7391] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.979960][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.284113][ T7399] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1169'. [ 187.300088][ T7399] bridge2: entered promiscuous mode [ 187.305384][ T7399] bridge2: entered allmulticast mode [ 187.525914][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.534014][ T29] audit: type=1400 audit(1735430889.208:2118): avc: denied { setattr } for pid=7393 comm="syz.2.1170" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 187.847936][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.320023][ T7423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.330479][ T29] audit: type=1326 audit(1735430890.648:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbfe55d29 code=0x7fc00000 [ 188.482596][ T7428] siw: device registration error -23 [ 188.774347][ T7443] loop1: detected capacity change from 0 to 512 [ 188.780889][ T7443] EXT4-fs: Ignoring removed nobh option [ 188.786560][ T7443] ext4: Bad value for 'max_dir_size_kb' [ 188.809162][ T7443] SELinux: policydb version 96 does not match my version range 15-33 [ 188.817636][ T7443] SELinux: failed to load policy [ 188.823551][ T7443] xt_hashlimit: max too large, truncated to 1048576 [ 188.831123][ T7443] Cannot find set identified by id 0 to match [ 188.952688][ T7452] netlink: 'syz.4.1195': attribute type 10 has an invalid length. [ 188.961129][ T7454] loop1: detected capacity change from 0 to 1024 [ 188.967962][ T7454] EXT4-fs: Ignoring removed orlov option [ 188.973790][ T7454] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.025950][ T7454] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 189.035011][ T7454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.052208][ T7462] batman_adv: batadv0: Adding interface: dummy0 [ 189.058599][ T7462] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.085864][ T7462] batman_adv: batadv0: Interface activated: dummy0 [ 189.103370][ T7462] batadv0: mtu less than device minimum [ 189.109205][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.119984][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.130659][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.141478][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.152121][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.162839][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.173477][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.184188][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.195075][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.217048][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.391675][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.400815][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.598801][ T7488] siw: device registration error -23 [ 190.206789][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 190.206806][ T29] audit: type=1326 audit(1735430892.508:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.4.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a4d9f1f29 code=0x7fc00000 [ 190.269257][ T7498] netlink: 'syz.0.1211': attribute type 10 has an invalid length. [ 190.286774][ T7498] team0: Port device netdevsim1 added [ 190.369914][ T7502] pim6reg1: entered promiscuous mode [ 190.375331][ T7502] pim6reg1: entered allmulticast mode [ 190.548439][ T7511] loop4: detected capacity change from 0 to 1024 [ 190.634519][ T7511] EXT4-fs: Ignoring removed orlov option [ 190.640246][ T7511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.147718][ T7519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.193480][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.212513][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.274614][ T7525] loop2: detected capacity change from 0 to 1024 [ 191.281387][ T7525] EXT4-fs: Ignoring removed orlov option [ 191.287098][ T7525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.308411][ T7525] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 191.320669][ T7525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.333766][ T7511] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 191.343757][ T7511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.440320][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.455926][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.685380][ T7548] siw: device registration error -23 [ 192.073954][ T7582] siw: device registration error -23 [ 192.100790][ T29] audit: type=1400 audit(1735430894.408:2133): avc: denied { create } for pid=7583 comm="syz.3.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.130682][ T29] audit: type=1400 audit(1735430894.418:2134): avc: denied { watch } for pid=7583 comm="syz.3.1233" path="/231" dev="tmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 192.434279][ T7598] netlink: 'syz.2.1238': attribute type 10 has an invalid length. [ 192.465344][ T7598] team0: Port device netdevsim1 added [ 192.919943][ T7610] loop2: detected capacity change from 0 to 512 [ 192.920196][ T7610] EXT4-fs: test_dummy_encryption option not supported [ 193.132425][ T7615] loop3: detected capacity change from 0 to 128 [ 193.151526][ T7615] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.151921][ T7615] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.386837][ T7620] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1244'. [ 193.391825][ T7620] bridge3: entered promiscuous mode [ 193.391843][ T7620] bridge3: entered allmulticast mode [ 193.767647][ T7621] xt_hashlimit: size too large, truncated to 1048576 [ 194.034438][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.056361][ T29] audit: type=1326 audit(1735430896.368:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7fc00000 [ 194.056389][ T29] audit: type=1326 audit(1735430896.368:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a4da55d29 code=0x7fc00000 [ 194.056410][ T29] audit: type=1326 audit(1735430896.368:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7fc00000 [ 194.056440][ T29] audit: type=1326 audit(1735430896.368:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7fc00000 [ 194.056464][ T29] audit: type=1326 audit(1735430896.368:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7fc00000 [ 194.056488][ T29] audit: type=1326 audit(1735430896.368:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7fc00000 [ 194.056583][ T29] audit: type=1326 audit(1735430896.368:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7fc00000 [ 194.288414][ T7628] loop3: detected capacity change from 0 to 1024 [ 194.288703][ T7628] EXT4-fs: Ignoring removed orlov option [ 194.288731][ T7628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.362785][ T7628] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 194.363167][ T7628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.425568][ T7632] netlink: 'syz.0.1248': attribute type 1 has an invalid length. [ 194.447754][ T7632] bond1: entered promiscuous mode [ 194.447770][ T7632] bond1: entered allmulticast mode [ 194.462040][ T7632] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 194.479820][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.651177][ T7635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.651240][ T7635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.663942][ T7632] bond1: (slave batadv1): making interface the new active one [ 194.663962][ T7632] batadv1: entered promiscuous mode [ 194.664084][ T7632] batadv1: entered allmulticast mode [ 194.673785][ T7632] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 194.758528][ T7640] loop0: detected capacity change from 0 to 1024 [ 194.782859][ T7640] EXT4-fs: Ignoring removed orlov option [ 194.788800][ T7640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.788965][ T7642] loop4: detected capacity change from 0 to 128 [ 194.809947][ T7642] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.890670][ T7642] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.915827][ T7640] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 194.924664][ T7640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.984020][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.188273][ T7661] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1253'. [ 195.202433][ T7661] bridge5: entered promiscuous mode [ 195.207718][ T7661] bridge5: entered allmulticast mode [ 195.704702][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.775738][ T7670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.787052][ T7670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.861074][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 195.861089][ T29] audit: type=1400 audit(1735430898.168:2175): avc: denied { open } for pid=7673 comm="syz.2.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 195.886507][ T29] audit: type=1400 audit(1735430898.168:2176): avc: denied { kernel } for pid=7673 comm="syz.2.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 195.979524][ T29] audit: type=1400 audit(1735430898.288:2177): avc: denied { sqpoll } for pid=7673 comm="syz.2.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 196.000233][ T7674] netlink: 'syz.2.1262': attribute type 13 has an invalid length. [ 196.008209][ T7674] netlink: 'syz.2.1262': attribute type 27 has an invalid length. [ 196.018765][ T7681] loop0: detected capacity change from 0 to 1024 [ 196.027019][ T7681] EXT4-fs: Ignoring removed orlov option [ 196.032699][ T7681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.056904][ T29] audit: type=1400 audit(1735430898.358:2178): avc: denied { write } for pid=7685 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 196.075799][ T29] audit: type=1326 audit(1735430898.358:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05c985d29 code=0x7ffc0000 [ 196.098910][ T29] audit: type=1326 audit(1735430898.358:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05c985d29 code=0x7ffc0000 [ 196.120048][ T7686] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 196.122659][ T29] audit: type=1326 audit(1735430898.358:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc05c985d29 code=0x7ffc0000 [ 196.141034][ T7686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=7686 comm=+}[@ [ 196.155068][ T29] audit: type=1326 audit(1735430898.358:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05c985d29 code=0x7ffc0000 [ 196.190203][ T29] audit: type=1326 audit(1735430898.358:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05c985d29 code=0x7ffc0000 [ 196.208197][ T7681] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 196.213368][ T29] audit: type=1326 audit(1735430898.358:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc05c985d29 code=0x7ffc0000 [ 196.221843][ T7681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.321183][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.771445][ T7712] netlink: 'syz.1.1277': attribute type 1 has an invalid length. [ 196.788665][ T7712] bond1: entered promiscuous mode [ 196.793766][ T7712] bond1: entered allmulticast mode [ 196.818266][ T7711] loop0: detected capacity change from 0 to 1024 [ 196.826315][ T7711] EXT4-fs: Ignoring removed orlov option [ 196.832047][ T7711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.853625][ T7719] net_ratelimit: 10 callbacks suppressed [ 196.853684][ T7719] batadv0: mtu less than device minimum [ 196.865416][ T7719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 196.876249][ T7719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 196.886978][ T7719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 196.897647][ T7719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 196.908317][ T7719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 196.919110][ T7719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 196.929905][ T7719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 196.940753][ T7719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 196.951639][ T7719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.040899][ T7711] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 197.059093][ T7711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.080107][ T7729] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.106382][ T7735] xt_hashlimit: size too large, truncated to 1048576 [ 197.119506][ T7729] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.229196][ T7733] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 197.240392][ T7733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=7733 comm=+}[@ [ 197.271894][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.366929][ T7729] team0: Port device netdevsim1 removed [ 197.373949][ T7729] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.527965][ T7729] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.592525][ T7753] loop3: detected capacity change from 0 to 512 [ 197.658001][ T7754] loop0: detected capacity change from 0 to 512 [ 197.664784][ T7754] EXT4-fs: test_dummy_encryption option not supported [ 197.713840][ T7729] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.759240][ T7729] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.770191][ T7753] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1293: invalid indirect mapped block 256 (level 2) [ 197.785964][ T7753] EXT4-fs (loop3): 2 truncates cleaned up [ 197.792641][ T7753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.895903][ T7729] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.138543][ T7729] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.371862][ T7762] siw: device registration error -23 [ 198.997440][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.128694][ T7773] syz.0.1299: attempt to access beyond end of device [ 199.128694][ T7773] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 199.156642][ T7773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.248246][ T7777] loop2: detected capacity change from 0 to 512 [ 199.280695][ T7777] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1300: invalid indirect mapped block 256 (level 2) [ 199.295634][ T7777] EXT4-fs (loop2): 2 truncates cleaned up [ 199.301823][ T7777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.476652][ T7781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1299'. [ 199.555878][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.622703][ T7783] loop2: detected capacity change from 0 to 1024 [ 199.640549][ T7783] EXT4-fs: Ignoring removed orlov option [ 199.646336][ T7783] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.807652][ T7783] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 199.816872][ T7783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.909873][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.986100][ T7788] xt_hashlimit: size too large, truncated to 1048576 [ 200.419053][ T7799] netlink: 'syz.4.1307': attribute type 10 has an invalid length. [ 200.816815][ T7812] syz.1.1311: attempt to access beyond end of device [ 200.816815][ T7812] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 200.874984][ T7812] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.087020][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1311'. [ 201.150996][ T7830] loop0: detected capacity change from 0 to 1024 [ 201.159027][ T7830] EXT4-fs: Ignoring removed orlov option [ 201.164869][ T7830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.243245][ T7830] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 201.254442][ T7830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.282629][ T7837] loop2: detected capacity change from 0 to 1024 [ 201.290116][ T7837] EXT4-fs: Ignoring removed orlov option [ 201.295804][ T7837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.386274][ T7837] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 201.399659][ T7837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.514716][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.547502][ T7846] loop0: detected capacity change from 0 to 512 [ 201.570288][ T7846] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1322: invalid indirect mapped block 256 (level 2) [ 201.585533][ T7846] EXT4-fs (loop0): 2 truncates cleaned up [ 201.606449][ T7846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.672606][ T7851] netlink: 'syz.2.1324': attribute type 13 has an invalid length. [ 201.695303][ T7849] loop4: detected capacity change from 0 to 512 [ 201.703112][ T7849] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1323: invalid indirect mapped block 256 (level 2) [ 201.721211][ T7849] EXT4-fs (loop4): 2 truncates cleaned up [ 201.735888][ T7851] gretap0: refused to change device tx_queue_len [ 202.121739][ T7867] loop2: detected capacity change from 0 to 512 [ 202.179523][ T7867] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1330: invalid indirect mapped block 256 (level 2) [ 202.198811][ T7867] EXT4-fs (loop2): 2 truncates cleaned up [ 202.221422][ T7875] syz.4.1332: attempt to access beyond end of device [ 202.221422][ T7875] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 202.272765][ T7876] can0: slcan on ttyS3. [ 202.407230][ T7875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.573310][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 202.573322][ T29] audit: type=1400 audit(1735430904.878:2257): avc: denied { sys_module } for pid=7866 comm="syz.2.1330" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 202.710711][ T7897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1332'. [ 202.933555][ T29] audit: type=1326 audit(1735430905.238:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e90a05d29 code=0x7ffc0000 [ 202.984522][ T7868] can0 (unregistered): slcan off ttyS3. [ 202.986667][ T29] audit: type=1326 audit(1735430905.278:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e90a05d29 code=0x7ffc0000 [ 203.013604][ T29] audit: type=1326 audit(1735430905.278:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e90a05d29 code=0x7ffc0000 [ 203.036637][ T29] audit: type=1326 audit(1735430905.278:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e90a05d29 code=0x7ffc0000 [ 203.059765][ T29] audit: type=1326 audit(1735430905.278:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e90a05d29 code=0x7ffc0000 [ 203.082653][ T29] audit: type=1326 audit(1735430905.278:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e90a05d29 code=0x7ffc0000 [ 203.104300][ T7907] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 203.105621][ T29] audit: type=1326 audit(1735430905.278:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e90a05d29 code=0x7ffc0000 [ 203.138421][ T29] audit: type=1326 audit(1735430905.278:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e90a05d29 code=0x7ffc0000 [ 203.160198][ T7907] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=7907 comm=+}[@ [ 203.161229][ T29] audit: type=1326 audit(1735430905.278:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e90a05d29 code=0x7ffc0000 [ 203.437573][ T7927] loop0: detected capacity change from 0 to 512 [ 203.438712][ T7931] netlink: 'syz.1.1341': attribute type 10 has an invalid length. [ 203.456279][ T7929] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.469461][ T7927] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1339: invalid indirect mapped block 256 (level 2) [ 203.503769][ T7927] EXT4-fs (loop0): 2 truncates cleaned up [ 203.516916][ T7927] EXT4-fs mount: 6 callbacks suppressed [ 203.516930][ T7927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.546724][ T7929] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.599050][ T7934] loop3: detected capacity change from 0 to 512 [ 203.609307][ T7929] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.643493][ T7934] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1342: invalid indirect mapped block 256 (level 2) [ 203.664608][ T7934] EXT4-fs (loop3): 2 truncates cleaned up [ 203.673015][ T7934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.693619][ T7939] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 203.707414][ T7929] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.723667][ T7939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=7939 comm=syz.1.1343 [ 203.772894][ T7929] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.801169][ T7929] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.820356][ T7929] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.836474][ T7929] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.145311][ T7960] loop4: detected capacity change from 0 to 128 [ 204.146923][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.212297][ T7967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1355'. [ 204.236486][ T7960] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.266832][ T7970] syz.1.1356: attempt to access beyond end of device [ 204.266832][ T7970] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 204.280559][ T7970] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.289999][ T7960] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.393057][ T7974] loop2: detected capacity change from 0 to 512 [ 204.399593][ T7974] EXT4-fs: test_dummy_encryption option not supported [ 204.530144][ T7975] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1350'. [ 204.544337][ T7975] bridge6: entered promiscuous mode [ 204.549600][ T7975] bridge6: entered allmulticast mode [ 205.191343][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.258901][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.268778][ T7979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1356'. [ 205.450069][ T7990] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 205.493894][ T7993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=7993 comm=syz.3.1362 [ 205.495344][ T7992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.535915][ T7992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.945633][ T8001] syz.3.1367 uses obsolete (PF_INET,SOCK_PACKET) [ 206.296426][ T8013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.314501][ T8015] loop1: detected capacity change from 0 to 1024 [ 206.320978][ T8013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.340304][ T8015] EXT4-fs: Ignoring removed orlov option [ 206.346009][ T8015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.555730][ T8015] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 206.568415][ T8015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.645703][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.127557][ T8036] loop2: detected capacity change from 0 to 1024 [ 207.191798][ T8036] EXT4-fs: Ignoring removed orlov option [ 207.197667][ T8036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.375818][ T8036] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 207.454855][ T8036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.657321][ T3444] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 207.762552][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.802222][ T8052] syz.2.1382: attempt to access beyond end of device [ 207.802222][ T8052] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 207.816266][ T8052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.853326][ T8055] loop4: detected capacity change from 0 to 512 [ 207.885835][ T8055] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1386: invalid indirect mapped block 256 (level 2) [ 207.901853][ T8061] netlink: 'syz.0.1387': attribute type 10 has an invalid length. [ 207.934058][ T8064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1382'. [ 208.070601][ T8055] EXT4-fs (loop4): 2 truncates cleaned up [ 208.094007][ T8055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.131964][ T8071] loop0: detected capacity change from 0 to 512 [ 208.138931][ T8071] EXT4-fs: Ignoring removed nobh option [ 208.144617][ T8071] ext4: Bad value for 'max_dir_size_kb' [ 208.229881][ T8071] SELinux: policydb version 96 does not match my version range 15-33 [ 208.239909][ T8071] SELinux: failed to load policy [ 208.275952][ T8071] xt_hashlimit: max too large, truncated to 1048576 [ 208.444956][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.475967][ T8102] netlink: 'syz.4.1393': attribute type 1 has an invalid length. [ 208.489132][ T8102] bond1: entered promiscuous mode [ 208.494200][ T8102] bond1: entered allmulticast mode [ 208.540647][ T8105] netlink: 'syz.4.1394': attribute type 13 has an invalid length. [ 208.557951][ T8105] gretap0: refused to change device tx_queue_len [ 208.564332][ T8105] net_ratelimit: 11 callbacks suppressed [ 208.564416][ T8105] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 208.731726][ T8071] Cannot find set identified by id 0 to match [ 208.786992][ T8111] loop4: detected capacity change from 0 to 512 [ 208.799076][ T8111] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1395: invalid indirect mapped block 256 (level 2) [ 208.822696][ T8113] loop0: detected capacity change from 0 to 512 [ 208.827407][ T8111] EXT4-fs (loop4): 2 truncates cleaned up [ 208.838122][ T8111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.840021][ T8113] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1398: invalid indirect mapped block 256 (level 2) [ 208.866354][ T8113] EXT4-fs (loop0): 2 truncates cleaned up [ 208.882085][ T8113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.023095][ T8126] netlink: 'syz.3.1402': attribute type 10 has an invalid length. [ 209.041457][ T8126] team0: Port device netdevsim1 added [ 209.070021][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.125707][ T8130] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.174874][ T8131] siw: device registration error -23 [ 209.216952][ T8130] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.234929][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.291100][ T8136] loop3: detected capacity change from 0 to 512 [ 209.297138][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 209.297152][ T29] audit: type=1400 audit(1735430911.608:2331): avc: denied { bind } for pid=8137 comm="syz.4.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.309651][ T8136] EXT4-fs: Ignoring removed nobh option [ 209.323193][ T29] audit: type=1400 audit(1735430911.608:2332): avc: denied { name_bind } for pid=8137 comm="syz.4.1406" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 209.339934][ T8136] ext4: Bad value for 'max_dir_size_kb' [ 209.349645][ T29] audit: type=1400 audit(1735430911.608:2333): avc: denied { node_bind } for pid=8137 comm="syz.4.1406" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 209.379949][ T8130] team0: Port device netdevsim1 removed [ 209.392114][ T8130] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.436505][ T8140] syz.4.1408: attempt to access beyond end of device [ 209.436505][ T8140] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 209.450750][ T8140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.590297][ T8142] SELinux: policydb version 96 does not match my version range 15-33 [ 209.598533][ T8142] SELinux: failed to load policy [ 209.604534][ T8142] xt_hashlimit: max too large, truncated to 1048576 [ 209.625149][ T8130] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.693173][ T8130] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.710349][ T8130] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.726656][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1408'. [ 209.730769][ T8130] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.767282][ T8130] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.836143][ T8145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.898994][ T29] audit: type=1400 audit(1735430912.208:2334): avc: denied { write } for pid=8149 comm="syz.1.1411" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=59494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 209.925163][ T8149] dccp_close: ABORT with 140 bytes unread [ 209.998801][ T8159] netlink: 'syz.1.1414': attribute type 13 has an invalid length. [ 210.016220][ T8161] netlink: 'syz.0.1413': attribute type 13 has an invalid length. [ 210.033314][ T8159] gretap0: refused to change device tx_queue_len [ 210.039752][ T8159] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 210.107268][ T8161] gretap0: refused to change device tx_queue_len [ 210.113654][ T8161] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 210.265047][ T8190] loop1: detected capacity change from 0 to 1024 [ 210.271850][ T8190] EXT4-fs: Ignoring removed orlov option [ 210.277575][ T8190] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.300313][ T8192] netlink: 'syz.0.1416': attribute type 10 has an invalid length. [ 210.330433][ T8190] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 210.339331][ T8190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.391166][ T8196] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 210.402383][ T8196] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=8196 comm=+}[@ [ 210.403141][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.477702][ T8142] Cannot find set identified by id 0 to match [ 210.568560][ T8202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.600187][ T8210] xt_hashlimit: size too large, truncated to 1048576 [ 210.614042][ T29] audit: type=1326 audit(1735430912.918:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.1.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05c985d29 code=0x7fc00000 [ 210.640722][ T8212] syz.0.1423: attempt to access beyond end of device [ 210.640722][ T8212] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 210.659183][ T8212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.893928][ T8223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1423'. [ 211.092409][ T8228] syz.2.1429: attempt to access beyond end of device [ 211.092409][ T8228] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 211.124252][ T8230] syz.4.1428: attempt to access beyond end of device [ 211.124252][ T8230] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 211.138190][ T8228] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.154247][ T8230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.185441][ T8232] loop3: detected capacity change from 0 to 1024 [ 211.192972][ T8232] EXT4-fs: Ignoring removed orlov option [ 211.198792][ T8232] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.216590][ T8232] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 211.248239][ T8232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.267873][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1429'. [ 211.286585][ T8238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1428'. [ 211.302360][ T29] audit: type=1326 audit(1735430913.588:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.1.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc05c921f29 code=0x7fc00000 [ 211.360981][ T8232] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 211.373381][ T8232] EXT4-fs (loop3): This should not happen!! Data will be lost [ 211.373381][ T8232] [ 211.383076][ T8232] EXT4-fs (loop3): Total free blocks count 0 [ 211.389094][ T8232] EXT4-fs (loop3): Free/Dirty block details [ 211.394987][ T8232] EXT4-fs (loop3): free_blocks=0 [ 211.399925][ T8232] EXT4-fs (loop3): dirty_blocks=0 [ 211.404969][ T8232] EXT4-fs (loop3): Block reservation details [ 211.410952][ T8232] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 211.467633][ T8241] netlink: 'syz.1.1431': attribute type 13 has an invalid length. [ 211.520162][ T8241] gretap0: refused to change device tx_queue_len [ 211.526559][ T8241] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 211.555289][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.688873][ T8248] loop0: detected capacity change from 0 to 1024 [ 211.695940][ T8248] EXT4-fs: Ignoring removed orlov option [ 211.701610][ T8248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.712603][ T8246] loop3: detected capacity change from 0 to 512 [ 211.725971][ T8246] EXT4-fs: Ignoring removed nobh option [ 211.731762][ T8248] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 211.745243][ T8248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.759117][ T8246] ext4: Bad value for 'max_dir_size_kb' [ 211.818721][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.843728][ T8253] SELinux: policydb version 96 does not match my version range 15-33 [ 211.880216][ T8253] SELinux: failed to load policy [ 211.886204][ T8253] xt_hashlimit: max too large, truncated to 1048576 [ 212.036153][ T8259] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 212.051488][ T8259] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=8259 comm=+}[@ [ 212.081064][ T8261] loop1: detected capacity change from 0 to 1024 [ 212.092745][ T8261] EXT4-fs: Ignoring removed orlov option [ 212.098510][ T8261] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.126565][ T8261] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 212.135562][ T8261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.192360][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.203970][ T8253] Cannot find set identified by id 0 to match [ 212.243291][ T8265] xt_hashlimit: size too large, truncated to 1048576 [ 212.323434][ T8269] netlink: 'syz.1.1443': attribute type 10 has an invalid length. [ 212.377644][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1441'. [ 212.447073][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.455953][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.484427][ T8275] netlink: 'syz.1.1444': attribute type 13 has an invalid length. [ 212.492372][ T8275] gretap0: refused to change device tx_queue_len [ 212.498763][ T8275] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 212.541213][ T29] audit: type=1326 audit(1735430914.848:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbfe55d29 code=0x7ffc0000 [ 212.575709][ T8284] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 212.594225][ T29] audit: type=1326 audit(1735430914.878:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effbfe55d29 code=0x7ffc0000 [ 212.617122][ T29] audit: type=1326 audit(1735430914.878:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbfe55d29 code=0x7ffc0000 [ 212.640233][ T29] audit: type=1326 audit(1735430914.878:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effbfe55d29 code=0x7ffc0000 [ 212.647060][ T8284] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=8284 comm=+}[@ [ 212.828025][ T8293] syz.3.1451[8293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.828120][ T8293] syz.3.1451[8293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.839526][ T8293] syz.3.1451[8293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.890466][ T8295] loop0: detected capacity change from 0 to 1024 [ 212.909915][ T8295] EXT4-fs: Ignoring removed orlov option [ 212.915638][ T8295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.925393][ T8298] loop2: detected capacity change from 0 to 1024 [ 212.927062][ T8295] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 212.932048][ T8298] EXT4-fs: Ignoring removed orlov option [ 212.945571][ T8298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.947829][ T8295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.975528][ T8298] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 212.984694][ T8298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.017895][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.085571][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.102530][ T8308] loop0: detected capacity change from 0 to 512 [ 213.125450][ T8308] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1456: invalid indirect mapped block 256 (level 2) [ 213.150524][ T8308] EXT4-fs (loop0): 2 truncates cleaned up [ 213.161991][ T8308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.383731][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.458327][ T8327] loop0: detected capacity change from 0 to 512 [ 213.501171][ T8327] SELinux: policydb version 96 does not match my version range 15-33 [ 213.519443][ T8327] SELinux: failed to load policy [ 213.572862][ T8331] loop0: detected capacity change from 0 to 1024 [ 213.588166][ T8331] EXT4-fs: Ignoring removed orlov option [ 213.593963][ T8331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.658078][ T8331] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 213.689521][ T8335] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.707450][ T8331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.981552][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.054169][ T8340] netlink: 'syz.0.1467': attribute type 10 has an invalid length. [ 214.891060][ T8355] loop3: detected capacity change from 0 to 512 [ 214.897859][ T8355] EXT4-fs: test_dummy_encryption option not supported [ 215.387373][ T8359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.446060][ T8361] siw: device registration error -23 [ 215.457255][ T8359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.246439][ T8368] loop3: detected capacity change from 0 to 1024 [ 216.253205][ T8368] EXT4-fs: Ignoring removed orlov option [ 216.259037][ T8368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.275733][ T8368] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 216.305544][ T8368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.445218][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.650296][ T8417] batman_adv: batadv0: Adding interface: dummy0 [ 216.656646][ T8417] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.685323][ T8417] batman_adv: batadv0: Interface activated: dummy0 [ 216.705956][ T8417] batadv0: mtu less than device minimum [ 216.711931][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.722845][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.733582][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.744379][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.755121][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.765808][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.776494][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.787190][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.797844][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.866050][ T8424] loop1: detected capacity change from 0 to 512 [ 216.877434][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 216.877445][ T29] audit: type=1326 audit(1735430919.188:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e90a05d29 code=0x7fc00000 [ 216.925336][ T8426] can0: slcan on ttyS3. [ 217.142054][ T8434] loop2: detected capacity change from 0 to 512 [ 217.149016][ T8434] EXT4-fs: test_dummy_encryption option not supported [ 217.270286][ T8424] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1486: invalid indirect mapped block 256 (level 2) [ 217.361823][ T8424] EXT4-fs (loop1): 2 truncates cleaned up [ 217.428620][ T8424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.464500][ T8401] can0 (unregistered): slcan off ttyS3. [ 217.813371][ T8446] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.822744][ T3376] page_pool_release_retry() stalled pool shutdown: id 28, 1 inflight 60 sec [ 217.910249][ T8446] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.001518][ T8446] team0: Port device netdevsim1 removed [ 218.013851][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.035680][ T8446] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.409846][ T8446] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.460581][ T8446] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.468894][ T29] audit: type=1326 audit(1735430920.768:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8474 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 218.492404][ T29] audit: type=1326 audit(1735430920.768:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8474 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 218.515831][ T29] audit: type=1326 audit(1735430920.768:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8474 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 218.533483][ T8446] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.539622][ T29] audit: type=1326 audit(1735430920.768:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8474 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 218.539647][ T29] audit: type=1326 audit(1735430920.768:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8474 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 218.573537][ T8446] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.594839][ T29] audit: type=1326 audit(1735430920.768:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8474 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 218.594866][ T29] audit: type=1326 audit(1735430920.768:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8474 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 218.594888][ T29] audit: type=1326 audit(1735430920.768:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8474 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 218.594910][ T29] audit: type=1326 audit(1735430920.768:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8474 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 218.727428][ T8446] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.783819][ T8481] siw: device registration error -23 [ 218.795732][ T8489] loop2: detected capacity change from 0 to 128 [ 218.807977][ T8489] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.822367][ T8482] siw: device registration error -23 [ 218.864460][ T8489] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.876568][ T8477] loop4: detected capacity change from 0 to 512 [ 219.110706][ T8477] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1496: invalid indirect mapped block 256 (level 2) [ 219.150286][ T8477] EXT4-fs (loop4): 2 truncates cleaned up [ 219.201623][ T8477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.219968][ T8495] loop3: detected capacity change from 0 to 512 [ 219.227055][ T8495] EXT4-fs: test_dummy_encryption option not supported [ 219.418763][ T8497] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1498'. [ 219.619405][ T8499] bridge5: entered promiscuous mode [ 219.624787][ T8499] bridge5: entered allmulticast mode [ 220.310895][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.638809][ T8508] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 220.671439][ T8508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=8508 comm=+}[@ [ 220.692316][ T8510] xt_hashlimit: size too large, truncated to 1048576 [ 220.916487][ T8519] netlink: 'syz.3.1507': attribute type 13 has an invalid length. [ 220.916825][ T8521] loop0: detected capacity change from 0 to 512 [ 220.944431][ T8519] gretap0: refused to change device tx_queue_len [ 220.962462][ T8521] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1508: invalid indirect mapped block 256 (level 2) [ 220.977558][ T8521] EXT4-fs (loop0): 2 truncates cleaned up [ 220.983949][ T8521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.026703][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.111501][ T8530] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 221.123172][ T8530] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=8530 comm=+}[@ [ 221.175525][ T3444] page_pool_release_retry() stalled pool shutdown: id 29, 2 inflight 60 sec [ 221.193266][ T8533] loop3: detected capacity change from 0 to 1024 [ 221.203208][ T8533] EXT4-fs: Ignoring removed orlov option [ 221.207043][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.209001][ T8533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.259778][ T8533] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 221.272864][ T8533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.299306][ T8545] loop0: detected capacity change from 0 to 512 [ 221.317829][ T8548] SELinux: policydb version 96 does not match my version range 15-33 [ 221.333234][ T8545] EXT4-fs: Ignoring removed nobh option [ 221.349296][ T8552] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.355672][ T8548] SELinux: failed to load policy [ 221.369327][ T8545] ext4: Bad value for 'max_dir_size_kb' [ 221.382170][ T8548] xt_hashlimit: max too large, truncated to 1048576 [ 221.383260][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.389880][ T8548] Cannot find set identified by id 0 to match [ 221.484418][ T8557] SELinux: policydb version 96 does not match my version range 15-33 [ 221.492887][ T8557] SELinux: failed to load policy [ 221.493495][ T8556] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.501615][ T8557] xt_hashlimit: max too large, truncated to 1048576 [ 221.515339][ T8557] Cannot find set identified by id 0 to match [ 221.556112][ T8556] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.605601][ T8556] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.665886][ T8556] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.976443][ T8561] syz.1.1522: attempt to access beyond end of device [ 221.976443][ T8561] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 221.995302][ T8561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.128857][ T8564] xt_hashlimit: size too large, truncated to 1048576 [ 222.310228][ T8571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1522'. [ 222.576128][ T8586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.780192][ T8556] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.802400][ T8556] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.817024][ T8556] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.882154][ T8592] loop4: detected capacity change from 0 to 512 [ 222.888801][ T8592] EXT4-fs: test_dummy_encryption option not supported [ 222.995716][ T8556] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.081549][ T8594] siw: device registration error -23 [ 223.247688][ T8596] loop0: detected capacity change from 0 to 1024 [ 223.262023][ T8599] loop3: detected capacity change from 0 to 512 [ 223.302756][ T8596] EXT4-fs: Ignoring removed orlov option [ 223.308464][ T8596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.326719][ T8599] EXT4-fs: Ignoring removed nobh option [ 223.393214][ T8599] ext4: Bad value for 'max_dir_size_kb' [ 223.463937][ T8596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 223.556138][ T8596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.604585][ T8602] SELinux: policydb version 96 does not match my version range 15-33 [ 223.638357][ T8602] SELinux: failed to load policy [ 223.681052][ T8602] xt_hashlimit: max too large, truncated to 1048576 [ 223.736956][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.812261][ T8602] Cannot find set identified by id 0 to match [ 224.206995][ T8613] vlan0: entered promiscuous mode [ 224.223793][ T8613] team0: Port device vlan0 added [ 224.347227][ T8619] syz.3.1544: attempt to access beyond end of device [ 224.347227][ T8619] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 224.370138][ T8619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.401015][ T8621] loop4: detected capacity change from 0 to 1024 [ 224.407810][ T8621] EXT4-fs: Ignoring removed orlov option [ 224.413479][ T8621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.516525][ T8621] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 224.536465][ T8621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.584542][ T8635] can0: slcan on ttyS3. [ 224.651117][ T8634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1544'. [ 224.780905][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.280807][ T8654] loop0: detected capacity change from 0 to 1024 [ 225.288007][ T8654] EXT4-fs: Ignoring removed orlov option [ 225.293676][ T8654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.300585][ T8615] can0 (unregistered): slcan off ttyS3. [ 225.327010][ T8654] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 225.336893][ T8654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.515831][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.885728][ T8693] loop2: detected capacity change from 0 to 1024 [ 225.899384][ T8693] EXT4-fs: Ignoring removed orlov option [ 225.905137][ T8693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.913621][ T8690] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.948831][ T8693] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 225.959104][ T8693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.959490][ T8690] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.971853][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 225.971864][ T29] audit: type=1400 audit(1735430928.288:2458): avc: denied { append } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 226.014190][ T29] audit: type=1400 audit(1735430928.298:2459): avc: denied { mount } for pid=8692 comm="syz.2.1557" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 226.035845][ T29] audit: type=1400 audit(1735430928.298:2460): avc: denied { read write } for pid=8692 comm="syz.2.1557" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.060110][ T29] audit: type=1400 audit(1735430928.298:2461): avc: denied { open } for pid=8692 comm="syz.2.1557" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.087918][ T29] audit: type=1400 audit(1735430928.398:2462): avc: denied { write } for pid=8692 comm="syz.2.1557" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.109688][ T29] audit: type=1400 audit(1735430928.398:2463): avc: denied { add_name } for pid=8692 comm="syz.2.1557" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.130393][ T29] audit: type=1400 audit(1735430928.398:2464): avc: denied { create } for pid=8692 comm="syz.2.1557" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 226.150707][ T29] audit: type=1400 audit(1735430928.398:2465): avc: denied { read write } for pid=8692 comm="syz.2.1557" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.173341][ T29] audit: type=1400 audit(1735430928.398:2466): avc: denied { open } for pid=8692 comm="syz.2.1557" path="/346/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.196394][ T29] audit: type=1400 audit(1735430928.398:2467): avc: denied { read append open } for pid=8692 comm="syz.2.1557" path="/346/file1/memory.events" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 226.227375][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.238374][ T8690] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.295834][ T8690] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.320136][ T8704] loop2: detected capacity change from 0 to 1024 [ 226.342106][ T8704] EXT4-fs: Ignoring removed orlov option [ 226.347820][ T8704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.396900][ T8704] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 226.407122][ T8704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.496109][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.685065][ T8711] loop0: detected capacity change from 0 to 1024 [ 226.707950][ T8711] EXT4-fs: Ignoring removed orlov option [ 226.713669][ T8711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.772080][ T8712] loop2: detected capacity change from 0 to 512 [ 226.778589][ T8712] EXT4-fs: test_dummy_encryption option not supported [ 226.915498][ T8711] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 226.927147][ T8711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.190975][ T8690] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.210777][ T8690] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.307433][ T8690] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.354406][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.579013][ T8690] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.831983][ T8720] syz.3.1565: attempt to access beyond end of device [ 227.831983][ T8720] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 227.887126][ T8720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.163066][ T8724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1565'. [ 228.226504][ T8726] loop2: detected capacity change from 0 to 512 [ 228.270058][ T8726] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1566: invalid indirect mapped block 256 (level 2) [ 228.326864][ T8726] EXT4-fs (loop2): 2 truncates cleaned up [ 228.335665][ T8726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.396078][ T8732] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=8732 comm=+}[@ [ 228.881021][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.932948][ T8752] loop2: detected capacity change from 0 to 1024 [ 228.959552][ T8752] EXT4-fs: Ignoring removed orlov option [ 228.965879][ T8752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.997232][ T8752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 229.011848][ T8752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.042300][ T8755] siw: device registration error -23 [ 229.139232][ T8757] siw: device registration error -23 [ 229.184938][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.377876][ T8761] syz.1.1576: attempt to access beyond end of device [ 229.377876][ T8761] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 229.431286][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1575'. [ 229.444615][ T8761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.600736][ T8765] bridge_slave_0: left allmulticast mode [ 229.606562][ T8765] bridge_slave_0: left promiscuous mode [ 229.612328][ T8765] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.755214][ T8765] bridge_slave_1: left allmulticast mode [ 229.760918][ T8765] bridge_slave_1: left promiscuous mode [ 229.766765][ T8765] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.817707][ T8770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1576'. [ 229.838248][ T8765] bond0: (slave bond_slave_0): Releasing backup interface [ 229.914366][ T8765] bond0: (slave bond_slave_1): Releasing backup interface [ 229.967413][ T8765] team0: Port device team_slave_0 removed [ 230.005643][ T8765] team0: Port device team_slave_1 removed [ 230.012410][ T8765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.019911][ T8765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.038878][ T8765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.046456][ T8765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.061687][ T8765] team0: Port device vlan0 removed [ 230.081899][ T8767] team0: Mode changed to "random" [ 230.230118][ T8775] syz.3.1579: attempt to access beyond end of device [ 230.230118][ T8775] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 230.260595][ T8775] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.584422][ T8785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1579'. [ 230.710623][ T8792] loop4: detected capacity change from 0 to 1024 [ 230.736785][ T8792] EXT4-fs: Ignoring removed orlov option [ 230.742531][ T8792] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.797664][ T8792] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 230.810291][ T8792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.950902][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.041885][ T8797] loop4: detected capacity change from 0 to 512 [ 231.069884][ T8797] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1585: invalid indirect mapped block 256 (level 2) [ 231.117266][ T8797] EXT4-fs (loop4): 2 truncates cleaned up [ 231.136857][ T8797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.134666][ T8818] loop2: detected capacity change from 0 to 512 [ 232.141342][ T8818] EXT4-fs: Ignoring removed nobh option [ 232.150305][ T8818] ext4: Bad value for 'max_dir_size_kb' [ 232.162496][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 232.162508][ T29] audit: type=1400 audit(1735430934.468:2552): avc: denied { create } for pid=8817 comm="syz.2.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 232.168052][ T8819] loop1: detected capacity change from 0 to 512 [ 232.168634][ T29] audit: type=1400 audit(1735430934.468:2553): avc: denied { create } for pid=8817 comm="syz.2.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.191229][ T8819] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1590: invalid indirect mapped block 256 (level 2) [ 232.194368][ T29] audit: type=1400 audit(1735430934.468:2554): avc: denied { create } for pid=8817 comm="syz.2.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.215901][ T8819] EXT4-fs (loop1): 2 truncates cleaned up [ 232.230506][ T29] audit: type=1400 audit(1735430934.468:2555): avc: denied { bind } for pid=8817 comm="syz.2.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.275189][ T29] audit: type=1400 audit(1735430934.468:2556): avc: denied { name_bind } for pid=8817 comm="syz.2.1592" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 232.297088][ T29] audit: type=1400 audit(1735430934.468:2557): avc: denied { node_bind } for pid=8817 comm="syz.2.1592" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 232.316086][ T8819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.318137][ T29] audit: type=1400 audit(1735430934.468:2558): avc: denied { connect } for pid=8817 comm="syz.2.1592" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.350978][ T29] audit: type=1400 audit(1735430934.468:2559): avc: denied { name_connect } for pid=8817 comm="syz.2.1592" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 232.373150][ T29] audit: type=1400 audit(1735430934.608:2560): avc: denied { setopt } for pid=8817 comm="syz.2.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 232.466926][ T29] audit: type=1400 audit(1735430934.778:2561): avc: denied { bind } for pid=8825 comm="syz.0.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.468758][ T8828] xt_hashlimit: size too large, truncated to 1048576 [ 232.569591][ T8831] xt_hashlimit: size too large, truncated to 1048576 [ 233.133621][ T8845] net_ratelimit: 11 callbacks suppressed [ 233.133633][ T8845] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 233.230244][ T8850] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.278134][ T8854] loop3: detected capacity change from 0 to 1024 [ 233.291890][ T8852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.297605][ T8854] EXT4-fs: Ignoring removed orlov option [ 233.306431][ T8854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.315501][ T8850] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.317679][ T8856] loop0: detected capacity change from 0 to 1024 [ 233.343292][ T8856] EXT4-fs: Ignoring removed orlov option [ 233.349076][ T8856] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.352316][ T8858] loop4: detected capacity change from 0 to 1024 [ 233.370315][ T8858] EXT4-fs: Ignoring removed orlov option [ 233.376122][ T8858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.384461][ T8856] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 233.393243][ T8850] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.403964][ T8854] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 233.426480][ T8858] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 233.460223][ T8850] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.524962][ T8850] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.539539][ T3305] EXT4-fs unmount: 6 callbacks suppressed [ 233.539609][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.560694][ T8850] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.573045][ T8867] syz.0.1607: attempt to access beyond end of device [ 233.573045][ T8867] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 233.577203][ T8850] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.601411][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.613520][ T8850] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.613667][ T8867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.665570][ T8869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1609'. [ 233.779183][ T8875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1607'. [ 233.791641][ T8874] batman_adv: batadv0: Interface deactivated: dummy0 [ 233.798476][ T8874] batman_adv: batadv0: Removing interface: dummy0 [ 233.857322][ T8874] bridge_slave_0: left allmulticast mode [ 233.863022][ T8874] bridge_slave_0: left promiscuous mode [ 233.868710][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.884562][ T8881] loop2: detected capacity change from 0 to 1024 [ 233.891531][ T8881] EXT4-fs: Ignoring removed orlov option [ 233.897372][ T8881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.906642][ T8874] bridge_slave_1: left allmulticast mode [ 233.912464][ T8874] bridge_slave_1: left promiscuous mode [ 233.918410][ T8874] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.943978][ T8874] bond0: (slave bond_slave_0): Releasing backup interface [ 233.955870][ T8881] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 233.977089][ T8874] bond0: (slave bond_slave_1): Releasing backup interface [ 233.994756][ T8881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.026381][ T8874] team0: Port device team_slave_0 removed [ 234.042367][ T8874] team0: Port device team_slave_1 removed [ 234.056083][ T8874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.063604][ T8874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.101961][ T8874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.109527][ T8874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.166997][ T8874] team0: Port device netdevsim1 removed [ 234.181613][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.190767][ T8879] team0: Mode changed to "random" [ 234.408370][ T8890] siw: device registration error -23 [ 234.751593][ T8896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1617'. [ 234.765182][ T8900] loop0: detected capacity change from 0 to 1024 [ 234.771932][ T8900] EXT4-fs: Ignoring removed orlov option [ 234.777698][ T8900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.827157][ T8900] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 234.835968][ T8900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.903330][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.941815][ T8907] loop3: detected capacity change from 0 to 512 [ 234.959422][ T8907] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1621: invalid indirect mapped block 256 (level 2) [ 234.980199][ T8907] EXT4-fs (loop3): 2 truncates cleaned up [ 234.988219][ T8907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.151613][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'. [ 235.307118][ T8921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.335976][ T8921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.400153][ T8920] team0: Unable to change to the same mode the team is in [ 235.408470][ T8920] vlan0: entered promiscuous mode [ 235.480883][ T8926] loop4: detected capacity change from 0 to 512 [ 235.493528][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.513258][ T8926] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1626: invalid indirect mapped block 256 (level 2) [ 235.536260][ T8926] EXT4-fs (loop4): 2 truncates cleaned up [ 235.542415][ T8926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.737734][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.761858][ T8933] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.825601][ T8933] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.847968][ T8935] loop1: detected capacity change from 0 to 512 [ 235.855835][ T8935] EXT4-fs: Ignoring removed nobh option [ 235.861613][ T8935] ext4: Bad value for 'max_dir_size_kb' [ 235.885867][ T8933] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.926324][ T8938] SELinux: policydb version 96 does not match my version range 15-33 [ 235.935783][ T8938] SELinux: failed to load policy [ 235.940540][ T8940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1631'. [ 235.950886][ T8933] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.954632][ T8938] xt_hashlimit: max too large, truncated to 1048576 [ 235.969114][ T8938] Cannot find set identified by id 0 to match [ 236.020489][ T8933] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.031444][ T8933] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.043105][ T8933] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.054521][ T8933] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.126794][ T8946] loop4: detected capacity change from 0 to 512 [ 236.161821][ T8946] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1633: invalid indirect mapped block 256 (level 2) [ 236.179528][ T8946] EXT4-fs (loop4): 2 truncates cleaned up [ 236.185866][ T8946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.211604][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1635'. [ 236.343362][ T8959] loop0: detected capacity change from 0 to 1024 [ 236.356552][ T8959] EXT4-fs: Ignoring removed orlov option [ 236.362356][ T8959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.408332][ T8959] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 236.424977][ T8959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.492294][ T8965] loop3: detected capacity change from 0 to 128 [ 236.502871][ T8959] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 236.515310][ T8959] EXT4-fs (loop0): This should not happen!! Data will be lost [ 236.515310][ T8959] [ 236.524983][ T8959] EXT4-fs (loop0): Total free blocks count 0 [ 236.530969][ T8959] EXT4-fs (loop0): Free/Dirty block details [ 236.536906][ T8959] EXT4-fs (loop0): free_blocks=0 [ 236.541871][ T8959] EXT4-fs (loop0): dirty_blocks=0 [ 236.546931][ T8959] EXT4-fs (loop0): Block reservation details [ 236.552956][ T8959] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 236.588104][ T8965] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.606375][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.615687][ T8965] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.671405][ T8969] loop4: detected capacity change from 0 to 512 [ 236.680440][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.730269][ T8969] EXT4-fs: Ignoring removed nobh option [ 236.748188][ T8969] ext4: Bad value for 'max_dir_size_kb' [ 236.769649][ T8972] loop1: detected capacity change from 0 to 512 [ 236.819857][ T8972] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1641: invalid indirect mapped block 256 (level 2) [ 236.867900][ T8972] EXT4-fs (loop1): 2 truncates cleaned up [ 236.880633][ T8972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.891539][ T8977] SELinux: policydb version 96 does not match my version range 15-33 [ 236.914375][ T8977] SELinux: failed to load policy [ 236.927891][ T8977] xt_hashlimit: max too large, truncated to 1048576 [ 236.935529][ T8977] Cannot find set identified by id 0 to match [ 236.936542][ T8971] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1638'. [ 236.992356][ T8971] bridge4: entered promiscuous mode [ 236.997633][ T8971] bridge4: entered allmulticast mode [ 237.171092][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.174653][ T8982] batman_adv: batadv0: Interface deactivated: dummy0 [ 237.187108][ T8982] batman_adv: batadv0: Removing interface: dummy0 [ 237.199360][ T8982] bridge_slave_0: left allmulticast mode [ 237.204727][ T8984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.205067][ T8982] bridge_slave_0: left promiscuous mode [ 237.213479][ T8984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.218930][ T8982] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.240598][ T8982] bridge_slave_1: left allmulticast mode [ 237.246322][ T8982] bridge_slave_1: left promiscuous mode [ 237.251993][ T8982] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.268118][ T8982] bond0: (slave bond_slave_0): Releasing backup interface [ 237.284701][ T8982] bond0: (slave bond_slave_1): Releasing backup interface [ 237.324506][ T8982] team0: Port device team_slave_0 removed [ 237.363821][ T8982] team0: Port device team_slave_1 removed [ 237.381293][ T8982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.388934][ T8982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.402427][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.416250][ T8982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.423689][ T8982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.453719][ T8985] vlan0: entered promiscuous mode [ 237.479737][ T8985] team0: Port device vlan0 added [ 237.536944][ T8992] loop3: detected capacity change from 0 to 1024 [ 237.549974][ T8992] EXT4-fs: Ignoring removed orlov option [ 237.555773][ T8992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.586670][ T8992] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 237.604007][ T8992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.660740][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.683220][ T9000] team0: Port device vlan0 added [ 237.749093][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 237.749107][ T29] audit: type=1400 audit(1735430940.058:2586): avc: denied { view } for pid=8989 comm="syz.4.1648" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 237.796379][ T9002] team0: Port device vlan0 removed [ 237.825382][ T9004] team0: Port device vlan0 added [ 237.993422][ T9006] loop3: detected capacity change from 0 to 1024 [ 238.059517][ T9006] EXT4-fs: Ignoring removed orlov option [ 238.065254][ T9006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.076861][ T9006] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 238.085711][ T9006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.106691][ T9008] bridge_slave_0: left allmulticast mode [ 238.112467][ T9008] bridge_slave_0: left promiscuous mode [ 238.114181][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1652'. [ 238.118242][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.136797][ T9008] bridge_slave_1: left allmulticast mode [ 238.139374][ T9006] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 238.142457][ T9008] bridge_slave_1: left promiscuous mode [ 238.154838][ T9006] EXT4-fs (loop3): This should not happen!! Data will be lost [ 238.154838][ T9006] [ 238.160402][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.169965][ T9006] EXT4-fs (loop3): Total free blocks count 0 [ 238.182998][ T9006] EXT4-fs (loop3): Free/Dirty block details [ 238.188949][ T9006] EXT4-fs (loop3): free_blocks=0 [ 238.193929][ T9006] EXT4-fs (loop3): dirty_blocks=0 [ 238.198995][ T9006] EXT4-fs (loop3): Block reservation details [ 238.205061][ T9006] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 238.213515][ T9008] bond0: (slave bond_slave_0): Releasing backup interface [ 238.232493][ T9008] bond0: (slave bond_slave_1): Releasing backup interface [ 238.233679][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.259867][ T9008] team0: Port device team_slave_0 removed [ 238.280922][ T9008] team0: Port device team_slave_1 removed [ 238.296703][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.304250][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.314768][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.322182][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.343465][ T9008] team0: Port device netdevsim1 removed [ 238.368861][ T9008] bond1: (slave batadv1): Releasing active interface [ 238.376948][ T9008] batadv1: left promiscuous mode [ 238.384200][ T9008] batadv1: left allmulticast mode [ 238.444192][ T9012] bridge_slave_1: left allmulticast mode [ 238.449900][ T9012] bridge_slave_1: left promiscuous mode [ 238.455571][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.477350][ T29] audit: type=1326 audit(1735430940.788:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9022 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 238.501857][ T29] audit: type=1326 audit(1735430940.788:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9022 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 238.524683][ T29] audit: type=1326 audit(1735430940.788:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9022 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 238.547624][ T29] audit: type=1326 audit(1735430940.788:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9022 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 238.570532][ T29] audit: type=1326 audit(1735430940.788:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9022 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 238.593548][ T29] audit: type=1326 audit(1735430940.788:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9022 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 238.616617][ T29] audit: type=1326 audit(1735430940.788:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9022 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4da55d29 code=0x7ffc0000 [ 238.639575][ T29] audit: type=1326 audit(1735430940.788:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9022 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6a4da57bbc code=0x7ffc0000 [ 238.663399][ T29] audit: type=1326 audit(1735430940.788:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9022 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6a4da57af4 code=0x7ffc0000 [ 238.690062][ T9026] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=9026 comm=syz.4.1656 [ 238.694298][ T9012] bridge_slave_0: left allmulticast mode [ 238.708442][ T9012] bridge_slave_0: left promiscuous mode [ 238.714055][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.795409][ T9013] vlan0: entered promiscuous mode [ 238.838611][ T9013] team0: Port device vlan0 added [ 238.910253][ T9023] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 238.971506][ T9040] loop0: detected capacity change from 0 to 512 [ 239.000080][ T9046] loop4: detected capacity change from 0 to 1024 [ 239.012982][ T9040] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1660: invalid indirect mapped block 256 (level 2) [ 239.034670][ T9040] EXT4-fs (loop0): 2 truncates cleaned up [ 239.063428][ T9040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.081711][ T9051] loop1: detected capacity change from 0 to 512 [ 239.092096][ T9046] EXT4-fs: Ignoring removed orlov option [ 239.098074][ T9046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.259504][ T9061] bond1: entered promiscuous mode [ 239.264627][ T9061] bond1: entered allmulticast mode [ 239.277229][ T9061] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 239.281396][ T9046] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 239.284812][ T9061] batadv1: entered promiscuous mode [ 239.296888][ T9046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.297440][ T9061] batadv1: entered allmulticast mode [ 239.315029][ T9061] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 239.316575][ T9051] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1662: invalid indirect mapped block 256 (level 2) [ 239.371469][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.405062][ T9075] loop3: detected capacity change from 0 to 512 [ 239.443136][ T9075] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1667: invalid indirect mapped block 256 (level 2) [ 239.444384][ T9051] EXT4-fs (loop1): 2 truncates cleaned up [ 239.466744][ T9051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.483705][ T9075] EXT4-fs (loop3): 2 truncates cleaned up [ 239.496196][ T9075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.558684][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.604366][ T9097] loop2: detected capacity change from 0 to 512 [ 239.728448][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.739471][ T9097] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1674: invalid indirect mapped block 256 (level 2) [ 239.772459][ T9097] EXT4-fs (loop2): 2 truncates cleaned up [ 239.779202][ T9097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.781008][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.329200][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.454886][ T9146] team0: Port device vlan0 removed [ 240.471074][ T9148] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.596769][ T9146] team0: Port device vlan0 added [ 240.612366][ T9153] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 240.690406][ T9157] loop1: detected capacity change from 0 to 1024 [ 240.728545][ T9157] EXT4-fs: Ignoring removed orlov option [ 240.734414][ T9157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.751917][ T9161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.772870][ T9161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.783926][ T9163] loop2: detected capacity change from 0 to 1024 [ 240.786893][ T9157] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 240.795455][ T9163] EXT4-fs: Ignoring removed orlov option [ 240.804035][ T9163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.813576][ T9157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.856498][ T9163] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 240.878106][ T9163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.936900][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.057480][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.072204][ T9173] loop2: detected capacity change from 0 to 1024 [ 241.084402][ T9173] EXT4-fs: Ignoring removed orlov option [ 241.090123][ T9173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.116488][ T9173] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 241.125377][ T9173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.170598][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.252077][ T9187] loop3: detected capacity change from 0 to 512 [ 241.268770][ T9187] EXT4-fs: Ignoring removed nobh option [ 241.274563][ T9187] ext4: Bad value for 'max_dir_size_kb' [ 241.431824][ T9206] SELinux: policydb version 96 does not match my version range 15-33 [ 241.443363][ T9206] SELinux: failed to load policy [ 241.452337][ T9206] xt_hashlimit: max too large, truncated to 1048576 [ 241.459774][ T9206] Cannot find set identified by id 0 to match [ 241.544033][ T9221] siw: device registration error -23 [ 241.789232][ T9227] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 241.857930][ T9231] loop1: detected capacity change from 0 to 512 [ 241.872458][ T9231] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1699: invalid indirect mapped block 256 (level 2) [ 241.889529][ T9231] EXT4-fs (loop1): 2 truncates cleaned up [ 241.895784][ T9231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.927268][ T9234] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.980445][ T9234] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.027067][ T9234] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.086104][ T9234] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.166402][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.215592][ T9234] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.227916][ T9248] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 242.288380][ T9249] team0: Port device vlan0 removed [ 242.330063][ T9249] bond1: (slave batadv1): Releasing backup interface [ 242.339966][ T9249] batadv1: left promiscuous mode [ 242.344984][ T9249] batadv1: left allmulticast mode [ 242.350349][ T9260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1712'. [ 242.369009][ T9234] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.401821][ T9234] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.433697][ T9234] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.463001][ T9268] loop1: detected capacity change from 0 to 512 [ 242.471448][ T9256] team0: Port device vlan0 added [ 242.491380][ T9268] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1716: invalid indirect mapped block 256 (level 2) [ 242.513585][ T9268] EXT4-fs (loop1): 2 truncates cleaned up [ 242.538665][ T9268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.558131][ T9277] loop2: detected capacity change from 0 to 512 [ 242.577510][ T9276] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 242.578615][ T9279] loop4: detected capacity change from 0 to 1024 [ 242.594637][ T9279] EXT4-fs: Ignoring removed orlov option [ 242.600672][ T9279] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.609429][ T9277] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1718: invalid indirect mapped block 256 (level 2) [ 242.623157][ T9277] EXT4-fs (loop2): 2 truncates cleaned up [ 242.629497][ T9277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.644333][ T9279] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 242.652886][ T9279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.721985][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.776122][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.911173][ T9296] bond2: entered promiscuous mode [ 242.916548][ T9296] bond2: entered allmulticast mode [ 242.958287][ T9296] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 242.966373][ T9296] batadv2: entered promiscuous mode [ 242.966523][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.971634][ T9296] batadv2: entered allmulticast mode [ 242.986413][ T9296] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 242.999851][ T9299] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.073119][ T9302] loop4: detected capacity change from 0 to 512 [ 243.079964][ T9302] EXT4-fs: test_dummy_encryption option not supported [ 243.195628][ T9303] siw: device registration error -23 [ 243.316820][ T9307] loop2: detected capacity change from 0 to 1024 [ 243.398614][ T9307] EXT4-fs: Ignoring removed orlov option [ 243.404635][ T9307] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.447094][ T9311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1730'. [ 243.515342][ T9313] syz.0.1731: attempt to access beyond end of device [ 243.515342][ T9313] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 243.556241][ T9307] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 243.566969][ T9307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.801014][ T9313] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.818806][ T9319] loop3: detected capacity change from 0 to 1024 [ 243.849052][ T9319] EXT4-fs: Ignoring removed orlov option [ 243.854907][ T9319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.923729][ T9319] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 243.955462][ T9319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.977687][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.104598][ T9327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1731'. [ 244.160544][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.196120][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 244.196133][ T29] audit: type=1326 audit(1735430946.508:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.2.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e90a05d29 code=0x7ffc0000 [ 244.282257][ T29] audit: type=1326 audit(1735430946.538:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.2.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5e90a05d29 code=0x7ffc0000 [ 244.305694][ T29] audit: type=1326 audit(1735430946.538:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.2.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e90a05d29 code=0x7ffc0000 [ 244.329305][ T29] audit: type=1326 audit(1735430946.538:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.2.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e90a05d29 code=0x7ffc0000 [ 244.559575][ T9339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.779058][ T9349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.779213][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.798060][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.850493][ T9349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.895419][ T9349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.961342][ T9349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.009977][ T9349] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.020857][ T9349] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.031603][ T9349] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.042296][ T9349] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.253404][ T9358] syz.2.1745: attempt to access beyond end of device [ 245.253404][ T9358] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 245.271362][ T9358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.382054][ T9363] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.414217][ T9364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1745'. [ 245.423647][ T29] audit: type=1326 audit(1735430947.728:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbfe55d29 code=0x7fc00000 [ 245.465813][ T9363] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.467828][ T29] audit: type=1326 audit(1735430947.728:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effbfe55d29 code=0x7fc00000 [ 245.499256][ T29] audit: type=1326 audit(1735430947.728:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbfe55d29 code=0x7fc00000 [ 245.524021][ T29] audit: type=1326 audit(1735430947.728:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbfe55d29 code=0x7fc00000 [ 245.548664][ T29] audit: type=1326 audit(1735430947.728:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbfe55d29 code=0x7fc00000 [ 245.572068][ T29] audit: type=1326 audit(1735430947.728:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbfe55d29 code=0x7fc00000 [ 245.588056][ T9368] loop4: detected capacity change from 0 to 1024 [ 245.598173][ T9369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.610583][ T9369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.623970][ T9368] EXT4-fs: Ignoring removed orlov option [ 245.629711][ T9368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.639302][ T9363] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.677760][ T9368] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 245.690485][ T9368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.713476][ T9363] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.788527][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.813906][ T9363] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.828116][ T9363] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.858747][ T9363] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.890252][ T9363] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.176956][ T9389] loop3: detected capacity change from 0 to 1024 [ 246.183593][ T9389] EXT4-fs: Ignoring removed orlov option [ 246.189711][ T9389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.198022][ T9389] ================================================================== [ 246.206110][ T9389] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 246.214974][ T9389] [ 246.217292][ T9389] read-write to 0xffff8881004c1e70 of 8 bytes by task 4088 on cpu 1: [ 246.225693][ T9389] __filemap_add_folio+0x430/0x6f0 [ 246.230908][ T9389] filemap_add_folio+0x9c/0x1b0 [ 246.235764][ T9389] page_cache_ra_unbounded+0x177/0x310 [ 246.241237][ T9389] page_cache_sync_ra+0x252/0x670 [ 246.246307][ T9389] filemap_get_pages+0x2c1/0x10e0 [ 246.251343][ T9389] filemap_read+0x221/0x6a0 [ 246.255847][ T9389] blkdev_read_iter+0x20e/0x2c0 [ 246.260706][ T9389] vfs_read+0x5dc/0x700 [ 246.264865][ T9389] ksys_read+0xe8/0x1b0 [ 246.269015][ T9389] __x64_sys_read+0x42/0x50 [ 246.273526][ T9389] x64_sys_call+0x2874/0x2dc0 [ 246.278214][ T9389] do_syscall_64+0xc9/0x1c0 [ 246.282712][ T9389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.288613][ T9389] [ 246.290930][ T9389] read to 0xffff8881004c1e70 of 8 bytes by task 9389 on cpu 0: [ 246.298473][ T9389] filemap_write_and_wait_range+0x59/0x360 [ 246.304376][ T9389] set_blocksize+0x1d3/0x270 [ 246.308966][ T9389] sb_min_blocksize+0x63/0xe0 [ 246.313650][ T9389] ext4_fill_super+0x38b/0x3a10 [ 246.318520][ T9389] get_tree_bdev_flags+0x29f/0x310 [ 246.324261][ T9389] get_tree_bdev+0x1f/0x30 [ 246.328686][ T9389] ext4_get_tree+0x1c/0x30 [ 246.333100][ T9389] vfs_get_tree+0x56/0x1e0 [ 246.337623][ T9389] do_new_mount+0x227/0x690 [ 246.342141][ T9389] path_mount+0x49b/0xb30 [ 246.346482][ T9389] __se_sys_mount+0x27c/0x2d0 [ 246.351202][ T9389] __x64_sys_mount+0x67/0x80 [ 246.355895][ T9389] x64_sys_call+0x2c84/0x2dc0 [ 246.360576][ T9389] do_syscall_64+0xc9/0x1c0 [ 246.365072][ T9389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.370964][ T9389] [ 246.373273][ T9389] value changed: 0x0000000000000009 -> 0x000000000000000a [ 246.380365][ T9389] [ 246.382674][ T9389] Reported by Kernel Concurrency Sanitizer on: [ 246.388826][ T9389] CPU: 0 UID: 0 PID: 9389 Comm: syz.3.1756 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 246.399502][ T9389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 246.409548][ T9389] ================================================================== [ 246.426488][ T9389] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 246.435523][ T9389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.469853][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1758'. [ 246.494510][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.