last executing test programs: 27.744418855s ago: executing program 3 (id=197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$eJzs3ctrW1caAPBPku3YjmfymGFIMjAJZCDzIJYfDLFnZjOrmVkEhgl000Lq2oqbWraMJaexCdRpd1l0UVpaKF1037+gm2bVUChdt/vSRUlpUxfaQkHlXkmJrViuKI7V+P5+cJNzH9J3jsV3OPfoXt0AMutM8k8uYiQiPoqII43V7Qecafy3ee/GbLLkol6/9GUuPS5Zbx3aet3hiNiIiMGI+P+/I57JPRy3ura+MFMul1aa68Xa4nKxurZ+/urizHxpvrQ0PnVhenpqbHJies/aeuvl525dfPe/A+98+9LdO6+8/15SrZHmvq3t2EuNpvfHsS3b+iLin48iWA8Umu0Z6nVF+FmSz+83EXE2zf8jUUg/TSAL6vV6/Yf6oU67N+rAgZVPx8C5/GhENMr5/OhoYwz/2xjOlyvV2l+vVFaX5hpj5aPRn79ytVwaa54rHI3+XLI+npYfrE+0rU9GpGPgVwtD6frobKU8t79dHdDmcFv+f1No5D+QEU75IbvkP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h0z638WLyVJv3f8+d21tdaFy7fxcqbowurg6OzpbWVkena9U5tN7dhZ/6v3Klcry+N9i9XqxVqrWitW19cuLldWl2uX0vv7Lpf59aRXQjWOnb3+Si4iNvw+lS2KguU+uwsFWr+ei1/cgA71R6HUHBPSMqT/ILuf4QPtP9LaPCwY7vXD5wXwh8HjJ97oCQM+cO+n7P8gq8/+QXeb/IbuM8YEdHtG3zW7z/8Djyfw/ZNtOz//61ZZnd41FxK8j4uNC/6HWs76AgyD/ea45/j935I8j7XsHct+lXxEMRMTzb156/fpMrbYynmz/6v722hvN7RNbXtjxhAHolVaetvIYAMiuzXs3ZlvLfsb94l+NixAejt/XnJscTL+jHN7MbbtWIbdH1y5s3IyIEzvFzzWfd944kRneLDyI90Ij/vFmPXKNt0jr25c+N/0Rx2/GPLkl/h+2xD+1B38XyILbSf8ztlP+5dOcjvv5t73/Gdmjayc693/5+/1foUP/d7rLGM++9eJnHePfjDi1Y/xWvME0Vnv8pG7nuox/96knftdpX/3txvvsFL8lKRVri8vF6tr6+fR35OZLS+NTF6anp8YmJ6aL6Rx1sTVT/bB/nPjwzm7tH+4Qf7f2J9v+3GX7v//9B0+e2SX+n87u/Pkf3yX+UET8pcv4X098+nSnfUn8uQ7tz+8SP9k22WX86mv/OdTloQDAPqiurS/M9EVpJS2UywoKCvtbuPnLqEZbodc9E/CoVdeSU/Mk6XtdEwAAAAAAAAAAAKBb+3E5ca/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEPwYAAD//yvJ1G8=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = eventfd2(0x76, 0x1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x10000000}) 27.262171334s ago: executing program 3 (id=207): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) semop(0x0, &(0x7f0000000180)=[{0x1, 0x7fd, 0x800}, {0x2, 0x6, 0x800}, {0x3, 0xfb97}, {0x2, 0x4}], 0x4) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 27.170853642s ago: executing program 3 (id=209): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 27.016535614s ago: executing program 3 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 26.739053016s ago: executing program 3 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x100000b, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 26.531921993s ago: executing program 3 (id=237): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 26.478511558s ago: executing program 32 (id=237): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.752455038s ago: executing program 2 (id=927): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x81d) 1.35525605s ago: executing program 4 (id=942): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x800020, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r0, 0x0, 0x0}, 0x10) syz_read_part_table(0x5d6, &(0x7f0000000880)="$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") 1.184737734s ago: executing program 4 (id=945): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r3}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r0}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r0}, 0xc) 1.084613672s ago: executing program 4 (id=949): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r2, 0x0, 0x0) 1.004076559s ago: executing program 1 (id=952): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = open(&(0x7f0000000340)='./file0\x00', 0x20000, 0x0) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 841.527602ms ago: executing program 1 (id=953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 840.988902ms ago: executing program 2 (id=955): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r1}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 747.583549ms ago: executing program 2 (id=959): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 678.912445ms ago: executing program 2 (id=961): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 643.338368ms ago: executing program 1 (id=963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 603.945461ms ago: executing program 1 (id=964): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 586.761022ms ago: executing program 2 (id=966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom(r1, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 534.076927ms ago: executing program 1 (id=967): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2d, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xb1de0244d95b7ddf) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 533.774446ms ago: executing program 2 (id=968): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 447.971784ms ago: executing program 0 (id=970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x4d0, 0x198, 0x340, 0x230, 0x198, 0x340, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x6], 0x0, 0x6}}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unshare(0x22020600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x3, 0x7fe2, 0x1, 0x100, 0xffffffffffffffff, 0x10000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r3, &(0x7f0000000340), 0x0}, 0x20) 407.900297ms ago: executing program 0 (id=971): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f54}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 388.488668ms ago: executing program 0 (id=972): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 333.462773ms ago: executing program 0 (id=973): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r0}, 0xe) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 313.722294ms ago: executing program 1 (id=974): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) 294.944306ms ago: executing program 5 (id=975): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 263.831628ms ago: executing program 4 (id=976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x2000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb851}, 0x1c) 232.287931ms ago: executing program 0 (id=977): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0x3}, &(0x7f0000000240)=0x8) 180.673035ms ago: executing program 4 (id=978): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) read(r0, &(0x7f0000000100)=""/208, 0xd0) 180.481005ms ago: executing program 5 (id=979): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) 167.091316ms ago: executing program 4 (id=980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 124.49812ms ago: executing program 5 (id=981): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) unshare(0x22020600) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) 123.97042ms ago: executing program 0 (id=991): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 86.398363ms ago: executing program 5 (id=982): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f800000016000100fce92584e2"], 0xf8}}, 0x0) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x4a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 36.829657ms ago: executing program 5 (id=983): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r2}, 0x18) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 5 (id=984): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004200)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="c56522208dc69dfb8579e903062d712c51efce7f8685ad122172266070a513ccdaa859e81b7904cce4e7a6bd852bebc69f79a493d01e9bac31503c353c47ad118d2f9200b918519529d310", @ANYRESDEC=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x11) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x102) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r2}) sendto$packet(r1, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r2, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 24.959771][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 24.959789][ T29] audit: type=1400 audit(1753871291.160:57): avc: denied { transition } for pid=3278 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.990455][ T29] audit: type=1400 audit(1753871291.160:58): avc: denied { noatsecure } for pid=3278 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.010239][ T29] audit: type=1400 audit(1753871291.170:59): avc: denied { write } for pid=3278 comm="sh" path="pipe:[2442]" dev="pipefs" ino=2442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 25.032466][ T29] audit: type=1400 audit(1753871291.170:60): avc: denied { rlimitinh } for pid=3278 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.051344][ T29] audit: type=1400 audit(1753871291.170:61): avc: denied { siginh } for pid=3278 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. [ 33.404749][ T29] audit: type=1400 audit(1753871299.610:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.406005][ T3291] cgroup: Unknown subsys name 'net' [ 33.427679][ T29] audit: type=1400 audit(1753871299.610:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.455126][ T29] audit: type=1400 audit(1753871299.640:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.602610][ T3291] cgroup: Unknown subsys name 'cpuset' [ 33.608979][ T3291] cgroup: Unknown subsys name 'rlimit' [ 33.730646][ T29] audit: type=1400 audit(1753871299.930:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.755244][ T29] audit: type=1400 audit(1753871299.930:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.775763][ T29] audit: type=1400 audit(1753871299.930:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.796157][ T29] audit: type=1400 audit(1753871299.930:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.816815][ T29] audit: type=1400 audit(1753871299.930:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.841692][ T29] audit: type=1400 audit(1753871299.930:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.850978][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.873810][ T29] audit: type=1400 audit(1753871300.090:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.937540][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.034629][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 35.058176][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.140313][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.147476][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.154970][ T3306] bridge_slave_0: entered allmulticast mode [ 35.161593][ T3306] bridge_slave_0: entered promiscuous mode [ 35.171304][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.178461][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.185734][ T3306] bridge_slave_1: entered allmulticast mode [ 35.192251][ T3306] bridge_slave_1: entered promiscuous mode [ 35.224835][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.232011][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.239178][ T3302] bridge_slave_0: entered allmulticast mode [ 35.245765][ T3302] bridge_slave_0: entered promiscuous mode [ 35.264502][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.275234][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.289499][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.296604][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.304022][ T3302] bridge_slave_1: entered allmulticast mode [ 35.310492][ T3302] bridge_slave_1: entered promiscuous mode [ 35.331464][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.346384][ T3306] team0: Port device team_slave_0 added [ 35.354218][ T3306] team0: Port device team_slave_1 added [ 35.363711][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.394787][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 35.414971][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.421971][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.447924][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.465877][ T3302] team0: Port device team_slave_0 added [ 35.481153][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.488412][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.514439][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.530756][ T3302] team0: Port device team_slave_1 added [ 35.553314][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.574191][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.581192][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.607188][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.635909][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.642997][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.668927][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.689656][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.696822][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.704179][ T3301] bridge_slave_0: entered allmulticast mode [ 35.710523][ T3301] bridge_slave_0: entered promiscuous mode [ 35.719442][ T3306] hsr_slave_0: entered promiscuous mode [ 35.725561][ T3306] hsr_slave_1: entered promiscuous mode [ 35.739659][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 35.748356][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.755588][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.762869][ T3301] bridge_slave_1: entered allmulticast mode [ 35.769407][ T3301] bridge_slave_1: entered promiscuous mode [ 35.788298][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.800493][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.856292][ T3302] hsr_slave_0: entered promiscuous mode [ 35.862461][ T3302] hsr_slave_1: entered promiscuous mode [ 35.868300][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 35.874121][ T3302] Cannot create hsr debugfs directory [ 35.886018][ T3301] team0: Port device team_slave_0 added [ 35.903343][ T3301] team0: Port device team_slave_1 added [ 35.933867][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.940977][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.948540][ T3309] bridge_slave_0: entered allmulticast mode [ 35.955212][ T3309] bridge_slave_0: entered promiscuous mode [ 35.979575][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.986792][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.994046][ T3309] bridge_slave_1: entered allmulticast mode [ 36.000379][ T3309] bridge_slave_1: entered promiscuous mode [ 36.006993][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.014032][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.040024][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.059062][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.066217][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.073554][ T3305] bridge_slave_0: entered allmulticast mode [ 36.080210][ T3305] bridge_slave_0: entered promiscuous mode [ 36.089380][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.096568][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.103827][ T3305] bridge_slave_1: entered allmulticast mode [ 36.110174][ T3305] bridge_slave_1: entered promiscuous mode [ 36.122361][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.129339][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.155481][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.197459][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.210085][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.230984][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.241997][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.285441][ T3309] team0: Port device team_slave_0 added [ 36.300749][ T3301] hsr_slave_0: entered promiscuous mode [ 36.306850][ T3301] hsr_slave_1: entered promiscuous mode [ 36.312764][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 36.318499][ T3301] Cannot create hsr debugfs directory [ 36.324759][ T3305] team0: Port device team_slave_0 added [ 36.331301][ T3305] team0: Port device team_slave_1 added [ 36.337745][ T3309] team0: Port device team_slave_1 added [ 36.389963][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.397056][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.423062][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.434343][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.441346][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.467397][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.480491][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.487554][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.513498][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.534056][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.541032][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.567082][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.601520][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.624918][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.643390][ T3309] hsr_slave_0: entered promiscuous mode [ 36.649463][ T3309] hsr_slave_1: entered promiscuous mode [ 36.655468][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 36.661202][ T3309] Cannot create hsr debugfs directory [ 36.669574][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.687714][ T3305] hsr_slave_0: entered promiscuous mode [ 36.694030][ T3305] hsr_slave_1: entered promiscuous mode [ 36.699835][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 36.705669][ T3305] Cannot create hsr debugfs directory [ 36.725399][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.778270][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.789442][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.800303][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.809160][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.869010][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.882364][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.891102][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.899706][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.943738][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.957494][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.976089][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.985103][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.013256][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.025350][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.034903][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.044231][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.061905][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.088389][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.100634][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.114120][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.121263][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.139071][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.147486][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.154602][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.166699][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.182355][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.189554][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.217684][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.224899][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.251485][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.265023][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.272188][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.306782][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.314017][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.354299][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.365684][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.388694][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.414983][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.434184][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.441290][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.456249][ T1905] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.463414][ T1905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.480646][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.497737][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.515729][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.522898][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.541881][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.549040][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.569485][ T3306] veth0_vlan: entered promiscuous mode [ 37.611432][ T3306] veth1_vlan: entered promiscuous mode [ 37.619375][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.645103][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.655626][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.689898][ T3306] veth0_macvtap: entered promiscuous mode [ 37.699777][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.728020][ T3306] veth1_macvtap: entered promiscuous mode [ 37.757235][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.777127][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.791181][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.808538][ T3306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.817448][ T3306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.826341][ T3306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.835140][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.880035][ T3302] veth0_vlan: entered promiscuous mode [ 37.907909][ T3301] veth0_vlan: entered promiscuous mode [ 37.916890][ T3301] veth1_vlan: entered promiscuous mode [ 37.928838][ T3302] veth1_vlan: entered promiscuous mode [ 37.954889][ T3301] veth0_macvtap: entered promiscuous mode [ 37.973708][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.982366][ T3301] veth1_macvtap: entered promiscuous mode [ 38.003135][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.014667][ T3309] veth0_vlan: entered promiscuous mode [ 38.029237][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.055359][ T3309] veth1_vlan: entered promiscuous mode [ 38.063055][ T3301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.071920][ T3301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.080653][ T3301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.089510][ T3301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.109183][ T3302] veth0_macvtap: entered promiscuous mode [ 38.117406][ T3305] veth0_vlan: entered promiscuous mode [ 38.138740][ T3302] veth1_macvtap: entered promiscuous mode [ 38.166076][ T3309] veth0_macvtap: entered promiscuous mode [ 38.180401][ T3305] veth1_vlan: entered promiscuous mode [ 38.195749][ T3475] loop3: detected capacity change from 0 to 164 [ 38.205994][ T3475] process 'syz.3.8' launched '/dev/fd/3' with NULL argv: empty string added [ 38.216363][ T3309] veth1_macvtap: entered promiscuous mode [ 38.230163][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.244997][ T3475] syz.3.8: attempt to access beyond end of device [ 38.244997][ T3475] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 38.261659][ T3475] syz.3.8: attempt to access beyond end of device [ 38.261659][ T3475] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.276944][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.287500][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.300005][ T3305] veth0_macvtap: entered promiscuous mode [ 38.310780][ T3305] veth1_macvtap: entered promiscuous mode [ 38.330999][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.339898][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.348776][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.357630][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.373993][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.392203][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.400993][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.409800][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.418621][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.456462][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.468748][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 38.468764][ T29] audit: type=1400 audit(1753871304.670:114): avc: denied { create } for pid=3483 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.480957][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.519350][ T3482] loop0: detected capacity change from 0 to 1024 [ 38.550051][ T3482] EXT4-fs: Ignoring removed nobh option [ 38.555844][ T3482] EXT4-fs: inline encryption not supported [ 38.563827][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.572954][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.581718][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.585415][ T29] audit: type=1400 audit(1753871304.710:115): avc: denied { ioctl } for pid=3483 comm="syz.3.10" path="socket:[3517]" dev="sockfs" ino=3517 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.590528][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.632107][ T29] audit: type=1400 audit(1753871304.840:116): avc: denied { create } for pid=3489 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.634120][ T3490] sctp: [Deprecated]: syz.4.5 (pid 3490) Use of int in max_burst socket option deprecated. [ 38.634120][ T3490] Use struct sctp_assoc_value instead [ 38.669151][ T29] audit: type=1400 audit(1753871304.840:117): avc: denied { shutdown } for pid=3489 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.688632][ T29] audit: type=1400 audit(1753871304.840:118): avc: denied { getopt } for pid=3489 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.692437][ T3488] $Hÿ: renamed from bond0 (while UP) [ 38.707845][ T29] audit: type=1400 audit(1753871304.840:119): avc: denied { connect } for pid=3489 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.732653][ T29] audit: type=1400 audit(1753871304.840:120): avc: denied { name_connect } for pid=3489 comm="syz.4.5" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 38.754655][ T29] audit: type=1400 audit(1753871304.840:121): avc: denied { write } for pid=3489 comm="syz.4.5" lport=35819 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 38.758300][ T3482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.778465][ T29] audit: type=1400 audit(1753871304.840:122): avc: denied { setopt } for pid=3489 comm="syz.4.5" lport=35819 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 38.816244][ T3488] $Hÿ: entered promiscuous mode [ 38.821360][ T3488] bond_slave_0: entered promiscuous mode [ 38.822907][ T29] audit: type=1400 audit(1753871304.940:123): avc: denied { create } for pid=3491 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.827199][ T3488] bond_slave_1: entered promiscuous mode [ 38.980360][ T3482] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.11: Allocating blocks 385-513 which overlap fs metadata [ 39.031493][ T3481] EXT4-fs (loop0): pa ffff88810054b000: logic 16, phys. 129, len 24 [ 39.039665][ T3481] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 39.069457][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.286200][ T3536] netlink: 96 bytes leftover after parsing attributes in process `syz.3.30'. [ 39.301071][ T3533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 39.670733][ T3575] loop0: detected capacity change from 0 to 512 [ 39.684702][ T3575] EXT4-fs: Ignoring removed nobh option [ 39.691458][ T3575] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.695402][ T3577] ip6tnl1: entered promiscuous mode [ 39.709892][ T3577] ip6tnl1: entered allmulticast mode [ 39.724399][ T3575] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.46: corrupted inode contents [ 39.736365][ T3575] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #3: comm syz.0.46: mark_inode_dirty error [ 39.749293][ T3575] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.46: corrupted inode contents [ 39.761636][ T3575] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.46: mark_inode_dirty error [ 39.773337][ T3575] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.46: Failed to acquire dquot type 0 [ 39.787750][ T3575] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.46: corrupted inode contents [ 39.801261][ T3575] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #16: comm syz.0.46: mark_inode_dirty error [ 39.815010][ T3575] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.46: corrupted inode contents [ 39.843946][ T3575] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.46: mark_inode_dirty error [ 39.861790][ T3575] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.46: corrupted inode contents [ 39.876209][ T3575] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 39.885629][ T3575] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.46: corrupted inode contents [ 39.897770][ T3575] EXT4-fs error (device loop0): ext4_truncate:4592: inode #16: comm syz.0.46: mark_inode_dirty error [ 39.911295][ T3575] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 39.921454][ T3575] EXT4-fs (loop0): 1 truncate cleaned up [ 39.928167][ T3575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.941231][ T3575] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.957772][ T3575] syz.0.46 (3575) used greatest stack depth: 9832 bytes left [ 39.976021][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.013983][ T3588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.51'. [ 40.047883][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.055474][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.062933][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.070472][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.077958][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.085406][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.092849][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.100315][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.107916][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.115372][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.122834][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.130323][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.137906][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.145554][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.153070][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.160606][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.168133][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.175615][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.183072][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.190501][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.197974][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.205487][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.212933][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.220460][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.227939][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.235491][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.242939][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.250377][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.257835][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.265359][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.272803][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.280269][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.287808][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.295273][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.302809][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.310260][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.317838][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.325313][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.332802][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.340235][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.347733][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.355195][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.362734][ T3396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.375881][ T3396] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 40.461347][ T3595] fido_id[3595]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.550247][ T3612] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 40.681874][ T3627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.68'. [ 40.698738][ T3627] netlink: 'syz.2.68': attribute type 2 has an invalid length. [ 40.741161][ T3631] bridge_slave_0: left allmulticast mode [ 40.747019][ T3631] bridge_slave_0: left promiscuous mode [ 40.752857][ T3631] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.776417][ T3631] bridge_slave_1: left allmulticast mode [ 40.782310][ T3631] bridge_slave_1: left promiscuous mode [ 40.788055][ T3631] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.830169][ T3631] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 40.844559][ T3631] bond_slave_0: left promiscuous mode [ 40.864215][ T3631] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 40.877311][ T3631] bond_slave_1: left promiscuous mode [ 40.887066][ T3631] team0: Port device team_slave_0 removed [ 40.906528][ T3631] team0: Port device team_slave_1 removed [ 40.928784][ T3631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.928938][ T3651] loop2: detected capacity change from 0 to 1024 [ 40.936375][ T3631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.954234][ T3652] loop4: detected capacity change from 0 to 128 [ 40.960745][ T3648] syz.0.79 (3648) used greatest stack depth: 9464 bytes left [ 40.962512][ T3631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.975791][ T3631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.003754][ T3651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.019205][ T3638] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 41.088355][ T3657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 41.124679][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.183111][ T3658] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.190377][ T3658] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.266438][ T3658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.276900][ T3658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.307819][ T3658] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.316824][ T3658] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.325996][ T3658] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.335627][ T3658] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.350134][ T3660] tipc: Started in network mode [ 41.355329][ T3660] tipc: Node identity 1e1dea703b17, cluster identity 4711 [ 41.363015][ T3660] tipc: Enabled bearer , priority 0 [ 41.374309][ T3668] tipc: Disabling bearer [ 41.576748][ C1] hrtimer: interrupt took 40883 ns [ 41.704845][ T3710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.101'. [ 41.715436][ T3711] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 41.745884][ T3713] netlink: 96 bytes leftover after parsing attributes in process `syz.0.103'. [ 41.928516][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 41.937730][ T3747] veth0: entered promiscuous mode [ 41.946754][ T3747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 42.156126][ T3771] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.123'. [ 42.544636][ T3796] team1: entered promiscuous mode [ 42.549803][ T3796] team1: entered allmulticast mode [ 42.555607][ T3796] Zero length message leads to an empty skb [ 42.875951][ T3816] loop0: detected capacity change from 0 to 1024 [ 42.885078][ T3816] EXT4-fs: Ignoring removed nobh option [ 42.890747][ T3816] EXT4-fs: inline encryption not supported [ 42.916288][ T3816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.938914][ T3816] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.144: Allocating blocks 385-513 which overlap fs metadata [ 42.959239][ T3816] EXT4-fs (loop0): pa ffff888106eb0000: logic 16, phys. 129, len 24 [ 42.967393][ T3816] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 42.995724][ T3816] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 43.008207][ T3816] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.008207][ T3816] [ 43.018175][ T3816] EXT4-fs (loop0): Total free blocks count 0 [ 43.024693][ T3816] EXT4-fs (loop0): Free/Dirty block details [ 43.030666][ T3816] EXT4-fs (loop0): free_blocks=128 [ 43.036353][ T3816] EXT4-fs (loop0): dirty_blocks=0 [ 43.041414][ T3816] EXT4-fs (loop0): Block reservation details [ 43.047519][ T3816] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 43.094152][ T3827] macvlan1: entered promiscuous mode [ 43.101151][ T3827] ipvlan0: entered promiscuous mode [ 43.108289][ T3827] ipvlan0: left promiscuous mode [ 43.122346][ T3827] macvlan1: left promiscuous mode [ 43.261596][ T3844] syz.0.156 uses obsolete (PF_INET,SOCK_PACKET) [ 43.290591][ T3841] rdma_op ffff888119b39d80 conn xmit_rdma 0000000000000000 [ 43.448618][ T3859] : renamed from bond0 (while UP) [ 43.471487][ T3861] netlink: 'syz.2.164': attribute type 4 has an invalid length. [ 43.485624][ T3861] netlink: 'syz.2.164': attribute type 4 has an invalid length. [ 43.520981][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 43.520995][ T29] audit: type=1400 audit(1753871309.720:337): avc: denied { mount } for pid=3862 comm="+}[@" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 43.600005][ T29] audit: type=1400 audit(1753871309.800:338): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 43.638164][ T3871] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 43.657937][ T29] audit: type=1400 audit(1753871309.840:339): avc: denied { watch } for pid=3868 comm="syz.2.168" path="/31/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 43.662655][ T3388] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 43.680625][ T29] audit: type=1400 audit(1753871309.850:340): avc: denied { relabelto } for pid=3868 comm="syz.2.168" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 43.687549][ T3388] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 43.687578][ T3388] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 43.728922][ T29] audit: type=1400 audit(1753871309.850:341): avc: denied { associate } for pid=3868 comm="syz.2.168" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 43.759462][ T3388] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 43.830917][ T3875] fido_id[3875]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.019368][ T3886] loop1: detected capacity change from 0 to 8192 [ 44.027054][ T3886] ======================================================= [ 44.027054][ T3886] WARNING: The mand mount option has been deprecated and [ 44.027054][ T3886] and is ignored by this kernel. Remove the mand [ 44.027054][ T3886] option from the mount to silence this warning. [ 44.027054][ T3886] ======================================================= [ 44.062399][ T3896] openvswitch: netlink: Message has 6 unknown bytes. [ 44.090920][ T29] audit: type=1400 audit(1753871310.290:342): avc: denied { read } for pid=3901 comm="syz.4.183" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 44.115025][ T29] audit: type=1400 audit(1753871310.290:343): avc: denied { open } for pid=3901 comm="syz.4.183" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 44.139601][ T29] audit: type=1326 audit(1753871310.290:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c9bae9a9 code=0x7ffc0000 [ 44.264888][ T29] audit: type=1326 audit(1753871310.370:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0c9bae9a9 code=0x7ffc0000 [ 44.288256][ T29] audit: type=1326 audit(1753871310.370:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c9bae9a9 code=0x7ffc0000 [ 44.380613][ T3916] __nla_validate_parse: 11 callbacks suppressed [ 44.380635][ T3916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 44.435191][ T3921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.189'. [ 44.465664][ T3923] loop1: detected capacity change from 0 to 512 [ 44.499793][ T3923] ext4: Unknown parameter 'obj_type' [ 44.502210][ T3925] loop4: detected capacity change from 0 to 512 [ 44.534563][ T3925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.563160][ T3925] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.576496][ T3925] netlink: 96 bytes leftover after parsing attributes in process `syz.4.193'. [ 44.601369][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.618713][ T3929] block device autoloading is deprecated and will be removed. [ 44.658304][ T3933] loop3: detected capacity change from 0 to 512 [ 44.784396][ T3933] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.197: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 44.855559][ T3946] loop1: detected capacity change from 0 to 512 [ 44.863303][ T3933] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.197: Bad quota inode: 3, type: 0 [ 44.883806][ T3933] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 44.884840][ T3952] capability: warning: `syz.0.203' uses deprecated v2 capabilities in a way that may be insecure [ 44.899511][ T3933] EXT4-fs (loop3): mount failed [ 44.916670][ T3946] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.924368][ T3946] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.200: bg 0: block 248: padding at end of block bitmap is not set [ 44.939400][ T3946] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.200: Failed to acquire dquot type 1 [ 44.953617][ T3946] EXT4-fs (loop1): 1 truncate cleaned up [ 44.960612][ T3946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.058990][ T3946] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 45.067915][ T3957] netlink: 'syz.0.206': attribute type 1 has an invalid length. [ 45.076118][ T3957] netlink: 'syz.0.206': attribute type 4 has an invalid length. [ 45.083819][ T3957] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.206'. [ 45.093481][ T3946] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 0 [ 45.125281][ T3957] netlink: 'syz.0.206': attribute type 1 has an invalid length. [ 45.133114][ T3957] netlink: 'syz.0.206': attribute type 4 has an invalid length. [ 45.140850][ T3957] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.206'. [ 45.160433][ T3946] syz.1.200 (3946) used greatest stack depth: 9288 bytes left [ 45.168495][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.220206][ T3964] netlink: 'syz.3.209': attribute type 12 has an invalid length. [ 45.386303][ T3976] lo: Caught tx_queue_len zero misconfig [ 45.592219][ T3999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 45.821057][ T4020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 46.007102][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.104613][ T4039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.243'. [ 46.127427][ T4039] ip6gre1: entered allmulticast mode [ 46.186172][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.251285][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.330746][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.362309][ T4052] xt_hashlimit: max too large, truncated to 1048576 [ 46.397487][ T4030] chnl_net:caif_netlink_parms(): no params data found [ 46.555271][ T4061] loop2: detected capacity change from 0 to 8192 [ 46.613948][ T12] $Hÿ (unregistering): Released all slaves [ 46.682116][ T12] tipc: Left network mode [ 46.694971][ T12] hsr_slave_0: left promiscuous mode [ 46.702614][ T12] hsr_slave_1: left promiscuous mode [ 46.711692][ T12] veth1_macvtap: left promiscuous mode [ 46.717759][ T12] veth0_macvtap: left promiscuous mode [ 46.723576][ T12] veth1_vlan: left promiscuous mode [ 46.729297][ T12] veth0_vlan: left promiscuous mode [ 46.821232][ T4080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.252'. [ 46.911855][ T4030] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.919012][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.926345][ T4030] bridge_slave_0: entered allmulticast mode [ 46.934744][ T4030] bridge_slave_0: entered promiscuous mode [ 46.941162][ T4090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 46.956995][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.964205][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.973873][ T4030] bridge_slave_1: entered allmulticast mode [ 46.981012][ T4030] bridge_slave_1: entered promiscuous mode [ 46.990793][ T4090] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.999672][ T4090] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.008484][ T4090] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.017289][ T4090] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.026383][ T4090] vxlan0: entered promiscuous mode [ 47.056068][ T4030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.068144][ T4030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.109378][ T4030] team0: Port device team_slave_0 added [ 47.116692][ T4097] netlink: 'syz.0.256': attribute type 1 has an invalid length. [ 47.139203][ T4030] team0: Port device team_slave_1 added [ 47.170136][ T4097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.260663][ T4108] bond1: (slave veth7): Enslaving as an active interface with a down link [ 47.273562][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.280594][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.306636][ T4030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.344673][ T4115] loop1: detected capacity change from 0 to 1024 [ 47.368060][ T4097] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 47.376687][ T4115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.377323][ T4097] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 47.426604][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.433633][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.435697][ T4115] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.459614][ T4030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.501864][ T4120] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 47.527488][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.540530][ T4030] hsr_slave_0: entered promiscuous mode [ 47.554999][ T4030] hsr_slave_1: entered promiscuous mode [ 47.794835][ T4030] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.818357][ T4030] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.853176][ T4030] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.878468][ T4030] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.980987][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.038571][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.070095][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.077315][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.128800][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.135951][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.163679][ T4209] loop0: detected capacity change from 0 to 512 [ 48.172067][ T4209] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.207293][ T4030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.256680][ T4209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.292524][ T4209] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.281: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 48.325708][ T4209] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 12: comm syz.0.281: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 48.351324][ T4209] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.281: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 48.374639][ T4209] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 14: comm syz.0.281: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 48.403513][ T4209] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 15: comm syz.0.281: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 48.409952][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.431593][ T4209] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.281: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 48.471076][ T4209] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 17: comm syz.0.281: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 48.505142][ T4225] veth1_to_bond: entered promiscuous mode [ 48.511028][ T4225] macsec1: entered promiscuous mode [ 48.516594][ T4225] macsec1: entered allmulticast mode [ 48.522037][ T4225] veth1_to_bond: entered allmulticast mode [ 48.522168][ T4209] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #2: block 18: comm syz.0.281: lblock 23 mapped to illegal pblock 18 (length 1) [ 48.559560][ T4225] veth1_to_bond: left allmulticast mode [ 48.565352][ T4225] veth1_to_bond: left promiscuous mode [ 48.597288][ T4209] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 19: comm syz.0.281: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 48.634894][ T4209] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 20: comm syz.0.281: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 48.924956][ T4264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.957975][ T4030] veth0_vlan: entered promiscuous mode [ 48.991381][ T4030] veth1_vlan: entered promiscuous mode [ 49.029005][ T4030] veth0_macvtap: entered promiscuous mode [ 49.057120][ T4030] veth1_macvtap: entered promiscuous mode [ 49.083642][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.129956][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.146030][ T4030] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.154971][ T4030] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.163841][ T4030] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.172617][ T4030] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.190111][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 49.190127][ T29] audit: type=1326 audit(1753871315.390:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.294" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e7982e9a9 code=0x0 [ 49.221852][ T3301] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 49.267379][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.284845][ T29] audit: type=1400 audit(1753871315.460:469): avc: denied { mount } for pid=4030 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.307100][ T29] audit: type=1400 audit(1753871315.460:470): avc: denied { mounton } for pid=4030 comm="syz-executor" path="/root/syzkaller.idO95p/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.334044][ T29] audit: type=1400 audit(1753871315.490:471): avc: denied { add_name } for pid=4030 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 49.358717][ T29] audit: type=1400 audit(1753871315.490:472): avc: denied { create } for pid=4030 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 49.379073][ T29] audit: type=1400 audit(1753871315.490:473): avc: denied { associate } for pid=4030 comm="syz-executor" name="syz5" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.478960][ T29] audit: type=1400 audit(1753871315.680:474): avc: denied { kexec_image_load } for pid=4301 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 49.545884][ T29] audit: type=1400 audit(1753871315.750:475): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.629721][ T4322] batadv_slave_1: entered promiscuous mode [ 49.643745][ T4322] batadv_slave_1: left promiscuous mode [ 49.692060][ T29] audit: type=1326 audit(1753871315.890:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4327 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e23cae9a9 code=0x7ffc0000 [ 49.755156][ T29] audit: type=1326 audit(1753871315.930:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4327 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e23cae9a9 code=0x7ffc0000 [ 49.834268][ T4335] loop5: detected capacity change from 0 to 1024 [ 49.868819][ T4335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.944275][ T4335] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.307: Allocating blocks 497-513 which overlap fs metadata [ 49.988309][ T4335] EXT4-fs (loop5): pa ffff88810054b0e0: logic 256, phys. 369, len 9 [ 49.996805][ T4335] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 50.071013][ T4030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.633574][ T4421] loop1: detected capacity change from 0 to 1024 [ 50.644575][ T4423] netlink: 'syz.4.334': attribute type 10 has an invalid length. [ 50.652591][ T4423] __nla_validate_parse: 7 callbacks suppressed [ 50.652607][ T4423] netlink: 40 bytes leftover after parsing attributes in process `syz.4.334'. [ 50.662711][ T4421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.668428][ T4423] dummy0: entered promiscuous mode [ 50.686561][ T4423] bridge0: port 3(dummy0) entered blocking state [ 50.693237][ T4423] bridge0: port 3(dummy0) entered disabled state [ 50.700017][ T4423] dummy0: entered allmulticast mode [ 50.703618][ T4421] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 50.706526][ T4423] bridge0: port 3(dummy0) entered blocking state [ 50.726931][ T4423] bridge0: port 3(dummy0) entered forwarding state [ 50.750127][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.826554][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 50.829653][ T4433] loop0: detected capacity change from 0 to 1024 [ 50.846566][ T4429] team1: entered promiscuous mode [ 50.851868][ T4429] team1: entered allmulticast mode [ 50.871353][ T4433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.888317][ T4433] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.936975][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.037144][ T4451] atomic_op ffff8881068bc128 conn xmit_atomic 0000000000000000 [ 51.097550][ T4457] vlan0: entered allmulticast mode [ 51.119151][ T4460] bridge0: port 3(batadv1) entered blocking state [ 51.125798][ T4460] bridge0: port 3(batadv1) entered disabled state [ 51.133058][ T4460] batadv1: entered allmulticast mode [ 51.138995][ T4460] batadv1: entered promiscuous mode [ 51.497071][ T4498] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.624000][ T1905] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 51.633354][ T1905] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 52.026170][ T4521] loop0: detected capacity change from 0 to 128 [ 52.050170][ T4521] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.065819][ T4524] netlink: 'syz.5.375': attribute type 17 has an invalid length. [ 52.073749][ T4524] netlink: 152 bytes leftover after parsing attributes in process `syz.5.375'. [ 52.091686][ T4521] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.102289][ T4524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.153581][ T31] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.205731][ T4528] syz.1.377 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.364161][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 52.413711][ T4556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.389'. [ 52.690674][ T4586] netlink: 3 bytes leftover after parsing attributes in process `syz.1.403'. [ 52.722027][ T4586] batadv2: entered promiscuous mode [ 52.727581][ T4586] batadv2: entered allmulticast mode [ 52.768023][ T4590] loop4: detected capacity change from 0 to 8192 [ 53.158649][ T4610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.412'. [ 53.159436][ T4609] netlink: 'syz.5.411': attribute type 1 has an invalid length. [ 53.237701][ T4610] netlink: 5448 bytes leftover after parsing attributes in process `syz.1.412'. [ 53.268044][ T4618] bond_slave_1: mtu less than device minimum [ 53.414718][ T4632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'. [ 53.482213][ T4638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.425'. [ 53.484994][ T4635] loop1: detected capacity change from 0 to 4096 [ 53.542731][ T4635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.692006][ T4657] netlink: 'syz.5.432': attribute type 13 has an invalid length. [ 53.702305][ T4654] loop0: detected capacity change from 0 to 512 [ 53.811343][ T4657] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.818706][ T4657] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.905809][ T4657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.927157][ T4657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.006483][ T4657] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.015682][ T4657] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.024691][ T4657] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.033605][ T4657] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.060128][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.075917][ T4667] syzkaller1: entered promiscuous mode [ 54.081554][ T4667] syzkaller1: entered allmulticast mode [ 54.407029][ T4699] netlink: 'syz.5.447': attribute type 1 has an invalid length. [ 54.509608][ T4709] loop0: detected capacity change from 0 to 1024 [ 54.555350][ T4709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.573672][ T4712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.587047][ T4709] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.450: Allocating blocks 385-513 which overlap fs metadata [ 54.591805][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 54.591826][ T29] audit: type=1400 audit(1753871320.790:620): avc: denied { bind } for pid=4705 comm="syz.4.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.645005][ T4708] EXT4-fs (loop0): pa ffff888106eb0070: logic 16, phys. 129, len 24 [ 54.653180][ T4708] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 54.726400][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.018830][ T29] audit: type=1326 audit(1753871321.220:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.4.467" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e23cae9a9 code=0x0 [ 55.064267][ T29] audit: type=1326 audit(1753871321.270:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 55.087841][ T29] audit: type=1326 audit(1753871321.270:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 55.111708][ T29] audit: type=1326 audit(1753871321.270:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 55.135108][ T29] audit: type=1326 audit(1753871321.270:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 55.158448][ T29] audit: type=1326 audit(1753871321.320:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 55.183400][ T29] audit: type=1326 audit(1753871321.320:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 55.206808][ T29] audit: type=1326 audit(1753871321.320:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 55.230123][ T29] audit: type=1326 audit(1753871321.320:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 55.560933][ T4790] netlink: 'syz.1.484': attribute type 3 has an invalid length. [ 55.569023][ T4790] netlink: 'syz.1.484': attribute type 3 has an invalid length. [ 55.611276][ T4792] loop1: detected capacity change from 0 to 512 [ 55.622167][ T4792] vfat: Bad value for 'allow_utime' [ 55.766885][ T4804] __nla_validate_parse: 3 callbacks suppressed [ 55.766904][ T4804] netlink: 256 bytes leftover after parsing attributes in process `syz.0.490'. [ 56.060063][ T4801] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 56.060063][ T4801] program syz.1.498 not setting count and/or reply_len properly [ 56.098844][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 56.125899][ T4828] netlink: 'syz.5.497': attribute type 12 has an invalid length. [ 56.140562][ T4826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'. [ 56.177939][ T4830] loop4: detected capacity change from 0 to 512 [ 56.212214][ T4830] vfat: Bad value for 'allow_utime' [ 56.580482][ T4853] loop5: detected capacity change from 0 to 1024 [ 56.620215][ T4853] EXT4-fs: Ignoring removed orlov option [ 56.675724][ T4853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.809394][ T4030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.283501][ T4914] loop4: detected capacity change from 0 to 128 [ 57.312675][ T4914] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 57.320575][ T4914] FAT-fs (loop4): Filesystem has been set read-only [ 57.346264][ T4914] syz.4.532: attempt to access beyond end of device [ 57.346264][ T4914] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 57.362844][ T4914] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 57.370768][ T4914] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 57.380968][ T4914] syz.4.532: attempt to access beyond end of device [ 57.380968][ T4914] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.395864][ T4914] syz.4.532: attempt to access beyond end of device [ 57.395864][ T4914] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.409972][ T4914] syz.4.532: attempt to access beyond end of device [ 57.409972][ T4914] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.425266][ T4914] syz.4.532: attempt to access beyond end of device [ 57.425266][ T4914] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.455885][ T4914] syz.4.532: attempt to access beyond end of device [ 57.455885][ T4914] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.470980][ T4914] syz.4.532: attempt to access beyond end of device [ 57.470980][ T4914] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.485388][ T4914] syz.4.532: attempt to access beyond end of device [ 57.485388][ T4914] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.499222][ T4914] syz.4.532: attempt to access beyond end of device [ 57.499222][ T4914] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.513211][ T4914] syz.4.532: attempt to access beyond end of device [ 57.513211][ T4914] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.546374][ T4919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.534'. [ 58.030263][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.068368][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.177851][ T4946] loop2: detected capacity change from 0 to 1024 [ 58.203597][ T4946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.317387][ T4946] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.545: Allocating blocks 497-513 which overlap fs metadata [ 58.431226][ T4945] EXT4-fs (loop2): pa ffff888106eb00e0: logic 64, phys. 193, len 20 [ 58.439384][ T4945] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 58.493611][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.499595][ T4954] syzkaller0: entered promiscuous mode [ 58.508177][ T4954] syzkaller0: entered allmulticast mode [ 58.747920][ T4977] loop2: detected capacity change from 0 to 512 [ 58.767103][ T4977] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.557: attempt to clear invalid blocks 1 len 1 [ 58.781200][ T4977] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.557: bg 0: block 343: padding at end of block bitmap is not set [ 58.862074][ T4977] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 58.915628][ T4977] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.557: invalid indirect mapped block 1819239214 (level 0) [ 58.932101][ T4977] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.557: invalid indirect mapped block 1819239214 (level 1) [ 58.961958][ T4977] EXT4-fs (loop2): 1 truncate cleaned up [ 58.968137][ T4977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.988426][ T4992] can0: slcan on ttyS3. [ 59.056149][ T4992] can0 (unregistered): slcan off ttyS3. [ 59.066198][ T4996] syzkaller0: entered promiscuous mode [ 59.072368][ T4996] syzkaller0: entered allmulticast mode [ 59.077980][ T5000] loop0: detected capacity change from 0 to 764 [ 59.078318][ T5001] capability: warning: `syz.4.564' uses 32-bit capabilities (legacy support in use) [ 59.095629][ T5000] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 59.136052][ T4992] can0: slcan on ttyS3. [ 59.208721][ T4991] can0 (unregistered): slcan off ttyS3. [ 59.239156][ T5015] loop5: detected capacity change from 0 to 512 [ 59.254805][ T5015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.347510][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.377578][ T4030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.382143][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.551016][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.609411][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 59.609428][ T29] audit: type=1326 audit(1753871325.810:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 59.649348][ T5067] mmap: syz.1.586 (5067) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.669829][ T29] audit: type=1400 audit(1753871325.820:683): avc: denied { read } for pid=5055 comm="syz.5.583" lport=46869 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.691577][ T29] audit: type=1326 audit(1753871325.850:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 59.715085][ T29] audit: type=1326 audit(1753871325.850:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 59.738369][ T29] audit: type=1326 audit(1753871325.850:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 59.761832][ T29] audit: type=1326 audit(1753871325.850:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 59.785129][ T29] audit: type=1326 audit(1753871325.850:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 59.808296][ T29] audit: type=1326 audit(1753871325.850:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 59.831949][ T29] audit: type=1326 audit(1753871325.850:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 59.855379][ T29] audit: type=1326 audit(1753871325.870:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14f9de9a9 code=0x7ffc0000 [ 59.914097][ T5086] loop1: detected capacity change from 0 to 512 [ 59.993927][ T5086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.065673][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.212031][ T5113] loop4: detected capacity change from 0 to 512 [ 60.230202][ T5113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.484595][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.560216][ T5141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.606'. [ 60.584075][ T5144] netlink: 'syz.5.607': attribute type 27 has an invalid length. [ 60.680732][ T5156] can0: slcan on ttyS3. [ 60.722162][ T5156] can0 (unregistered): slcan off ttyS3. [ 61.020693][ T5202] loop1: detected capacity change from 0 to 1764 [ 61.231293][ T5228] netlink: 'syz.1.625': attribute type 5 has an invalid length. [ 61.322357][ T5243] loop1: detected capacity change from 0 to 128 [ 61.829320][ T5331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.636'. [ 62.014731][ T5344] loop2: detected capacity change from 0 to 512 [ 62.049855][ T5344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.106210][ T5344] ext4 filesystem being mounted at /100/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.162925][ T5344] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #4: comm syz.2.642: corrupted inode contents [ 62.222519][ T5344] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #4: comm syz.2.642: mark_inode_dirty error [ 62.274661][ T5344] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #4: comm syz.2.642: corrupted inode contents [ 62.345137][ T5344] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.642: mark_inode_dirty error [ 62.392193][ T5344] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.642: Failed to acquire dquot type 1 [ 62.430240][ T5352] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #4: comm syz.2.642: corrupted inode contents [ 62.457556][ T5352] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #4: comm syz.2.642: mark_inode_dirty error [ 62.469298][ T5352] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #4: comm syz.2.642: corrupted inode contents [ 62.505799][ T5352] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.642: mark_inode_dirty error [ 62.521247][ T5352] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.642: Failed to acquire dquot type 1 [ 62.568104][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.578310][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 62.587208][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 62.644607][ T5382] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 62.672705][ T5382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.700082][ T5382] vlan2: entered allmulticast mode [ 62.705389][ T5382] bond1: entered allmulticast mode [ 62.711266][ T5390] loop4: detected capacity change from 0 to 2048 [ 62.737200][ T5392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.660'. [ 62.827265][ T5390] loop4: unable to read partition table [ 62.850948][ T5390] loop4: partition table beyond EOD, truncated [ 62.857386][ T5390] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 62.921069][ T2990] loop4: unable to read partition table [ 62.926845][ T2990] loop4: partition table beyond EOD, truncated [ 62.968885][ T5390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.082946][ T5426] loop1: detected capacity change from 0 to 512 [ 63.108982][ T5430] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 63.115575][ T5430] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.123299][ T5430] vhci_hcd vhci_hcd.0: Device attached [ 63.143978][ T5431] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 63.164295][ T5426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.179660][ T5426] ext4 filesystem being mounted at /167/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.182081][ T5315] vhci_hcd: stop threads [ 63.194630][ T5315] vhci_hcd: release socket [ 63.199087][ T5315] vhci_hcd: disconnect device [ 63.209202][ T5426] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #4: comm syz.1.675: corrupted inode contents [ 63.213321][ T5441] loop5: detected capacity change from 0 to 128 [ 63.230328][ T5441] EXT4-fs: Ignoring removed nobh option [ 63.231151][ T5426] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #4: comm syz.1.675: mark_inode_dirty error [ 63.248777][ T5426] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #4: comm syz.1.675: corrupted inode contents [ 63.257070][ T5441] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.261280][ T5426] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.675: mark_inode_dirty error [ 63.278043][ T5441] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.284790][ T5426] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.675: Failed to acquire dquot type 1 [ 63.306464][ T5445] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #4: comm syz.1.675: corrupted inode contents [ 63.320261][ T5445] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #4: comm syz.1.675: mark_inode_dirty error [ 63.332082][ T5445] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #4: comm syz.1.675: corrupted inode contents [ 63.344314][ T5445] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.675: mark_inode_dirty error [ 63.356776][ T5445] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.675: Failed to acquire dquot type 1 [ 63.380708][ T4030] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.391528][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.420512][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 63.431849][ T5448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'. [ 63.613363][ T5462] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 63.751295][ T5474] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 63.757883][ T5474] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.765585][ T5474] vhci_hcd vhci_hcd.0: Device attached [ 63.767264][ T5475] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 63.781944][ T5474] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 63.788583][ T5474] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.796421][ T5474] vhci_hcd vhci_hcd.0: Device attached [ 63.809377][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 63.819032][ T5481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.693'. [ 63.839081][ T5474] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 63.845892][ T5474] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.853640][ T5474] vhci_hcd vhci_hcd.0: Device attached [ 63.869851][ T5474] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 63.888194][ T5474] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11) [ 63.894867][ T5474] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.902405][ T5474] vhci_hcd vhci_hcd.0: Device attached [ 63.922601][ T5474] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(13) [ 63.929435][ T5474] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.937185][ T5474] vhci_hcd vhci_hcd.0: Device attached [ 63.951904][ T5474] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 63.979045][ T5474] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(17) [ 63.985712][ T5474] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.993396][ T5474] vhci_hcd vhci_hcd.0: Device attached [ 64.011860][ T1035] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 64.023051][ T5482] vhci_hcd: connection closed [ 64.023217][ T5476] vhci_hcd: connection reset by peer [ 64.023218][ T5488] vhci_hcd: connection closed [ 64.023398][ T5486] vhci_hcd: connection closed [ 64.028136][ T5493] vhci_hcd: connection closed [ 64.033686][ T5292] vhci_hcd: stop threads [ 64.052292][ T5292] vhci_hcd: release socket [ 64.055363][ T5478] vhci_hcd: connection closed [ 64.056800][ T5292] vhci_hcd: disconnect device [ 64.074933][ T5292] vhci_hcd: stop threads [ 64.079261][ T5292] vhci_hcd: release socket [ 64.083900][ T5292] vhci_hcd: disconnect device [ 64.113671][ T5292] vhci_hcd: stop threads [ 64.118010][ T5292] vhci_hcd: release socket [ 64.122512][ T5292] vhci_hcd: disconnect device [ 64.144682][ T5292] vhci_hcd: stop threads [ 64.149074][ T5292] vhci_hcd: release socket [ 64.153707][ T5292] vhci_hcd: disconnect device [ 64.171584][ T5292] vhci_hcd: stop threads [ 64.176100][ T5292] vhci_hcd: release socket [ 64.180561][ T5292] vhci_hcd: disconnect device [ 64.191861][ T5292] vhci_hcd: stop threads [ 64.196186][ T5292] vhci_hcd: release socket [ 64.200665][ T5292] vhci_hcd: disconnect device [ 64.220105][ T5511] loop0: detected capacity change from 0 to 1024 [ 64.236375][ T5511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.307636][ T5511] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.705: Allocating blocks 449-513 which overlap fs metadata [ 64.333574][ T5510] EXT4-fs (loop0): pa ffff88810054b770: logic 48, phys. 177, len 21 [ 64.341857][ T5510] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 64.394687][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.513870][ T5535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'. [ 64.927635][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 64.927650][ T29] audit: type=1400 audit(1753871331.130:1000): avc: denied { read } for pid=5582 comm="syz.2.736" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.927817][ T5583] program syz.2.736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.038214][ T29] audit: type=1400 audit(1753871331.240:1001): avc: denied { append } for pid=5590 comm="syz.4.741" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.142810][ T29] audit: type=1326 audit(1753871331.350:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7982e9a9 code=0x7ffc0000 [ 65.166305][ T29] audit: type=1326 audit(1753871331.350:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7982e9a9 code=0x7ffc0000 [ 65.189968][ T29] audit: type=1326 audit(1753871331.360:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e7982e9a9 code=0x7ffc0000 [ 65.213961][ T29] audit: type=1326 audit(1753871331.360:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7982e9a9 code=0x7ffc0000 [ 65.237701][ T29] audit: type=1326 audit(1753871331.360:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e7982e9a9 code=0x7ffc0000 [ 65.261367][ T29] audit: type=1326 audit(1753871331.360:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7982e9a9 code=0x7ffc0000 [ 65.284809][ T29] audit: type=1326 audit(1753871331.370:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7982e9a9 code=0x7ffc0000 [ 65.308816][ T29] audit: type=1326 audit(1753871331.370:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.2.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e7982e9a9 code=0x7ffc0000 [ 65.369987][ T5609] smc: net device bond0 applied user defined pnetid SYZ0 [ 65.379123][ T5609] smc: net device bond0 erased user defined pnetid SYZ0 [ 65.653127][ T5632] loop1: detected capacity change from 0 to 1024 [ 65.657493][ T5631] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.688158][ T5632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.700826][ T5632] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.722112][ T5632] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: comm syz.1.759: lblock 0 mapped to illegal pblock 0 (length 5) [ 65.755944][ T5632] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 65.768326][ T5632] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.768326][ T5632] [ 65.803650][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.063288][ T5671] team0 (unregistering): Port device team_slave_0 removed [ 66.081458][ T5671] team0 (unregistering): Port device team_slave_1 removed [ 66.184291][ T5684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.784'. [ 66.235885][ T5690] loop0: detected capacity change from 0 to 128 [ 66.413632][ T5718] netlink: 'syz.5.800': attribute type 1 has an invalid length. [ 66.452356][ T5726] sctp: [Deprecated]: syz.0.798 (pid 5726) Use of int in max_burst socket option deprecated. [ 66.452356][ T5726] Use struct sctp_assoc_value instead [ 66.536359][ T5738] xt_hashlimit: max too large, truncated to 1048576 [ 66.829593][ T5759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5759 comm=syz.2.815 [ 67.281600][ T5781] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5781 comm=syz.4.824 [ 67.281628][ T5781] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5781 comm=syz.4.824 [ 67.403073][ T5795] ref_ctr increment failed for inode: 0x2f2 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888103931140 [ 67.403421][ T5794] uprobe: syz.2.832:5794 failed to unregister, leaking uprobe [ 67.807516][ T5823] loop1: detected capacity change from 0 to 512 [ 67.819769][ T5823] journal_path: Lookup failure for './file0/../file0' [ 67.826893][ T5823] EXT4-fs: error: could not find journal device path [ 67.837358][ T5821] tipc: Started in network mode [ 67.842380][ T5821] tipc: Node identity 32f0022fad09, cluster identity 4711 [ 67.849553][ T5821] tipc: Enabled bearer , priority 0 [ 67.864129][ T5823] bond2: entered promiscuous mode [ 67.869309][ T5823] bond2: entered allmulticast mode [ 67.874861][ T5823] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.895155][ T5823] bond2 (unregistering): Released all slaves [ 67.908845][ T5821] tipc: Disabling bearer [ 67.992219][ T5834] __nla_validate_parse: 3 callbacks suppressed [ 67.992239][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.850'. [ 68.082220][ T5832] loop2: detected capacity change from 0 to 8192 [ 68.098547][ T5832] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.349691][ T5855] syzkaller0: entered promiscuous mode [ 68.355519][ T5855] syzkaller0: entered allmulticast mode [ 68.475319][ T5838] Set syz1 is full, maxelem 65536 reached [ 68.789796][ T5875] loop2: detected capacity change from 0 to 8192 [ 68.868333][ T5887] all: renamed from lo [ 68.900206][ T5889] loop0: detected capacity change from 0 to 2048 [ 68.924220][ T5889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.027362][ T1035] usb 11-1: enqueue for inactive port 0 [ 69.035411][ T1035] usb 11-1: enqueue for inactive port 0 [ 69.049125][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.094002][ T5907] loop2: detected capacity change from 0 to 512 [ 69.131868][ T1035] vhci_hcd: vhci_device speed not set [ 69.149158][ T5907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.165127][ T5907] ext4 filesystem being mounted at /159/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.258182][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.612237][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.899'. [ 69.768533][ T5969] futex_wake_op: syz.2.904 tries to shift op by -1; fix this program [ 70.013547][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 70.013566][ T29] audit: type=1400 audit(1753871336.220:1145): avc: denied { listen } for pid=5992 comm="syz.1.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.039830][ T29] audit: type=1400 audit(1753871336.220:1146): avc: denied { accept } for pid=5992 comm="syz.1.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.230907][ T29] audit: type=1400 audit(1753871336.430:1147): avc: denied { cpu } for pid=6000 comm="syz.2.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 70.267643][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.918'. [ 70.285273][ T6003] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 70.311621][ T6005] netlink: 'syz.0.919': attribute type 10 has an invalid length. [ 70.319484][ T6005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.919'. [ 70.330405][ T6005] dummy0: entered promiscuous mode [ 70.336687][ T6005] bridge0: port 3(dummy0) entered blocking state [ 70.343348][ T6005] bridge0: port 3(dummy0) entered disabled state [ 70.351915][ T6005] dummy0: entered allmulticast mode [ 70.438854][ T29] audit: type=1326 audit(1753871336.640:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c45e9a9 code=0x7ffc0000 [ 70.462431][ T29] audit: type=1326 audit(1753871336.640:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c45e9a9 code=0x7ffc0000 [ 70.485797][ T29] audit: type=1326 audit(1753871336.640:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb73c45e9a9 code=0x7ffc0000 [ 70.509138][ T29] audit: type=1326 audit(1753871336.640:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c45e9a9 code=0x7ffc0000 [ 70.532498][ T29] audit: type=1326 audit(1753871336.640:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb73c45e9a9 code=0x7ffc0000 [ 70.555932][ T29] audit: type=1326 audit(1753871336.640:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c45e9a9 code=0x7ffc0000 [ 70.590862][ T29] audit: type=1326 audit(1753871336.640:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.0.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb73c45e9a9 code=0x7ffc0000 [ 70.706961][ T6033] netlink: 'syz.4.931': attribute type 2 has an invalid length. [ 70.706982][ T6033] netlink: 'syz.4.931': attribute type 1 has an invalid length. [ 70.706997][ T6033] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.931'. [ 70.719787][ T6035] loop0: detected capacity change from 0 to 512 [ 70.731010][ T6035] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.733273][ T6035] EXT4-fs (loop0): 1 truncate cleaned up [ 70.733589][ T6035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.735602][ T6038] netlink: 268 bytes leftover after parsing attributes in process `syz.4.935'. [ 70.735682][ T6038] unsupported nla_type 65024 [ 70.977708][ T6051] loop4: detected capacity change from 0 to 512 [ 70.978372][ T6051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.988198][ T6051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.988340][ T6051] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.026317][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.028485][ T6055] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 71.050456][ T6057] loop4: detected capacity change from 0 to 2048 [ 71.189994][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.375466][ T6080] loop1: detected capacity change from 0 to 1024 [ 71.375812][ T6080] EXT4-fs: Ignoring removed orlov option [ 71.387981][ T6080] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.412798][ T6080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.499602][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.585316][ T6094] bridge: RTM_NEWNEIGH with invalid ether address [ 71.637820][ T6099] program syz.2.959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.658279][ T6099] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 71.702838][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'. [ 71.785598][ T6112] loop0: detected capacity change from 0 to 128 [ 71.890774][ T6122] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 71.910552][ T6122] Cannot find set identified by id 0 to match [ 71.990555][ T6128] program syz.0.972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.010228][ T6128] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 72.078850][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.5.975'. [ 72.154900][ T6141] sctp: [Deprecated]: syz.0.977 (pid 6141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.154900][ T6141] Use struct sctp_sack_info instead [ 72.391949][ T6138] ================================================================== [ 72.400101][ T6138] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 72.407182][ T6138] [ 72.409539][ T6138] read-write to 0xffff88812092136c of 4 bytes by task 6132 on cpu 0: [ 72.417644][ T6138] fifo_open+0x17f/0x5d0 [ 72.421938][ T6138] do_dentry_open+0x646/0xa20 [ 72.427294][ T6138] vfs_open+0x37/0x1e0 [ 72.431427][ T6138] path_openat+0x1c5e/0x2170 [ 72.436077][ T6138] do_filp_open+0x109/0x230 [ 72.440653][ T6138] do_sys_openat2+0xa6/0x110 [ 72.445305][ T6138] __x64_sys_openat+0xf2/0x120 [ 72.450140][ T6138] x64_sys_call+0x2e9c/0x2ff0 [ 72.454851][ T6138] do_syscall_64+0xd2/0x200 [ 72.459417][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.465367][ T6138] [ 72.467732][ T6138] read to 0xffff88812092136c of 4 bytes by task 6138 on cpu 1: [ 72.475406][ T6138] wait_for_partner+0xf7/0x1c0 [ 72.480226][ T6138] fifo_open+0x462/0x5d0 [ 72.484536][ T6138] do_dentry_open+0x646/0xa20 [ 72.489271][ T6138] vfs_open+0x37/0x1e0 [ 72.493393][ T6138] path_openat+0x1c5e/0x2170 [ 72.498036][ T6138] do_filp_open+0x109/0x230 [ 72.502597][ T6138] do_sys_openat2+0xa6/0x110 [ 72.507236][ T6138] __x64_sys_open+0xe6/0x110 [ 72.511867][ T6138] x64_sys_call+0x1457/0x2ff0 [ 72.516594][ T6138] do_syscall_64+0xd2/0x200 [ 72.521155][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.527192][ T6138] [ 72.529533][ T6138] value changed: 0x00000002 -> 0x00000001 [ 72.535368][ T6138] [ 72.537724][ T6138] Reported by Kernel Concurrency Sanitizer on: [ 72.543925][ T6138] CPU: 1 UID: 0 PID: 6138 Comm: syz.1.974 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(voluntary) [ 72.555951][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.566049][ T6138] ================================================================== [ 72.587565][ T6158] loop5: detected capacity change from 0 to 512 [ 72.608735][ T6158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.658817][ T6158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.751832][ T6158] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.806657][ T4030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.