last executing test programs: 2.761266093s ago: executing program 2 (id=779): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 2.25732047s ago: executing program 4 (id=784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f30000000"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, &(0x7f0000000640)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl1\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000940)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e98263b, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000003, 0x3, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x108, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xfffffffd, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x400, 0x0, 0x0, 0x20]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000020}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 2.186889611s ago: executing program 3 (id=787): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create(0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000001000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="05", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r2], 0x1000f) 2.023559863s ago: executing program 4 (id=789): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x508) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) symlinkat(&(0x7f0000000200)='./file0\x00', r6, &(0x7f0000000240)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a320000000008004100727865001400330076657468305f746f5f626f6e64"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) 1.564617169s ago: executing program 2 (id=790): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x48}}, 0x0) 1.45954539s ago: executing program 3 (id=791): r0 = epoll_create1(0x0) r1 = eventfd2(0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x1, 0x100}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x4, 0x0, {0x80, 0x20, 0x0, 0x9, 0x0, 0x4, 0x0, 0x5}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_SRC={0x8, 0x2, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80)={0x60000012}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x80000001}, 0x18) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 1.261183773s ago: executing program 3 (id=794): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open(0x0, 0x10000, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f00000002c0)={0x2a, 0x6, 0xfffffffe}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) shmget$private(0x0, 0x11000, 0x0, &(0x7f0000fec000/0x11000)=nil) shmdt(0x0) 1.215112664s ago: executing program 1 (id=805): r0 = epoll_create1(0x0) r1 = eventfd2(0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x1, 0x100}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x4, 0x0, {0x80, 0x20, 0x0, 0x9, 0x0, 0x4, 0x0, 0x5}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_SRC={0x8, 0x2, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80)={0x60000012}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x80000001}, 0x18) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 1.157683035s ago: executing program 3 (id=797): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6}, 0x7c) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 1.138423915s ago: executing program 0 (id=798): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 1.086689836s ago: executing program 4 (id=799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000280)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@minixdf}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x459, &(0x7f0000000900)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000180)={0x38, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x10001) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.086092405s ago: executing program 0 (id=800): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) symlinkat(0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, "ff00f7000000000000000000af88008300"}) r5 = syz_open_pts(r4, 0x141601) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r4, 0xffffffffffffffff, 0x0) 915.411458ms ago: executing program 0 (id=801): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000290000003700"], 0x18}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000202070250000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x4, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xfffffcf7, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f0000001080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x20040080) 914.801838ms ago: executing program 1 (id=802): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2c020400) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x4, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xa, 0xc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgget$private(0x0, 0x0) 856.193059ms ago: executing program 4 (id=803): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/476], 0x0, 0x307, &(0x7f0000000200)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0xa, 0x2, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x7, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800000, 0x80, 0xffffffbc, 0x7, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x856, 0x8, 0x9, 0x4, 0x558}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 855.733008ms ago: executing program 0 (id=804): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 820.348889ms ago: executing program 1 (id=806): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x4}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x26ca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) finit_module(r2, 0x0, 0x3) r5 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) io_cancel(0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 814.781189ms ago: executing program 4 (id=807): mknod(&(0x7f0000000440)='./file0\x00', 0x8001420, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) request_key(0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280), 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001300)={{0x12, 0x1, 0x110, 0x98, 0x4, 0x6e, 0x8, 0x12d1, 0x1438, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9a, 0x0, 0x90, 0x9, [{{0x9, 0x4, 0x42, 0x2, 0x0, 0x35, 0x9e, 0x4c, 0x20}}]}}]}}, 0x0) pwrite64(r3, 0x0, 0x0, 0x8000c61) 768.103869ms ago: executing program 0 (id=808): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000340)={r0, 0x0, 0x20000000}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r3}, 0x10) 767.51462ms ago: executing program 3 (id=809): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000000000bf090000000000005509010000000000852000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x103843, 0x0) 767.133209ms ago: executing program 0 (id=810): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x2000000, @loopback, 0x9}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xfffffffc}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x1000]}, 0x0, 0x0, 0x8) 760.94768ms ago: executing program 3 (id=811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) msync(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) socket$inet(0x2, 0x3, 0x6) 748.24703ms ago: executing program 1 (id=812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 720.5621ms ago: executing program 1 (id=813): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$eJzs3V2P21gZB/D/STJJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnRmNWqmQFskmpt2bniRli/A3d5wwYdYiQuu9lvAFUgrEBJiBUJGPrbzMnEykzadbtn/b7Qbx358zuNjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU8qi0FdyMJm7Oq3MlrBcQ4T8oFvFWNPutr4xCLof/WsfV6NtVFMOPIgYXLl+6++VcJll/TsIvAosW+Pjp4MG9fn//0Rlis1i4+NcJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJTPvfL1qGDX5nUK0owGUPWvbbrftbkvHhIvDmDvygx9EAcrsSHlw2N/fGsvnWVobh0GVlOQz48FhUPW0za0a1WqlUq1Warfrt+8YRm5qhhESxhCmIpZ+0NIbZrkncKKXkLEa/zH+JIA2iuhiB7uQqT8WGnDhoDNjeSzp/9+5pebWO97/J738ymjxFej+/1r07dqs/n9GLhJSr5C2RMyYv9jPis5I4jGeYoAHuIc++tjHoyWULSHXXrqEvBG35FLymfnTgkIXNjw4sNGBiRa+CBnPkaijhhoMvIdtNOFBogkbbSh42IMHHyo8ovJhpgomfDhwIbEBCzchUUEddWxBQqGMPTjYQRctNGDiX0EQHOBQt/tWnM/zlK1GElSZsREF5JLjbh/VOVs7q///4bNo7bj/N9j/f15Fx0Eh+vh4XgzRZ0AQX/8vaO3VZENEREREREREr4LQv30X+q/ybwMI0LTbypiIKby27IiIiIiIiIhoGQSCAq5CRHfl422I6et/IiIiIiIiInqzCf2MnQBQ0jf1i9HjUmf5JUD2HFIkIiIiIiIiopekn/y/lgcCfZf/GsRC1/9ERERERERE9Ab41dgY+7lsPMZukPxZPwNg7c8F8dHfCnBXxHFv96viyAyXmEdxzNQdAH7zirgYD9SrP/IA9DdLXRVxbRL4Z/Lbh9AnB+lj/T8PIkII90QC+ex4ATMSEGHNtVz8DR/gerTK9Xic+fuDDPSSaEThUtNuq7LltO9WYJoXM77a9X/28PDngDvczoPD/n75Rz/u39e5HIezjo/CQp9NpJNJb4xRLk/0eAv6mYu00Y1X0Uyq/HW3UxK6XiPZ/izMo8x4RfN2QG0ViLbyF1iP9tl6EMWWBsMR9wWwpgd/qJT1LpvYendFjLKonNzytB0xY8uLOosbUcyNjRvRR9ImYTkZUfxaFqiWp/fBRBbV8SxObwvx9xPtPz8LiGLYFlthFn8ICzqRxfc/ilbe6u0mw2OcJYupo4CI6HU5GPVCehDzqTH2k+4hOamdvd9BDojPcjN691EtQdx/JL37k98GUQ+VBXLx3ybSa0n6FYRn9A2hy8lHA7rnrqSc0Y3yp0EQmBeLGD+j/zcIkg0yFujdjoMgOHlG//3oHUhx2lNZ/DsIgrsV3ZP85kSv+mG4wocz6/Xa1SyKKODJ0U/0APih9/ff339YrW7VjHcN43YVK/p/FeKPLNj3EBHRlNPfsaMjMnMixLu4HpVx/f5f34mmJnq8L8W3FGi3gD7uYzN5hcBaeqklHOCb/4huQ9iMrlqB9VL0WRrIy5fuhle1w9hDkdNveNmceVWn+9IoVt/eUB3GJu8dOnkFOIrdesV7gYiI6Hytz+iHgYn+H5P9f3Gi/9/ERhSxcSX1urs0dkvhZnJ1PLykH1w4To2tnJ78t5bcGERERJ8Tyv1ElPxfCte1e+9V6vWK6W8r6TrWd6VrN1pK2l1fuda22W0p2XMd37Gctuy5KNirypPeTq/nuL5sOq7sOZ69q9/8LuNXv3uqY3Z92/J6bWV6SlpO1zctXzZsz5K9nW+3bW9buXplr6csu2lbpm87Xek5O66lylJ6So0F2g3V9e2mHU52Zc+1O6a7J7/ntHc6SjaUZ7l2z3eiApO67G7TcTu62DKChV90SERE9P/o8dPBg3v9/v6jkxOr4aV5NOcYM2KmJ/IpBXKMICIios+YUXe9wErFV5gQERERERERERERERERERERERERERERERFNOf2RvgUnVtIeFgSGc356MZ6D5xg9YjhVjsDL5vOp+0c9sN+LrJ5ZtNLkkYjBg4/nBK8O5yTNPx5zvEiluAS8cPv85QvABT0H0ZzcEg+A6edHl36MpU184yBq0VkxemHqosJwX+SW/59DOPHwd9OLRNjyQRAE81cvTLZh/uzHcw7Ao/ycXbB6yvFz3mciIjpv/wsAAP//eO06pA==") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8}]}, {0xfffffffffffffe4b}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) futimesat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mknodat$loop(r0, &(0x7f00000002c0)='./file0\x00', 0x80c8, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x9100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 665.112191ms ago: executing program 1 (id=814): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c0000002000010300000000000000000200000000000000030000000c000c40000000000000ef0a08000100e00000020800", @ANYRES32, @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x40014) 556.145172ms ago: executing program 2 (id=815): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x3000c010) bind$rds(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xd2542, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x503, &(0x7f0000000500)="$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") r1 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x6, 0x0, 0x0, 0x16, 0x4, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) listen(r0, 0x0) 341.958835ms ago: executing program 2 (id=816): creat(&(0x7f0000000200)='./file0\x00', 0x58) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a0000000200"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 234.775657ms ago: executing program 2 (id=817): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x2, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x0) brk(0xffffffff00000001) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000480)="48edc5df81019587f11d1ac50bcc736ce16ab9806a986a70eaa0140a96299d036dc75e4ab1882c5c6481d19f9ac8b8197ac109a936ece0f5bfba3db4ae0b4aa6b4addc6288e058e0a4f66f1fd187a18d78e7903e009aba744776e13d21616cacb0863744eca4a7ff0fb9045c71e112e84de0d165da096a55faeb0ab7a49ecf45e595f3096c7b4b", 0x87, 0x5}, &(0x7f0000000540)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 104.146039ms ago: executing program 4 (id=818): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) unshare(0x22020400) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 2 (id=819): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000380)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, 0x4, 0xe, 0x0, 0x8, 0x10, 0x0}) kernel console output (not intermixed with test programs): 326 audit(1747375957.952:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f529e8dd41f code=0x7ffc0000 [ 43.304319][ T29] audit: type=1326 audit(1747375957.952:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f529e8de9f7 code=0x7ffc0000 [ 43.304538][ T29] audit: type=1326 audit(1747375957.952:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f529e8dd2d0 code=0x7ffc0000 [ 43.304695][ T29] audit: type=1326 audit(1747375957.952:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f529e8dd5ca code=0x7ffc0000 [ 43.306274][ T29] audit: type=1326 audit(1747375957.952:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529e8de969 code=0x7ffc0000 [ 43.427395][ T3746] netlink: 'syz.3.77': attribute type 10 has an invalid length. [ 43.427460][ T3746] ipvlan0: entered allmulticast mode [ 43.427546][ T3746] veth0_vlan: entered allmulticast mode [ 43.454177][ T3746] team0: Device ipvlan0 failed to register rx_handler [ 43.615566][ T3749] loop2: detected capacity change from 0 to 1024 [ 43.647726][ T3749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.647822][ T3749] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.675344][ T3744] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.76: bg 0: block 393: padding at end of block bitmap is not set [ 43.677096][ T3744] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 43.677137][ T3744] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.677137][ T3744] [ 43.773115][ T3753] $Hÿ: renamed from bond0 [ 43.781745][ T3753] $Hÿ: entered promiscuous mode [ 43.781796][ T3753] bond_slave_0: entered promiscuous mode [ 43.781915][ T3753] bond_slave_1: entered promiscuous mode [ 43.802276][ T3744] syz.2.76 (3744) used greatest stack depth: 9888 bytes left [ 43.804112][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.856356][ T3757] loop4: detected capacity change from 0 to 512 [ 43.879627][ T3762] netlink: 'syz.2.80': attribute type 4 has an invalid length. [ 43.884507][ T3762] netlink: 'syz.2.80': attribute type 4 has an invalid length. [ 43.918720][ T3757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.936591][ T3757] EXT4-fs error (device loop4): ext4_quota_enable:7122: comm syz.4.78: Bad quota inum: 29696, type: 1 [ 43.938129][ T3757] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 43.938345][ T3757] EXT4-fs (loop4): mount failed [ 43.947918][ T3768] siw: device registration error -23 [ 44.103005][ T3783] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 44.114300][ T3786] xt_nat: multiple ranges no longer supported [ 44.214870][ T3799] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.253784][ T3797] syzkaller0: entered promiscuous mode [ 44.259335][ T3797] syzkaller0: entered allmulticast mode [ 44.337755][ T3807] tipc: Started in network mode [ 44.342922][ T3807] tipc: Node identity 66d9801dcc3e, cluster identity 4711 [ 44.350164][ T3807] tipc: Enabled bearer , priority 0 [ 44.383449][ T3809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.95'. [ 44.395129][ T3809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.404073][ T3809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.412886][ T3809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.421664][ T3809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.431899][ T3809] geneve0: entered promiscuous mode [ 44.437240][ T3809] geneve0: entered allmulticast mode [ 44.444218][ T3802] tipc: Resetting bearer [ 44.461554][ T3802] tipc: Disabling bearer [ 44.469453][ T3811] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.478535][ T3811] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.487495][ T3811] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.496642][ T3811] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.535645][ T3815] 9pnet: Could not find request transport: 0xffffffffffffffff [ 44.591701][ T3827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.600766][ T3827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.782488][ T3837] bridge0: entered allmulticast mode [ 44.789406][ T3837] bridge_slave_1: left allmulticast mode [ 44.795163][ T3837] bridge_slave_1: left promiscuous mode [ 44.800972][ T3837] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.809919][ T3837] bridge_slave_0: left allmulticast mode [ 44.815729][ T3837] bridge_slave_0: left promiscuous mode [ 44.821492][ T3837] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.941916][ T3858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.105'. [ 45.099540][ T3862] syz_tun: entered allmulticast mode [ 45.119767][ T3862] pimreg: entered allmulticast mode [ 45.128791][ T3861] syz_tun: left allmulticast mode [ 45.140480][ T3861] pimreg: left allmulticast mode [ 45.275135][ T3879] netlink: 'syz.2.117': attribute type 4 has an invalid length. [ 45.287065][ T3879] netlink: 'syz.2.117': attribute type 4 has an invalid length. [ 45.805280][ T3925] loop2: detected capacity change from 0 to 256 [ 45.806480][ T3925] vfat: Unknown parameter '' [ 45.823784][ T3925] netlink: 'syz.2.126': attribute type 5 has an invalid length. [ 46.068279][ T3929] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.136962][ T3929] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.178165][ T3929] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.210994][ T3935] netlink: 32 bytes leftover after parsing attributes in process `syz.2.130'. [ 46.226231][ T3937] loop3: detected capacity change from 0 to 512 [ 46.231640][ T3929] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.243408][ T3937] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.276446][ T3937] EXT4-fs (loop3): 1 orphan inode deleted [ 46.282784][ T3937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.295984][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 46.322891][ T3929] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.326712][ T3937] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.326835][ T3929] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.337920][ T3929] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.397148][ T3929] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.438742][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.448243][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 46.495848][ T3944] loop4: detected capacity change from 0 to 512 [ 46.505598][ T3944] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.530881][ T3944] EXT4-fs (loop4): 1 truncate cleaned up [ 46.539794][ T3944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.287579][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.328786][ T3960] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 47.335453][ T3960] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 47.342969][ T3960] vhci_hcd vhci_hcd.0: Device attached [ 47.398995][ T3957] syzkaller0: entered promiscuous mode [ 47.404807][ T3957] syzkaller0: entered allmulticast mode [ 47.419480][ T3969] loop1: detected capacity change from 0 to 2048 [ 47.432335][ T3961] vhci_hcd: connection closed [ 47.432642][ T37] vhci_hcd: stop threads [ 47.441775][ T37] vhci_hcd: release socket [ 47.446226][ T37] vhci_hcd: disconnect device [ 47.467078][ T3969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.560739][ T3984] SELinux: failed to load policy [ 47.651065][ T4000] netlink: 'syz.3.147': attribute type 10 has an invalid length. [ 47.674195][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.715973][ T4004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.149'. [ 47.725052][ T4004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.149'. [ 47.745198][ T4004] dummy0: entered promiscuous mode [ 47.754957][ T4004] team0: entered promiscuous mode [ 47.760039][ T4004] team_slave_0: entered promiscuous mode [ 47.765959][ T4004] team_slave_1: entered promiscuous mode [ 47.774155][ T4004] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 47.784207][ T4004] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 47.799785][ T4011] loop1: detected capacity change from 0 to 1024 [ 47.813986][ T4011] EXT4-fs: Ignoring removed nobh option [ 47.819646][ T4011] EXT4-fs: Ignoring removed nobh option [ 47.828451][ T4011] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 47.845219][ T4011] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: comm GPL: inode #4294967295: comm GPL: iget: illegal inode # [ 47.867055][ T4011] EXT4-fs (loop1): no journal found [ 47.872445][ T4011] EXT4-fs (loop1): can't get journal size [ 47.889124][ T4011] EXT4-fs (loop1): failed to initialize system zone (-22) [ 47.900656][ T4016] syzkaller0: entered promiscuous mode [ 47.907001][ T4011] EXT4-fs (loop1): mount failed [ 47.953388][ T4021] smc: net device bond0 applied user defined pnetid SYZ2 [ 47.962067][ T4021] smc: net device bond0 erased user defined pnetid SYZ2 [ 48.034269][ T4031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 48.162758][ T4045] loop4: detected capacity change from 0 to 1024 [ 48.215607][ T4045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.286942][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.319010][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 48.319103][ T29] audit: type=1326 audit(1747375962.972:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f419c54e969 code=0x7ffc0000 [ 48.525030][ T29] audit: type=1400 audit(1747375963.172:474): avc: denied { bind } for pid=4068 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.536480][ T4080] loop1: detected capacity change from 0 to 512 [ 48.558165][ T4080] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.567331][ T4080] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 48.586188][ T29] audit: type=1400 audit(1747375963.192:475): avc: denied { write } for pid=4068 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.603354][ T4079] syzkaller0: entered promiscuous mode [ 48.607736][ T4080] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 48.611130][ T4079] syzkaller0: entered allmulticast mode [ 48.627882][ T4080] System zones: 0-2, 18-18, 34-35 [ 48.635112][ T4080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.659098][ T29] audit: type=1400 audit(1747375963.302:476): avc: denied { remount } for pid=4077 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.683737][ T4080] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 48.694023][ T4080] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 48.703669][ T4080] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 48.712540][ T4083] loop4: detected capacity change from 0 to 2048 [ 48.719009][ T29] audit: type=1400 audit(1747375963.362:477): avc: denied { append } for pid=4077 comm="syz.1.171" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.719843][ T4080] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.171: bg 0: block 353: padding at end of block bitmap is not set [ 48.802232][ T29] audit: type=1400 audit(1747375963.392:478): avc: denied { remount } for pid=4082 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.828641][ T4089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 48.838856][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.065347][ T29] audit: type=1326 audit(1747375963.712:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd595f1e969 code=0x7ffc0000 [ 49.098336][ T4101] loop2: detected capacity change from 0 to 1024 [ 49.123450][ T4101] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 49.132449][ T29] audit: type=1326 audit(1747375963.742:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd595f1e969 code=0x7ffc0000 [ 49.132565][ T29] audit: type=1326 audit(1747375963.742:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd595f1e969 code=0x7ffc0000 [ 49.179906][ T4101] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.179: Failed to acquire dquot type 0 [ 49.187111][ T4101] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.179: bg 0: block 312: padding at end of block bitmap is not set [ 49.187557][ T4101] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 49.188303][ T4101] EXT4-fs (loop2): 1 truncate cleaned up [ 49.188818][ T4101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.190951][ T4101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.353990][ T4111] netlink: 'syz.2.182': attribute type 13 has an invalid length. [ 49.358253][ T4111] gretap0: refused to change device tx_queue_len [ 49.358742][ T4111] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 49.369210][ T4112] loop1: detected capacity change from 0 to 512 [ 49.440954][ T4112] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 49.459563][ T4112] EXT4-fs (loop1): invalid journal inode [ 49.468955][ T4112] EXT4-fs (loop1): can't get journal size [ 49.477742][ T4114] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 49.482898][ T4112] EXT4-fs (loop1): 1 truncate cleaned up [ 49.492438][ T4112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.559772][ T4118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 49.706975][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.897668][ T3418] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.926582][ T3418] bond_slave_0: left promiscuous mode [ 49.946441][ T3418] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.969290][ T3418] bond_slave_1: left promiscuous mode [ 49.978553][ T3418] $Hÿ (unregistering): Released all slaves [ 50.025675][ T4120] chnl_net:caif_netlink_parms(): no params data found [ 50.077718][ T3418] dummy0: left promiscuous mode [ 50.084633][ T3418] team0: left promiscuous mode [ 50.089552][ T3418] team_slave_0: left promiscuous mode [ 50.095253][ T3418] team_slave_1: left promiscuous mode [ 50.108198][ T3418] hsr_slave_0: left promiscuous mode [ 50.145900][ T3418] hsr_slave_1: left promiscuous mode [ 50.161374][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.169873][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.268608][ T3418] team0 (unregistering): Port device team_slave_1 removed [ 50.279929][ T3418] team0 (unregistering): Port device team_slave_0 removed [ 50.317778][ T4167] batman_adv: batadv0: Adding interface: dummy0 [ 50.324184][ T4167] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.349786][ T4167] batman_adv: batadv0: Interface activated: dummy0 [ 50.358721][ T4176] batadv0: mtu less than device minimum [ 50.364833][ T4176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.375602][ T4176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.386397][ T4176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.397330][ T4176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.408646][ T4176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.419438][ T4176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.430170][ T4176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.440839][ T4176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.487115][ T4191] loop1: detected capacity change from 0 to 128 [ 50.507415][ T4120] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.514780][ T4120] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.534170][ T4120] bridge_slave_0: entered allmulticast mode [ 50.540936][ T4120] bridge_slave_0: entered promiscuous mode [ 50.547842][ T4120] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.555107][ T4120] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.568745][ T4120] bridge_slave_1: entered allmulticast mode [ 50.575886][ T4120] bridge_slave_1: entered promiscuous mode [ 50.614562][ T4120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.639140][ T4120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.745257][ T4120] team0: Port device team_slave_0 added [ 50.771120][ T4120] team0: Port device team_slave_1 added [ 50.800751][ T4224] SELinux: syz.1.205 (4224) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 50.908032][ T4232] loop2: detected capacity change from 0 to 512 [ 50.925901][ T4120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.933041][ T4120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.959277][ T4120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.977327][ T4232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.998289][ T4232] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.009526][ T4120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.016577][ T4120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.042654][ T4120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.163996][ T4240] loop1: detected capacity change from 0 to 2048 [ 51.174987][ T4120] hsr_slave_0: entered promiscuous mode [ 51.183637][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.220741][ T4120] hsr_slave_1: entered promiscuous mode [ 51.245747][ T4240] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 51.266959][ T3310] udevd[3310]: incorrect ext4 checksum on /dev/loop1 [ 51.310679][ T4257] Zero length message leads to an empty skb [ 51.408929][ T4261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.213'. [ 51.477647][ T4264] loop2: detected capacity change from 0 to 2048 [ 51.513997][ T4264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.729922][ T4120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.758017][ T4120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.786772][ T4120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.803627][ T4120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.891278][ T4120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.907778][ T4120] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.000321][ T2178] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.007573][ T2178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.016799][ T2178] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.024000][ T2178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.063790][ T4120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.074301][ T4120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.355630][ T4120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.381562][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.477452][ T4319] infiniband syz1: set active [ 52.482295][ T4319] infiniband syz1: added team0 [ 52.498526][ T4317] tipc: Started in network mode [ 52.503585][ T4317] tipc: Node identity be598ee154c5, cluster identity 4711 [ 52.510794][ T4317] tipc: Enabled bearer , priority 0 [ 52.535591][ T4316] tipc: Resetting bearer [ 52.544862][ T4319] RDS/IB: syz1: added [ 52.548908][ T4319] smc: adding ib device syz1 with port count 1 [ 52.556446][ T4319] smc: ib device syz1 port 1 has pnetid [ 52.583368][ T4316] tipc: Disabling bearer [ 52.622369][ T4120] veth0_vlan: entered promiscuous mode [ 52.654254][ T4120] veth1_vlan: entered promiscuous mode [ 52.709105][ T4120] veth0_macvtap: entered promiscuous mode [ 52.731389][ T4120] veth1_macvtap: entered promiscuous mode [ 52.754362][ T4120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.772246][ T4120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.783430][ T4120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.792249][ T4120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.801045][ T4120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.809793][ T4120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.906075][ T4368] SELinux: syz.4.221 (4368) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 52.977562][ T4372] netlink: 76 bytes leftover after parsing attributes in process `syz.4.223'. [ 53.167801][ T4385] Illegal XDP return value 1088161323 on prog (id 174) dev N/A, expect packet loss! [ 53.254133][ T4395] loop2: detected capacity change from 0 to 256 [ 53.376328][ T4385] loop4: detected capacity change from 0 to 128 [ 53.385948][ T4395] FAT-fs (loop2): codepage cp857 not found [ 53.441601][ T4404] loop1: detected capacity change from 0 to 512 [ 53.554069][ T4404] EXT4-fs: Ignoring removed orlov option [ 53.654859][ T4408] veth0_vlan: entered allmulticast mode [ 53.692022][ T4404] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 53.722354][ T4404] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 53.791712][ T4404] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.231: corrupted in-inode xattr: e_value size too large [ 53.817427][ T4404] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.231: couldn't read orphan inode 15 (err -117) [ 53.831926][ T4404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.925000][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.941925][ T4441] SELinux: syz.2.235 (4441) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 54.039809][ T4451] siw: device registration error -23 [ 54.072654][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 54.072668][ T29] audit: type=1400 audit(1747375968.722:566): avc: denied { mount } for pid=4452 comm="syz.3.240" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 54.107366][ T4453] devtmpfs: Too few inodes for current use [ 54.114934][ T29] audit: type=1400 audit(1747375968.752:567): avc: denied { remount } for pid=4452 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 54.134673][ T29] audit: type=1326 audit(1747375968.762:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 54.158333][ T29] audit: type=1326 audit(1747375968.762:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 54.181785][ T29] audit: type=1326 audit(1747375968.762:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 54.205226][ T29] audit: type=1326 audit(1747375968.762:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 54.228500][ T29] audit: type=1326 audit(1747375968.762:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 54.252142][ T29] audit: type=1326 audit(1747375968.762:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 54.275638][ T29] audit: type=1326 audit(1747375968.762:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 54.299424][ T29] audit: type=1326 audit(1747375968.762:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 54.424086][ T4459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 54.942290][ T4469] bridge0: entered promiscuous mode [ 54.956706][ T4469] bridge0: port 3(macsec1) entered blocking state [ 54.963254][ T4469] bridge0: port 3(macsec1) entered disabled state [ 54.985523][ T4469] macsec1: entered allmulticast mode [ 54.990964][ T4469] bridge0: entered allmulticast mode [ 55.017115][ T4469] macsec1: left allmulticast mode [ 55.022353][ T4469] bridge0: left allmulticast mode [ 55.049382][ T4469] bridge0: left promiscuous mode [ 55.288846][ T4474] loop4: detected capacity change from 0 to 1024 [ 55.305978][ T4474] EXT4-fs: Ignoring removed nobh option [ 55.354349][ T4474] EXT4-fs: Ignoring removed nobh option [ 55.382873][ T4474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.408529][ T4474] 9pnet: p9_errstr2errno: server reported unknown error @ [ 55.555075][ T4481] loop0: detected capacity change from 0 to 4096 [ 55.614569][ T4481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.647813][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.660039][ T4481] netlink: 'syz.0.250': attribute type 27 has an invalid length. [ 55.764107][ T4481] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.771473][ T4481] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.899865][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.911139][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.113266][ T4481] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.122290][ T4481] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.130774][ T4481] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.139201][ T4481] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.167023][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.174252][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.185569][ T4494] bridge0: entered allmulticast mode [ 56.343491][ T4499] bridge_slave_1: left allmulticast mode [ 56.349243][ T4499] bridge_slave_1: left promiscuous mode [ 56.355028][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.362928][ T4499] bridge_slave_0: left allmulticast mode [ 56.368631][ T4499] bridge_slave_0: left promiscuous mode [ 56.374985][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.383482][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.446076][ T4505] wireguard0: entered promiscuous mode [ 56.451766][ T4505] wireguard0: entered allmulticast mode [ 56.507278][ T4512] loop4: detected capacity change from 0 to 2048 [ 56.546494][ T4512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.560082][ T4522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 56.564726][ T4512] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.569460][ T4522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 56.591585][ T4522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 56.665210][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 56.674242][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 56.779217][ T4523] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.014895][ T4545] loop1: detected capacity change from 0 to 512 [ 57.031674][ T4545] EXT4-fs (loop1): too many log groups per flexible block group [ 57.039458][ T4545] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 57.069598][ T4545] EXT4-fs (loop1): mount failed [ 57.115204][ T4545] loop1: detected capacity change from 0 to 1024 [ 57.141437][ T2178] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 57.180979][ T4545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.221085][ T2178] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1477 with error 117 [ 57.233862][ T2178] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.233862][ T2178] [ 57.251602][ T4545] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.307161][ T4545] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 57.315557][ T4545] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 57.323459][ T4529] syz.4.259 (4529) used greatest stack depth: 9784 bytes left [ 57.357044][ T4554] bridge0: entered allmulticast mode [ 57.364014][ T4554] bridge_slave_1: left allmulticast mode [ 57.369741][ T4554] bridge_slave_1: left promiscuous mode [ 57.375692][ T4554] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.385276][ T4554] bridge_slave_0: left allmulticast mode [ 57.391010][ T4554] bridge_slave_0: left promiscuous mode [ 57.396697][ T4554] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.492816][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.568070][ T4556] syzkaller0: entered promiscuous mode [ 57.771983][ T4512] syz.4.259 (4512) used greatest stack depth: 7032 bytes left [ 57.784330][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1493 with max blocks 1 with error 28 [ 57.797043][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.797043][ T12] [ 57.806760][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 57.812805][ T12] EXT4-fs (loop4): Free/Dirty block details [ 57.818714][ T12] EXT4-fs (loop4): free_blocks=0 [ 57.823726][ T12] EXT4-fs (loop4): dirty_blocks=16 [ 57.828867][ T12] EXT4-fs (loop4): Block reservation details [ 57.863002][ T4560] loop1: detected capacity change from 0 to 2048 [ 57.901367][ T4560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.943056][ T4560] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.276: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 58.002620][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.077459][ T4575] loop2: detected capacity change from 0 to 512 [ 58.231047][ T4575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.243843][ T4575] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.828991][ T4585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.285'. [ 58.838002][ T4585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.285'. [ 58.914280][ T4585] dummy0: entered promiscuous mode [ 58.938374][ T4585] team0: entered promiscuous mode [ 58.943506][ T4585] team_slave_0: entered promiscuous mode [ 58.949282][ T4585] team_slave_1: entered promiscuous mode [ 59.236475][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 59.236492][ T29] audit: type=1400 audit(1747375973.882:724): avc: denied { ioctl } for pid=4598 comm="syz.4.290" path="socket:[7714]" dev="sockfs" ino=7714 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.632846][ T29] audit: type=1400 audit(1747375974.282:725): avc: denied { create } for pid=4592 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.674203][ T4603] loop4: detected capacity change from 0 to 512 [ 59.681141][ T29] audit: type=1400 audit(1747375974.322:726): avc: denied { setopt } for pid=4592 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.700638][ T29] audit: type=1400 audit(1747375974.322:727): avc: denied { bind } for pid=4592 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.719914][ T29] audit: type=1400 audit(1747375974.322:728): avc: denied { name_bind } for pid=4592 comm="syz.3.288" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 59.728321][ T4603] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.741546][ T29] audit: type=1400 audit(1747375974.322:729): avc: denied { node_bind } for pid=4592 comm="syz.3.288" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 59.769781][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.822492][ T4603] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.291: bad orphan inode 13 [ 59.910318][ T4603] ext4_test_bit(bit=12, block=18) = 1 [ 59.915785][ T4603] is_bad_inode(inode)=0 [ 59.919956][ T4603] NEXT_ORPHAN(inode)=2130706432 [ 59.924900][ T4603] max_ino=32 [ 59.928201][ T4603] i_nlink=1 [ 59.955166][ T4603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.960310][ T29] audit: type=1400 audit(1747375974.432:730): avc: denied { name_bind } for pid=4605 comm="syz.1.293" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 59.989203][ T29] audit: type=1400 audit(1747375974.502:731): avc: denied { write } for pid=4607 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 60.008231][ T29] audit: type=1400 audit(1747375974.502:732): avc: denied { write } for pid=4607 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.027073][ T29] audit: type=1400 audit(1747375974.582:733): avc: denied { module_request } for pid=4610 comm="syz.1.296" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 60.074964][ T4614] loop2: detected capacity change from 0 to 512 [ 60.082386][ T4614] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.091627][ T4614] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 60.107449][ T4603] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 60.121699][ T4603] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.291: bg 0: block 248: padding at end of block bitmap is not set [ 60.136355][ T4603] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.291: Failed to acquire dquot type 1 [ 60.149282][ T4614] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 60.158649][ T4603] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.174009][ T4614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 60.182236][ T4614] System zones: 0-2, 18-18, 34-34 [ 60.193127][ T4614] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 60.238680][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.310622][ T4614] EXT4-fs (loop2): 1 truncate cleaned up [ 60.317485][ T4614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.368331][ T4631] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 60.401179][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.418073][ T4631] team0 (unregistering): left promiscuous mode [ 60.424367][ T4631] team_slave_0: left promiscuous mode [ 60.429818][ T4631] team_slave_1: left promiscuous mode [ 60.481456][ T4631] team0 (unregistering): Port device team_slave_0 removed [ 60.486074][ T4636] loop1: detected capacity change from 0 to 128 [ 60.499770][ T4634] loop0: detected capacity change from 0 to 512 [ 60.509448][ T4631] team0 (unregistering): Port device team_slave_1 removed [ 60.509949][ T4636] EXT4-fs: Ignoring removed nobh option [ 60.567968][ T4634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.601831][ T4636] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.621646][ T4636] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.631977][ T4634] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.708832][ T4643] syzkaller0: entered promiscuous mode [ 60.714468][ T4643] syzkaller0: entered allmulticast mode [ 60.805324][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.953776][ T4654] random: crng reseeded on system resumption [ 61.045735][ T4659] usb usb8: usbfs: process 4659 (syz.3.311) did not claim interface 0 before use [ 61.239875][ T4675] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 61.246487][ T4675] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 61.254127][ T4675] vhci_hcd vhci_hcd.0: Device attached [ 61.305155][ T4676] vhci_hcd: connection closed [ 61.311270][ T2178] vhci_hcd: stop threads [ 61.320307][ T2178] vhci_hcd: release socket [ 61.324750][ T2178] vhci_hcd: disconnect device [ 61.764916][ T4691] netlink: 'syz.2.318': attribute type 10 has an invalid length. [ 61.772758][ T4691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.318'. [ 62.160344][ T4691] team0: Port device geneve1 added [ 62.328146][ T4700] syzkaller0: entered promiscuous mode [ 62.333771][ T4700] syzkaller0: entered allmulticast mode [ 62.482738][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 62.542330][ T4707] hsr_slave_0: left promiscuous mode [ 62.606860][ T4707] hsr_slave_1: left promiscuous mode [ 63.068442][ T4720] netlink: 'syz.2.326': attribute type 2 has an invalid length. [ 63.080391][ T4720] netlink: 44 bytes leftover after parsing attributes in process `syz.2.326'. [ 63.136279][ T4724] batman_adv: batadv0: Adding interface: dummy0 [ 63.142622][ T4724] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.280361][ T4724] batman_adv: batadv0: Interface activated: dummy0 [ 63.289425][ T4733] net_ratelimit: 13 callbacks suppressed [ 63.289472][ T4733] batadv0: mtu less than device minimum [ 63.301665][ T4733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.312669][ T4733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.323486][ T4733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.334783][ T4733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.345789][ T4733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.354316][ T4734] loop1: detected capacity change from 0 to 512 [ 63.356460][ T4733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.373574][ T4733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.384367][ T4733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.395365][ T4733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.432790][ T4734] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.332: inode #15: comm syz.1.332: iget: illegal inode # [ 63.461466][ T4734] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.332: couldn't read orphan inode 15 (err -117) [ 63.485274][ T4734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.518832][ T4740] loop3: detected capacity change from 0 to 512 [ 63.532730][ T4740] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 63.542474][ T4734] EXT4-fs error (device loop1): ext4_lookup:1789: comm syz.1.332: inode #15: comm syz.1.332: iget: illegal inode # [ 63.555263][ T4740] EXT4-fs (loop3): invalid journal inode [ 63.574186][ T4740] EXT4-fs (loop3): can't get journal size [ 63.581137][ T4740] EXT4-fs (loop3): 1 truncate cleaned up [ 63.587264][ T4740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.599938][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.671855][ T4743] syzkaller0: entered promiscuous mode [ 63.677428][ T4743] syzkaller0: entered allmulticast mode [ 63.800209][ T4120] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.883910][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.102496][ T4759] syzkaller0: entered promiscuous mode [ 64.108160][ T4759] syzkaller0: entered allmulticast mode [ 64.404483][ T4769] loop3: detected capacity change from 0 to 1024 [ 64.653045][ T4769] EXT4-fs: Ignoring removed bh option [ 64.723212][ T4769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.741382][ T4768] netlink: 'syz.4.345': attribute type 10 has an invalid length. [ 64.783476][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 64.783526][ T29] audit: type=1400 audit(1747375979.432:914): avc: denied { create } for pid=4763 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.831386][ T29] audit: type=1400 audit(1747375979.462:915): avc: denied { connect } for pid=4763 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.860561][ T4775] batman_adv: batadv0: Adding interface: dummy0 [ 64.866918][ T4775] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.894908][ T4775] batman_adv: batadv0: Interface activated: dummy0 [ 65.129804][ T4783] loop0: detected capacity change from 0 to 512 [ 65.138638][ T4781] loop4: detected capacity change from 0 to 512 [ 65.139565][ T4783] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 65.154423][ T4781] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.163614][ T4781] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 65.180469][ T4783] EXT4-fs (loop0): invalid journal inode [ 65.186195][ T4783] EXT4-fs (loop0): can't get journal size [ 65.195318][ T4781] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 65.204130][ T4781] System zones: 0-2, 18-18, 34-35 [ 65.215733][ T4783] EXT4-fs (loop0): 1 truncate cleaned up [ 65.222113][ T4781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 65.279047][ T29] audit: type=1400 audit(1747375979.922:916): avc: denied { remount } for pid=4780 comm="syz.4.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.301474][ T4781] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 65.350318][ T4781] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 65.380357][ T4781] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 65.390648][ T4764] syz.3.343 (4764) used greatest stack depth: 6032 bytes left [ 65.399069][ T29] audit: type=1400 audit(1747375980.042:917): avc: denied { append } for pid=4780 comm="syz.4.348" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.443187][ T4781] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.348: bg 0: block 353: padding at end of block bitmap is not set [ 65.863158][ T4801] loop0: detected capacity change from 0 to 512 [ 65.872811][ T4801] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.881942][ T4801] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 65.885936][ T4800] loop1: detected capacity change from 0 to 512 [ 65.899645][ T4801] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 65.915660][ T4800] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.917745][ T4801] System zones: 0-2, 18-18, 34-35 [ 65.951936][ T4800] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.961836][ T4801] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 65.971822][ T4800] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.354: bg 0: block 248: padding at end of block bitmap is not set [ 65.987468][ T4801] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 65.988086][ T4800] Quota error (device loop1): write_blk: dquota write failed [ 66.003203][ T4800] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 66.006159][ T4801] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 66.013158][ T4800] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.354: Failed to acquire dquot type 1 [ 66.050311][ T4800] EXT4-fs (loop1): 1 truncate cleaned up [ 66.058671][ T4801] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.364: bg 0: block 353: padding at end of block bitmap is not set [ 66.059626][ T4806] netlink: 132 bytes leftover after parsing attributes in process `syz.2.355'. [ 66.094481][ T29] audit: type=1400 audit(1747375980.742:918): avc: denied { read write } for pid=4805 comm="syz.2.355" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.119991][ T29] audit: type=1400 audit(1747375980.742:919): avc: denied { open } for pid=4805 comm="syz.2.355" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.155511][ T29] audit: type=1400 audit(1747375980.802:920): avc: denied { ioctl } for pid=4805 comm="syz.2.355" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.190110][ T29] audit: type=1400 audit(1747375980.832:921): avc: denied { read } for pid=4810 comm="syz.0.356" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.261514][ T4816] unsupported nla_type 52263 [ 66.345429][ T4822] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.354261][ T4822] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.363106][ T4822] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.371892][ T4822] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.420918][ T4822] team0: Port device vxlan0 added [ 66.468095][ T4827] loop4: detected capacity change from 0 to 512 [ 66.504518][ T4827] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 66.531387][ T4827] EXT4-fs (loop4): invalid journal inode [ 66.544777][ T4827] EXT4-fs (loop4): can't get journal size [ 66.584175][ T4827] EXT4-fs (loop4): 1 truncate cleaned up [ 67.105405][ T4843] loop3: detected capacity change from 0 to 2048 [ 67.131613][ T4843] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 67.312780][ T4845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'. [ 67.312797][ T3310] udevd[3310]: incorrect ext4 checksum on /dev/loop3 [ 67.331962][ T4845] bridge_slave_1: left allmulticast mode [ 67.337670][ T4845] bridge_slave_1: left promiscuous mode [ 67.337929][ T4847] loop3: detected capacity change from 0 to 512 [ 67.343465][ T4845] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.358880][ T4845] bridge_slave_0: left allmulticast mode [ 67.364607][ T4845] bridge_slave_0: left promiscuous mode [ 67.370644][ T4845] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.382435][ T4849] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 67.401017][ T4847] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.410184][ T4847] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 67.422069][ T4849] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.371'. [ 67.460010][ T4847] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 67.480493][ T4847] System zones: 0-2, 18-18, 34-35 [ 67.518543][ T4847] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 67.551899][ T4847] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 67.569416][ T4847] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 67.583006][ T4847] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.369: bg 0: block 353: padding at end of block bitmap is not set [ 67.622741][ T4862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.372'. [ 67.802454][ T4870] syz.1.374: attempt to access beyond end of device [ 67.802454][ T4870] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 67.815319][ T4870] FAT-fs (loop3): unable to read boot sector [ 67.857437][ T4861] loop2: detected capacity change from 0 to 512 [ 67.876688][ T4861] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.902217][ T4861] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.375: corrupted xattr entries [ 67.961376][ T4861] EXT4-fs (loop2): Remounting filesystem read-only [ 67.968028][ T4861] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.984759][ T4861] EXT4-fs (loop2): 1 truncate cleaned up [ 68.119939][ T4861] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 68.135840][ T4877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'. [ 68.255962][ T4879] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 68.262678][ T4879] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.270209][ T4879] vhci_hcd vhci_hcd.0: Device attached [ 68.281197][ T4880] vhci_hcd: connection closed [ 68.281448][ T274] vhci_hcd: stop threads [ 68.290572][ T274] vhci_hcd: release socket [ 68.295112][ T274] vhci_hcd: disconnect device [ 68.373936][ T4885] loop3: detected capacity change from 0 to 512 [ 68.380865][ T4885] EXT4-fs: Ignoring removed orlov option [ 68.383769][ T4884] loop4: detected capacity change from 0 to 1024 [ 68.393739][ T4885] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 68.395061][ T4884] EXT4-fs: Ignoring removed bh option [ 68.427876][ T4885] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 68.438687][ T4885] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.381: corrupted in-inode xattr: e_value size too large [ 68.455930][ T4885] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.381: couldn't read orphan inode 15 (err -117) [ 68.468941][ T4885] EXT4-fs mount: 14 callbacks suppressed [ 68.468954][ T4885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.491160][ T4884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 68.517172][ T4884] vhci_hcd: invalid port number 15 [ 68.522403][ T4884] vhci_hcd: invalid port number 15 [ 68.545496][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 68.659341][ T4120] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.879316][ T4890] net_ratelimit: 30 callbacks suppressed [ 68.879336][ T4890] Set syz1 is full, maxelem 65536 reached [ 68.986349][ T4909] loop2: detected capacity change from 0 to 128 [ 69.108680][ T4916] xt_nat: multiple ranges no longer supported [ 69.160171][ T4920] loop3: detected capacity change from 0 to 512 [ 69.204691][ T4922] capability: warning: `syz.4.395' uses 32-bit capabilities (legacy support in use) [ 69.206698][ T4920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.231378][ T4920] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.394: invalid block [ 69.250068][ T4920] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.394: invalid indirect mapped block 4294967295 (level 1) [ 69.266755][ T4920] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.394: invalid indirect mapped block 4294967295 (level 1) [ 69.286360][ T4920] EXT4-fs (loop3): 2 truncates cleaned up [ 69.293119][ T4920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.312377][ T4920] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.3.394: path /43/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 69.352930][ T4929] loop2: detected capacity change from 0 to 1024 [ 69.377154][ T4929] EXT4-fs: Ignoring removed nobh option [ 69.382906][ T4929] EXT4-fs: Ignoring removed bh option [ 69.394846][ T4920] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.3.394: path /43/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 69.444104][ T4929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.480673][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.490295][ T4120] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.508874][ T4934] bond_slave_0: entered promiscuous mode [ 69.514632][ T4934] bond_slave_1: entered promiscuous mode [ 69.530582][ T4934] vlan2: entered promiscuous mode [ 69.535688][ T4934] bond0: entered promiscuous mode [ 69.550095][ T4938] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4938 comm=syz.3.399 [ 69.792074][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 69.792094][ T29] audit: type=1400 audit(1747375984.432:986): avc: denied { name_connect } for pid=4940 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 69.818573][ T29] audit: type=1400 audit(1747375984.442:987): avc: denied { listen } for pid=4940 comm="syz.3.402" lport=48481 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.846282][ T4949] loop0: detected capacity change from 0 to 128 [ 70.186988][ T29] audit: type=1400 audit(1747375984.492:988): avc: denied { accept } for pid=4940 comm="syz.3.402" lport=48481 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.266753][ T4961] loop2: detected capacity change from 0 to 512 [ 70.282523][ T4964] xt_nat: multiple ranges no longer supported [ 70.286688][ T4961] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 70.315106][ T4961] EXT4-fs (loop2): invalid journal inode [ 70.316649][ T29] audit: type=1400 audit(1747375984.962:989): avc: denied { create } for pid=4962 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.321150][ T4961] EXT4-fs (loop2): can't get journal size [ 70.340592][ T29] audit: type=1400 audit(1747375984.962:990): avc: denied { ioctl } for pid=4962 comm="syz.1.417" path="socket:[9330]" dev="sockfs" ino=9330 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.352604][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 70.371747][ T29] audit: type=1400 audit(1747375984.962:991): avc: denied { bind } for pid=4962 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.399979][ T29] audit: type=1400 audit(1747375984.962:992): avc: denied { create } for pid=4962 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.405873][ T4961] EXT4-fs (loop2): 1 truncate cleaned up [ 70.422134][ T29] audit: type=1400 audit(1747375985.002:993): avc: denied { setopt } for pid=4962 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.445050][ T29] audit: type=1400 audit(1747375985.002:994): avc: denied { write } for pid=4962 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.449192][ T4961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.548118][ T29] audit: type=1400 audit(1747375985.192:995): avc: denied { execute } for pid=4972 comm="syz.0.410" name="file0" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.548147][ T4973] process 'syz.0.410' launched './file0' with NULL argv: empty string added [ 70.551185][ T4974] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4974 comm=syz.3.411 [ 70.572767][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 70.602513][ T4973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'. [ 70.694518][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.867236][ T4993] loop4: detected capacity change from 0 to 512 [ 70.891327][ T4993] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.421: invalid indirect mapped block 256 (level 2) [ 70.904923][ T4993] EXT4-fs (loop4): 2 truncates cleaned up [ 70.911217][ T4993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.939232][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.985907][ T4998] xt_nat: multiple ranges no longer supported [ 71.157253][ T5014] loop0: detected capacity change from 0 to 512 [ 71.164241][ T5014] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 71.173308][ T5014] EXT4-fs (loop0): invalid journal inode [ 71.179064][ T5014] EXT4-fs (loop0): can't get journal size [ 71.185960][ T5014] EXT4-fs (loop0): 1 truncate cleaned up [ 71.193169][ T5014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.366090][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 71.375984][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.419007][ T5025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.431'. [ 71.428029][ T5025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.431'. [ 71.439549][ T5025] team0: entered promiscuous mode [ 71.444673][ T5025] team_slave_0: entered promiscuous mode [ 71.450737][ T5025] team_slave_1: entered promiscuous mode [ 71.461244][ T5025] bond0: entered promiscuous mode [ 71.466368][ T5025] bond_slave_0: entered promiscuous mode [ 71.472283][ T5025] bond_slave_1: entered promiscuous mode [ 71.480792][ T5025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.488393][ T5025] Cannot create hsr debugfs directory [ 71.496132][ T5025] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 71.572405][ T5032] SELinux: Context system_u:object_r:hwclock_exec_t:s0 is not valid (left unmapped). [ 71.709209][ T5039] xt_nat: multiple ranges no longer supported [ 71.743323][ T5038] sch_tbf: burst 824 is lower than device lo mtu (11337746) ! [ 71.882501][ T5049] bridge0: entered promiscuous mode [ 71.887917][ T5049] macvtap1: entered promiscuous mode [ 71.893564][ T5049] macvtap1: entered allmulticast mode [ 71.899085][ T5049] bridge0: entered allmulticast mode [ 71.914498][ T5049] bridge0: left allmulticast mode [ 71.914572][ T5049] bridge0: left promiscuous mode [ 71.982641][ T5057] loop3: detected capacity change from 0 to 512 [ 72.005866][ T5057] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 72.022111][ T5057] EXT4-fs (loop3): invalid journal inode [ 72.029976][ T5057] EXT4-fs (loop3): can't get journal size [ 72.038209][ T5057] EXT4-fs (loop3): 1 truncate cleaned up [ 72.044417][ T5057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.092344][ T5062] batadv_slave_0: entered promiscuous mode [ 72.098686][ T5062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.189195][ T5062] batadv_slave_0 (unregistering): left promiscuous mode [ 72.200669][ T5062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.477486][ T5077] netlink: 'syz.4.449': attribute type 13 has an invalid length. [ 72.485425][ T5077] netlink: 'syz.4.449': attribute type 27 has an invalid length. [ 72.717444][ T5082] loop0: detected capacity change from 0 to 512 [ 72.728737][ T5082] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.745781][ T5082] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.451: bad orphan inode 13 [ 72.757431][ T5082] ext4_test_bit(bit=12, block=18) = 1 [ 72.762979][ T5082] is_bad_inode(inode)=0 [ 72.767390][ T5082] NEXT_ORPHAN(inode)=2130706432 [ 72.772419][ T5082] max_ino=32 [ 72.775666][ T5082] i_nlink=1 [ 72.779571][ T5082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.781803][ T4120] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.804313][ T5082] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 72.831566][ T5082] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.451: bg 0: block 248: padding at end of block bitmap is not set [ 72.832026][ T5088] __nla_validate_parse: 2 callbacks suppressed [ 72.832042][ T5088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 72.846988][ T5082] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.451: Failed to acquire dquot type 1 [ 72.861523][ T5088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 72.876275][ T5082] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.893668][ T5090] loop3: detected capacity change from 0 to 512 [ 72.908064][ T5090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.928467][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.931260][ T5090] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.945254][ T5090] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.452: bg 0: block 248: padding at end of block bitmap is not set [ 72.961760][ T5090] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.452: Failed to acquire dquot type 1 [ 72.973930][ T5090] EXT4-fs (loop3): 1 truncate cleaned up [ 72.980184][ T5090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.417588][ T5117] loop1: detected capacity change from 0 to 512 [ 73.424593][ T5117] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 73.434291][ T5117] EXT4-fs (loop1): invalid journal inode [ 73.439980][ T5117] EXT4-fs (loop1): can't get journal size [ 73.446909][ T5117] EXT4-fs (loop1): 1 truncate cleaned up [ 73.453117][ T5117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.724218][ T4120] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.924103][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.945171][ T5124] loop3: detected capacity change from 0 to 512 [ 74.047454][ T5124] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.059869][ T5124] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.465: bad orphan inode 13 [ 74.071872][ T5124] ext4_test_bit(bit=12, block=18) = 1 [ 74.077278][ T5124] is_bad_inode(inode)=0 [ 74.081598][ T5124] NEXT_ORPHAN(inode)=2130706432 [ 74.086614][ T5124] max_ino=32 [ 74.089841][ T5124] i_nlink=1 [ 74.094566][ T5124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.113175][ T5124] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 74.142000][ T5124] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.465: bg 0: block 248: padding at end of block bitmap is not set [ 74.157087][ T5124] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.465: Failed to acquire dquot type 1 [ 74.214081][ T5124] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.237521][ T5136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.469'. [ 74.246475][ T5136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.469'. [ 74.263294][ T5136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 74.272229][ T5136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 74.302789][ T4120] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.390504][ T5148] xt_hashlimit: size too large, truncated to 1048576 [ 74.397905][ T5145] loop1: detected capacity change from 0 to 1024 [ 74.581968][ T5145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.597647][ T5145] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.472: Allocating blocks 497-513 which overlap fs metadata [ 74.627912][ T5145] EXT4-fs (loop1): pa ffff8881049aeb60: logic 16, phys. 145, len 23 [ 74.636034][ T5145] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 74.675771][ T5145] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 74.688086][ T5145] EXT4-fs (loop1): This should not happen!! Data will be lost [ 74.688086][ T5145] [ 74.697853][ T5145] EXT4-fs (loop1): Total free blocks count 0 [ 74.703888][ T5145] EXT4-fs (loop1): Free/Dirty block details [ 74.709807][ T5145] EXT4-fs (loop1): free_blocks=16 [ 74.714917][ T5145] EXT4-fs (loop1): dirty_blocks=0 [ 74.719978][ T5145] EXT4-fs (loop1): Block reservation details [ 74.726028][ T5145] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 75.630481][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 75.630496][ T29] audit: type=1400 audit(1747375990.222:1113): avc: denied { read } for pid=5162 comm="syz.1.477" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 75.659876][ T29] audit: type=1400 audit(1747375990.222:1114): avc: denied { open } for pid=5162 comm="syz.1.477" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 75.953077][ T5172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.480'. [ 75.962077][ T5172] netlink: 'syz.4.480': attribute type 7 has an invalid length. [ 75.969757][ T5172] netlink: 'syz.4.480': attribute type 8 has an invalid length. [ 75.977466][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 76.253758][ T5181] loop2: detected capacity change from 0 to 512 [ 76.280833][ T5181] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.287831][ T5181] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.482: bad orphan inode 13 [ 76.319330][ T5181] ext4_test_bit(bit=12, block=18) = 1 [ 76.324798][ T5181] is_bad_inode(inode)=0 [ 76.329038][ T5181] NEXT_ORPHAN(inode)=2130706432 [ 76.333927][ T5181] max_ino=32 [ 76.337129][ T5181] i_nlink=1 [ 76.347736][ T5185] netlink: 'syz.4.485': attribute type 10 has an invalid length. [ 76.359670][ T5185] netlink: 40 bytes leftover after parsing attributes in process `syz.4.485'. [ 76.397933][ T5181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.467251][ T5191] batman_adv: batadv0: Adding interface: dummy0 [ 76.473640][ T5191] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.528685][ T5181] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 76.564771][ T5181] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.482: bg 0: block 248: padding at end of block bitmap is not set [ 76.593322][ T5181] Quota error (device loop2): write_blk: dquota write failed [ 76.601010][ T5181] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 76.610979][ T5181] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.482: Failed to acquire dquot type 1 [ 76.623668][ T5198] loop0: detected capacity change from 0 to 128 [ 76.643021][ T5191] batman_adv: batadv0: Interface activated: dummy0 [ 76.653001][ T5198] EXT4-fs: Ignoring removed nobh option [ 76.684326][ T5185] batadv0: entered promiscuous mode [ 76.691194][ T5185] batadv0: entered allmulticast mode [ 76.709546][ T29] audit: type=1400 audit(1747375991.332:1115): avc: denied { ioctl } for pid=5184 comm="syz.4.485" path="socket:[9746]" dev="sockfs" ino=9746 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.734785][ T5198] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.784929][ T5185] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 76.803976][ T5198] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.818900][ T5181] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.832667][ T5199] batadv0: mtu less than device minimum [ 76.835733][ T29] audit: type=1326 audit(1747375991.452:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 76.839676][ T5199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.862522][ T29] audit: type=1326 audit(1747375991.452:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 76.873245][ T5199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.896281][ T29] audit: type=1326 audit(1747375991.452:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 76.907079][ T5199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.929980][ T29] audit: type=1326 audit(1747375991.452:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 76.940661][ T5199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.963684][ T29] audit: type=1326 audit(1747375991.452:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 76.974392][ T5199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.008346][ T5199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.019223][ T5199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.030165][ T5199] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.033152][ T5207] netlink: 'syz.3.491': attribute type 39 has an invalid length. [ 77.098810][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.120335][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.134312][ T5211] netlink: 'syz.3.495': attribute type 10 has an invalid length. [ 77.142222][ T5211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.495'. [ 77.154431][ T5213] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.177076][ T5211] team0: Port device geneve1 added [ 77.222915][ T5213] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.237747][ T5219] @: renamed from vlan0 (while UP) [ 77.268891][ T5221] wireguard0: entered promiscuous mode [ 77.274561][ T5221] wireguard0: entered allmulticast mode [ 77.376688][ T5233] random: crng reseeded on system resumption [ 77.425579][ T5213] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.590704][ T5239] loop3: detected capacity change from 0 to 512 [ 77.604660][ T5239] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.613816][ T5239] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 77.730691][ T5239] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 77.789308][ T5239] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 77.823815][ T5239] System zones: 0-2, 18-18, 34-34 [ 77.844451][ T5239] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 77.900357][ T5239] EXT4-fs (loop3): 1 truncate cleaned up [ 77.910816][ T5239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.949625][ T5213] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.005757][ T4120] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.028423][ T5246] netlink: 36 bytes leftover after parsing attributes in process `syz.0.506'. [ 78.037462][ T5246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.506'. [ 78.046442][ T5246] netlink: 36 bytes leftover after parsing attributes in process `syz.0.506'. [ 78.056728][ T5246] netlink: 36 bytes leftover after parsing attributes in process `syz.0.506'. [ 78.075938][ T5213] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.088013][ T5213] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.102906][ T5213] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.123754][ T5213] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.183215][ T5254] loop2: detected capacity change from 0 to 128 [ 78.192521][ T5250] loop1: detected capacity change from 0 to 512 [ 78.210975][ T5254] EXT4-fs: Ignoring removed nobh option [ 78.222498][ T5250] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.241129][ T5250] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.507: bad orphan inode 13 [ 78.251810][ T5250] ext4_test_bit(bit=12, block=18) = 1 [ 78.257284][ T5250] is_bad_inode(inode)=0 [ 78.261652][ T5250] NEXT_ORPHAN(inode)=2130706432 [ 78.266564][ T5250] max_ino=32 [ 78.269786][ T5250] i_nlink=1 [ 78.276379][ T5250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.284303][ T5254] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.308251][ T5250] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 78.335367][ T5254] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.352062][ T5250] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.507: bg 0: block 248: padding at end of block bitmap is not set [ 78.435940][ T5250] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.507: Failed to acquire dquot type 1 [ 78.458444][ T5260] SELinux: Context : is not valid (left unmapped). [ 78.470205][ T5250] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.489631][ T5267] netlink: 'syz.3.515': attribute type 10 has an invalid length. [ 78.509145][ T5267] batman_adv: batadv0: Adding interface: team0 [ 78.515424][ T5267] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.540750][ T5267] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 78.566734][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.590990][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.643229][ T5275] loop2: detected capacity change from 0 to 512 [ 78.666572][ T5273] loop1: detected capacity change from 0 to 512 [ 78.694162][ T5275] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.771477][ T5275] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.528: bad orphan inode 13 [ 78.781977][ T5273] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.791086][ T5273] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 78.808694][ T5275] ext4_test_bit(bit=12, block=18) = 1 [ 78.814200][ T5275] is_bad_inode(inode)=0 [ 78.818393][ T5275] NEXT_ORPHAN(inode)=2130706432 [ 78.823535][ T5275] max_ino=32 [ 78.826783][ T5275] i_nlink=1 [ 78.841537][ T5273] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 78.854579][ T5275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.876036][ T5273] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 79.167508][ T5273] System zones: 0-2, 18-18, 34-34 [ 79.181740][ T5275] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 79.192669][ T5273] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 79.211466][ T5275] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.528: bg 0: block 248: padding at end of block bitmap is not set [ 79.230719][ T5273] EXT4-fs (loop1): 1 truncate cleaned up [ 79.237059][ T5275] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.528: Failed to acquire dquot type 1 [ 79.269957][ T5273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.365968][ T5275] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.386389][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.412812][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.728271][ T5311] loop0: detected capacity change from 0 to 512 [ 79.771538][ T5311] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 79.810871][ T5316] netlink: 'syz.2.530': attribute type 10 has an invalid length. [ 79.821775][ T5311] EXT4-fs (loop0): invalid journal inode [ 79.834886][ T5316] batman_adv: batadv0: Adding interface: team0 [ 79.841173][ T5316] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.866544][ T5316] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 79.880447][ T5311] EXT4-fs (loop0): can't get journal size [ 80.003102][ T5311] EXT4-fs (loop0): 1 truncate cleaned up [ 80.011955][ T5311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.056896][ T5323] bridge0: entered promiscuous mode [ 80.062371][ T5321] loop3: detected capacity change from 0 to 128 [ 80.075133][ T5323] macvlan0: entered promiscuous mode [ 80.087417][ T5323] bridge0: port 3(macvlan0) entered blocking state [ 80.088989][ T5321] vfat: Unknown parameter 'u]%free' [ 80.094042][ T5323] bridge0: port 3(macvlan0) entered disabled state [ 80.106060][ T5323] macvlan0: entered allmulticast mode [ 80.111640][ T5323] bridge0: entered allmulticast mode [ 80.165488][ T5323] macvlan0: left allmulticast mode [ 80.170730][ T5323] bridge0: left allmulticast mode [ 80.202728][ T5323] bridge0: left promiscuous mode [ 80.286076][ T5332] loop3: detected capacity change from 0 to 512 [ 80.298190][ T5332] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.303411][ T5336] netlink: 'syz.4.535': attribute type 10 has an invalid length. [ 80.305674][ T5332] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.536: bad orphan inode 13 [ 80.312368][ T5336] netlink: 40 bytes leftover after parsing attributes in process `syz.4.535'. [ 80.348067][ T5332] ext4_test_bit(bit=12, block=18) = 1 [ 80.353579][ T5332] is_bad_inode(inode)=0 [ 80.357783][ T5332] NEXT_ORPHAN(inode)=2130706432 [ 80.362697][ T5332] max_ino=32 [ 80.365921][ T5332] i_nlink=1 [ 80.382155][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.399926][ T5332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.464910][ T5332] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 80.486322][ T5332] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.536: bg 0: block 248: padding at end of block bitmap is not set [ 80.533132][ T5332] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.536: Failed to acquire dquot type 1 [ 80.611572][ T5332] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.678480][ T4120] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.728023][ T5347] loop0: detected capacity change from 0 to 512 [ 80.885484][ T5347] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.897756][ T5347] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.551: bad orphan inode 13 [ 80.918203][ T5355] syz.3.543 uses obsolete (PF_INET,SOCK_PACKET) [ 80.931574][ T5347] ext4_test_bit(bit=12, block=18) = 1 [ 80.937056][ T5347] is_bad_inode(inode)=0 [ 80.941381][ T5347] NEXT_ORPHAN(inode)=2130706432 [ 80.946279][ T5347] max_ino=32 [ 80.949572][ T5347] i_nlink=1 [ 80.954695][ T5347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.979894][ T5347] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 81.271297][ T5347] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.551: bg 0: block 248: padding at end of block bitmap is not set [ 81.288557][ T5347] __quota_error: 260 callbacks suppressed [ 81.288614][ T5347] Quota error (device loop0): write_blk: dquota write failed [ 81.302077][ T5347] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 81.312103][ T5347] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.551: Failed to acquire dquot type 1 [ 81.453820][ T5347] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.484535][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.533073][ T5363] batman_adv: batadv0: Interface deactivated: dummy0 [ 81.551333][ T5367] loop3: detected capacity change from 0 to 128 [ 81.573759][ T5367] EXT4-fs: Ignoring removed nobh option [ 81.677735][ T5364] netlink: 'syz.1.545': attribute type 10 has an invalid length. [ 81.686950][ T5368] can0: slcan on ttyS3. [ 81.697308][ T5367] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.720878][ T29] audit: type=1400 audit(1747375996.372:1375): avc: denied { write } for pid=5365 comm="syz.0.556" path="socket:[10487]" dev="sockfs" ino=10487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 81.754073][ T5364] batman_adv: batadv0: Adding interface: team0 [ 81.760353][ T5364] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.785696][ T5364] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 81.802988][ T5367] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.840965][ T29] audit: type=1326 audit(1747375996.492:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.3.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 81.920485][ T29] audit: type=1326 audit(1747375996.512:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.3.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 81.943963][ T29] audit: type=1326 audit(1747375996.512:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.3.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 81.967565][ T29] audit: type=1326 audit(1747375996.512:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.3.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 81.990933][ T29] audit: type=1326 audit(1747375996.512:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.3.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 82.014307][ T29] audit: type=1326 audit(1747375996.512:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.3.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 82.037888][ T29] audit: type=1326 audit(1747375996.512:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.3.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aabace969 code=0x7ffc0000 [ 82.120765][ T5365] can0 (unregistered): slcan off ttyS3. [ 82.146656][ T5395] loop1: detected capacity change from 0 to 512 [ 82.164939][ T5395] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 82.181282][ T5395] EXT4-fs (loop1): invalid journal inode [ 82.193889][ T5400] loop0: detected capacity change from 0 to 512 [ 82.194934][ T5395] EXT4-fs (loop1): can't get journal size [ 82.210596][ T4120] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.214011][ T5400] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.228730][ T5400] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 82.248175][ T5395] EXT4-fs (loop1): 1 truncate cleaned up [ 82.265565][ T5395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.277903][ T9] IPVS: starting estimator thread 0... [ 82.290457][ T5400] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 82.311586][ T5400] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 82.319626][ T5400] System zones: 0-2, 18-18, 34-34 [ 82.390339][ T5412] IPVS: using max 2304 ests per chain, 115200 per kthread [ 82.398938][ T5420] loop2: detected capacity change from 0 to 512 [ 82.408460][ T5400] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 82.426777][ T5420] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.435580][ T5400] EXT4-fs (loop0): 1 truncate cleaned up [ 82.442001][ T5400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.462289][ T5420] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.554: invalid indirect mapped block 4294967295 (level 1) [ 82.554736][ T5420] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.554: invalid indirect mapped block 4294967295 (level 1) [ 82.626515][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.640450][ T5420] EXT4-fs (loop2): 2 truncates cleaned up [ 82.646746][ T5420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.724301][ T5420] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.2.554: path /101/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 82.746357][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.830216][ T5420] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.2.554: path /101/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 82.859685][ T5432] loop1: detected capacity change from 0 to 512 [ 82.893321][ T5432] EXT4-fs (loop1): orphan cleanup on readonly fs [ 82.916670][ T5432] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.557: bad orphan inode 13 [ 82.928716][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.948925][ T5432] ext4_test_bit(bit=12, block=18) = 1 [ 82.954388][ T5432] is_bad_inode(inode)=0 [ 82.958583][ T5432] NEXT_ORPHAN(inode)=2130706432 [ 82.963514][ T5432] max_ino=32 [ 82.966745][ T5432] i_nlink=1 [ 83.011785][ T5432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.056476][ T5432] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 83.096976][ T5432] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.557: bg 0: block 248: padding at end of block bitmap is not set [ 83.153873][ T5432] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.557: Failed to acquire dquot type 1 [ 83.221977][ T5432] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.240519][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 83.249338][ T5444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 83.278546][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.351345][ T5446] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 83.362649][ T5444] bond1: entered promiscuous mode [ 83.367727][ T5444] bond1: entered allmulticast mode [ 83.380426][ T5444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.465743][ T5453] loop1: detected capacity change from 0 to 512 [ 83.532279][ T5453] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.539240][ T5453] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.567: bg 0: block 248: padding at end of block bitmap is not set [ 83.554883][ T5453] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.567: Failed to acquire dquot type 1 [ 83.566525][ T5453] EXT4-fs (loop1): 1 truncate cleaned up [ 83.573890][ T5453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.587632][ T5453] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 83.632782][ T5453] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 83.673623][ T5459] netlink: 48 bytes leftover after parsing attributes in process `syz.0.568'. [ 83.697377][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.700338][ T5459] netlink: 44 bytes leftover after parsing attributes in process `syz.0.568'. [ 83.765667][ T5461] loop1: detected capacity change from 0 to 512 [ 83.792099][ T5461] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.801398][ T5461] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 83.824118][ T5461] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 83.850831][ T5461] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 83.862848][ T5467] netlink: 'syz.0.570': attribute type 10 has an invalid length. [ 83.870724][ T5467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.570'. [ 83.879955][ T5467] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.888211][ T5467] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.896487][ T5467] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.904887][ T5467] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.921452][ T5461] System zones: 0-2, 18-18, 34-34 [ 83.927022][ T5467] team0: Port device geneve1 added [ 83.940752][ T5461] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 83.983180][ T5461] EXT4-fs (loop1): 1 truncate cleaned up [ 84.001042][ T5461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.037949][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 84.080696][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.093203][ T5471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 84.209082][ T5476] wireguard1: entered promiscuous mode [ 84.246833][ T5481] ªªªªªª: renamed from vlan0 [ 84.370604][ T5487] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 84.377237][ T5487] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 84.384829][ T5487] vhci_hcd vhci_hcd.0: Device attached [ 84.405048][ T5491] loop2: detected capacity change from 0 to 736 [ 84.461491][ T5488] vhci_hcd: connection closed [ 84.470429][ T51] vhci_hcd: stop threads [ 84.479433][ T51] vhci_hcd: release socket [ 84.483987][ T51] vhci_hcd: disconnect device [ 84.603396][ T5474] loop1: detected capacity change from 0 to 512 [ 84.621667][ T5474] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.650975][ T5474] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.574: corrupted xattr entries [ 84.680549][ T5474] EXT4-fs (loop1): Remounting filesystem read-only [ 84.691591][ T5474] EXT4-fs (loop1): 1 truncate cleaned up [ 84.704739][ T5503] loop2: detected capacity change from 0 to 512 [ 84.713545][ T5503] netlink: 'syz.2.581': attribute type 4 has an invalid length. [ 84.729351][ T5474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.774083][ T5474] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 84.897469][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.030868][ T5510] netlink: 'syz.1.584': attribute type 10 has an invalid length. [ 85.038936][ T5510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.584'. [ 85.069312][ T5510] geneve1: entered promiscuous mode [ 85.075130][ T5510] team0: Port device geneve1 added [ 85.137981][ T5514] loop1: detected capacity change from 0 to 512 [ 85.184993][ T5514] EXT4-fs: Ignoring removed bh option [ 85.190610][ T5514] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.218744][ T5514] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 85.231800][ T5520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'. [ 85.248648][ T5514] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 85.281426][ T5514] EXT4-fs (loop1): orphan cleanup on readonly fs [ 85.296896][ T5514] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.586: Failed to acquire dquot type 1 [ 85.323296][ T5514] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.586: Invalid block bitmap block 0 in block_group 0 [ 85.342940][ T5514] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.586: Invalid block bitmap block 0 in block_group 0 [ 85.375694][ T5514] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.586: Invalid block bitmap block 0 in block_group 0 [ 85.404932][ T5514] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.586: Failed to acquire dquot type 1 [ 85.433359][ T5514] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.586: Failed to acquire dquot type 1 [ 85.457994][ T5524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 85.461994][ T5514] EXT4-fs (loop1): 1 orphan inode deleted [ 85.501155][ T5514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.665581][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.731395][ T5535] syzkaller0: entered promiscuous mode [ 85.737005][ T5535] syzkaller0: entered allmulticast mode [ 86.391781][ T5572] syz.0.606 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 86.731166][ T5581] bond1: entered promiscuous mode [ 86.736348][ T5581] bond1: entered allmulticast mode [ 86.921906][ T5581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.003489][ T5581] bond1 (unregistering): Released all slaves [ 87.048926][ T5588] loop1: detected capacity change from 0 to 128 [ 87.098801][ T5588] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.318614][ T5595] netlink: 'syz.3.623': attribute type 13 has an invalid length. [ 87.326540][ T5595] netlink: 'syz.3.623': attribute type 27 has an invalid length. [ 87.433390][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 87.433409][ T29] audit: type=1400 audit(1747376231.070:1619): avc: denied { connect } for pid=5591 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.507229][ T5582] net_ratelimit: 13 callbacks suppressed [ 87.507249][ T5582] Set syz1 is full, maxelem 65536 reached [ 87.670151][ T29] audit: type=1400 audit(1747376231.322:1620): avc: denied { watch watch_reads } for pid=5600 comm="syz.3.614" path="/87" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.693258][ T5601] loop3: detected capacity change from 0 to 2048 [ 87.749927][ T5601] EXT4-fs (loop3): failed to initialize system zone (-117) [ 87.757318][ T5601] EXT4-fs (loop3): mount failed [ 87.790494][ T5603] syz_tun: entered promiscuous mode [ 87.795838][ T5603] macvtap1: entered promiscuous mode [ 87.801345][ T5603] macvtap1: entered allmulticast mode [ 87.807066][ T5603] syz_tun: entered allmulticast mode [ 87.826507][ T5610] syz_tun: left allmulticast mode [ 87.832124][ T5610] syz_tun: left promiscuous mode [ 87.855179][ T5615] netlink: 'syz.3.618': attribute type 10 has an invalid length. [ 87.970415][ T5620] loop3: detected capacity change from 0 to 512 [ 87.999976][ T5620] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.034059][ T5620] EXT4-fs (loop3): 1 truncate cleaned up [ 88.094160][ T5620] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 88.096795][ T29] audit: type=1400 audit(1747376231.755:1621): avc: denied { load_policy } for pid=5619 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 88.123389][ T5620] SELinux: failed to load policy [ 88.185152][ T5626] xt_hashlimit: size too large, truncated to 1048576 [ 88.411988][ T5632] __nla_validate_parse: 4 callbacks suppressed [ 88.412009][ T5632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 88.551852][ T5635] loop3: detected capacity change from 0 to 128 [ 88.601860][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 88.628993][ T5641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.627'. [ 88.748050][ T5653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 88.765129][ T5653] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.775291][ T5653] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.786211][ T5653] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.796757][ T5653] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.865253][ T5653] team0: Port device geneve1 removed [ 88.923460][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 89.005049][ T5666] loop1: detected capacity change from 0 to 512 [ 89.035314][ T29] audit: type=1326 audit(1747376232.702:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 89.058882][ T29] audit: type=1326 audit(1747376232.702:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 89.084021][ T5666] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.097862][ T29] audit: type=1326 audit(1747376232.702:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 89.121403][ T29] audit: type=1326 audit(1747376232.702:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 89.144825][ T29] audit: type=1326 audit(1747376232.702:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 89.168292][ T29] audit: type=1326 audit(1747376232.732:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 89.191800][ T29] audit: type=1326 audit(1747376232.732:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 89.281838][ T5678] netlink: 32 bytes leftover after parsing attributes in process `syz.0.638'. [ 89.671921][ T5689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 89.942130][ T5698] loop2: detected capacity change from 0 to 128 [ 90.096053][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'. [ 90.151537][ T5701] bridge_slave_1: left allmulticast mode [ 90.157296][ T5701] bridge_slave_1: left promiscuous mode [ 90.163109][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.182048][ T5701] bridge_slave_0: left allmulticast mode [ 90.187797][ T5701] bridge_slave_0: left promiscuous mode [ 90.193519][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.555336][ T5725] mmap: syz.1.652 (5725) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.748090][ T5729] netlink: 'syz.2.658': attribute type 1 has an invalid length. [ 90.794899][ T5729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.814520][ T5729] bond1: (slave veth3): Enslaving as an active interface with a down link [ 90.844547][ T5729] bond1: (slave veth0_to_bond): making interface the new active one [ 90.856263][ T5729] veth0_to_bond: entered promiscuous mode [ 90.862349][ T5729] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 90.880212][ T5729] vlan0: entered allmulticast mode [ 90.885474][ T5729] veth1: entered allmulticast mode [ 90.892072][ T5729] veth1: entered promiscuous mode [ 90.897554][ T5729] veth1: left promiscuous mode [ 90.903790][ T5729] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 90.981622][ T5744] batman_adv: batadv0: Removing interface: dummy0 [ 91.327102][ T5765] netlink: 'syz.1.668': attribute type 4 has an invalid length. [ 91.471829][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 91.481300][ T5770] bridge_slave_1: left allmulticast mode [ 91.487199][ T5770] bridge_slave_1: left promiscuous mode [ 91.492923][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.496703][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 91.509902][ T5770] bridge_slave_0: left allmulticast mode [ 91.515714][ T5770] bridge_slave_0: left promiscuous mode [ 91.521519][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.685311][ T23] IPVS: starting estimator thread 0... [ 91.748931][ T5786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.756248][ T5786] IPv6: NLM_F_CREATE should be set when creating new route [ 91.757063][ T5784] infiniband ˆyz!: set active [ 91.768224][ T5784] infiniband ˆyz!: added team_slave_0 [ 91.784984][ T5784] RDS/IB: ˆyz!: added [ 91.790314][ T5784] smc: adding ib device ˆyz! with port count 1 [ 91.796653][ T5784] smc: ib device ˆyz! port 1 has pnetid [ 91.799775][ T5780] IPVS: using max 1920 ests per chain, 96000 per kthread [ 91.896374][ T5796] loop3: detected capacity change from 0 to 1024 [ 91.903747][ T5796] EXT4-fs: Ignoring removed nobh option [ 91.909552][ T5796] EXT4-fs: Ignoring removed bh option [ 91.955161][ T5796] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.684: Allocating blocks 481-513 which overlap fs metadata [ 91.973534][ T5796] EXT4-fs (loop3): Remounting filesystem read-only [ 91.981157][ T5795] EXT4-fs (loop3): pa ffff8881049aed20: logic 256, phys. 369, len 9 [ 92.012218][ T5798] wg1 speed is unknown, defaulting to 1000 [ 92.019334][ T5798] wg1 speed is unknown, defaulting to 1000 [ 92.025389][ T5798] wg1 speed is unknown, defaulting to 1000 [ 92.059428][ T5798] infiniband syz0: set down [ 92.064023][ T5798] infiniband syz0: added wg1 [ 92.068770][ T23] wg1 speed is unknown, defaulting to 1000 [ 92.085462][ T5798] RDS/IB: syz0: added [ 92.090198][ T5798] smc: adding ib device syz0 with port count 1 [ 92.096432][ T5798] smc: ib device syz0 port 1 has pnetid [ 92.102491][ T831] wg1 speed is unknown, defaulting to 1000 [ 92.110079][ T5798] wg1 speed is unknown, defaulting to 1000 [ 92.151981][ T5798] wg1 speed is unknown, defaulting to 1000 [ 92.183853][ T5798] wg1 speed is unknown, defaulting to 1000 [ 92.215296][ T5798] wg1 speed is unknown, defaulting to 1000 [ 92.247609][ T5798] wg1 speed is unknown, defaulting to 1000 [ 92.331476][ T5812] loop2: detected capacity change from 0 to 512 [ 92.352995][ T5812] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.373961][ T5812] EXT4-fs (loop2): 1 truncate cleaned up [ 92.453891][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 92.453960][ T29] audit: type=1400 audit(1747376236.147:1832): avc: denied { connect } for pid=5823 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.486146][ T29] audit: type=1326 audit(1747376236.157:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 92.509628][ T29] audit: type=1326 audit(1747376236.177:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 92.533061][ T29] audit: type=1326 audit(1747376236.177:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 92.562252][ T29] audit: type=1326 audit(1747376236.187:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 92.585913][ T29] audit: type=1326 audit(1747376236.187:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 92.609281][ T29] audit: type=1326 audit(1747376236.187:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 92.632543][ T29] audit: type=1326 audit(1747376236.187:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 92.655944][ T29] audit: type=1326 audit(1747376236.187:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 92.679415][ T29] audit: type=1326 audit(1747376236.187:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5215e969 code=0x7ffc0000 [ 92.682615][ T9] IPVS: starting estimator thread 0... [ 92.731956][ T5835] can0: slcan on ttyS3. [ 92.792460][ T5835] can0 (unregistered): slcan off ttyS3. [ 92.802037][ T5832] IPVS: using max 2304 ests per chain, 115200 per kthread [ 92.860824][ T5845] xt_hashlimit: size too large, truncated to 1048576 [ 93.063638][ T5847] siw: device registration error -23 [ 93.274131][ T5861] netlink: 'syz.0.701': attribute type 2 has an invalid length. [ 93.303929][ T5863] loop2: detected capacity change from 0 to 512 [ 93.340864][ T5863] EXT4-fs (loop2): 1 orphan inode deleted [ 93.356900][ T5863] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.367571][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 93.403932][ T5863] netlink: 'syz.2.703': attribute type 4 has an invalid length. [ 93.520413][ T5869] wg1 speed is unknown, defaulting to 1000 [ 93.719494][ T5883] loop2: detected capacity change from 0 to 164 [ 93.727332][ T5883] iso9660: Unknown parameter '0xffffffffffffffff' [ 93.912627][ T5893] xt_hashlimit: size too large, truncated to 1048576 [ 94.146648][ T5891] loop2: detected capacity change from 0 to 8192 [ 94.157654][ T5891] vfat: Unknown parameter 'GPL' [ 94.287732][ T5896] wg1 speed is unknown, defaulting to 1000 [ 94.309931][ T5905] ÿÿÿÿÿÿ: renamed from vlan1 [ 94.871265][ T5916] @ÿ: renamed from veth0_vlan (while UP) [ 94.908954][ T5921] @: renamed from vlan0 (while UP) [ 95.202097][ T5938] loop3: detected capacity change from 0 to 1024 [ 95.891729][ T5953] wg1 speed is unknown, defaulting to 1000 [ 96.275683][ T5967] @: renamed from vlan0 [ 96.375646][ T5973] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5973 comm=syz.1.740 [ 96.402392][ T5975] __nla_validate_parse: 2 callbacks suppressed [ 96.402409][ T5975] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 96.417280][ T5975] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 96.456863][ T5975] bond1: entered promiscuous mode [ 96.461963][ T5975] bond1: entered allmulticast mode [ 96.468813][ T5975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.553018][ T5987] netlink: 'syz.0.743': attribute type 4 has an invalid length. [ 96.568417][ T5987] netlink: 'syz.0.743': attribute type 4 has an invalid length. [ 96.601968][ T5996] syzkaller0: entered promiscuous mode [ 96.609254][ T5998] 9pnet_fd: Insufficient options for proto=fd [ 96.609292][ T5996] syzkaller0 (unregistering): left promiscuous mode [ 96.635414][ T5989] loop3: detected capacity change from 0 to 2048 [ 96.722676][ T6003] C: renamed from team_slave_0 [ 96.732891][ T6003] netlink: 'syz.4.752': attribute type 1 has an invalid length. [ 96.740774][ T6003] netlink: 152 bytes leftover after parsing attributes in process `syz.4.752'. [ 96.749829][ T6003] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 96.965058][ T6014] syzkaller0: entered promiscuous mode [ 96.970604][ T6014] syzkaller0: entered allmulticast mode [ 97.141758][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 97.454200][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 97.454215][ T29] audit: type=1400 audit(1747376241.181:2061): avc: denied { bind } for pid=6026 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 97.484403][ T6030] 9pnet_fd: Insufficient options for proto=fd [ 97.631081][ T29] audit: type=1400 audit(1747376241.353:2062): avc: denied { allowed } for pid=6036 comm="syz.2.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 97.671988][ T6019] wg1 speed is unknown, defaulting to 1000 [ 97.701062][ T6037] SELinux: Context Ü is not valid (left unmapped). [ 97.740391][ T29] audit: type=1400 audit(1747376241.383:2063): avc: denied { create } for pid=6036 comm="syz.2.764" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 97.761659][ T29] audit: type=1400 audit(1747376241.383:2064): avc: denied { create } for pid=6036 comm="syz.2.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.781222][ T29] audit: type=1400 audit(1747376241.393:2065): avc: denied { bind } for pid=6036 comm="syz.2.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.800573][ T29] audit: type=1400 audit(1747376241.433:2066): avc: denied { map_create } for pid=6036 comm="syz.2.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 97.819781][ T29] audit: type=1400 audit(1747376241.433:2067): avc: denied { prog_load } for pid=6036 comm="syz.2.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 97.838814][ T29] audit: type=1400 audit(1747376241.433:2068): avc: denied { bpf } for pid=6036 comm="syz.2.764" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.859412][ T29] audit: type=1400 audit(1747376241.433:2069): avc: denied { perfmon } for pid=6036 comm="syz.2.764" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.880568][ T29] audit: type=1400 audit(1747376241.433:2070): avc: denied { mac_admin } for pid=6036 comm="syz.2.764" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.016971][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'. [ 98.029287][ T6039] loop3: detected capacity change from 0 to 8192 [ 98.061449][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 98.090458][ T6039] netlink: 60 bytes leftover after parsing attributes in process `syz.3.765'. [ 98.139843][ T6039] netlink: 60 bytes leftover after parsing attributes in process `syz.3.765'. [ 98.160658][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.772'. [ 98.199884][ T6039] netlink: 60 bytes leftover after parsing attributes in process `syz.3.765'. [ 98.298975][ T6069] 9pnet_fd: Insufficient options for proto=fd [ 98.453821][ T6056] wg1 speed is unknown, defaulting to 1000 [ 99.163083][ T6105] tipc: Started in network mode [ 99.168009][ T6105] tipc: Node identity 68a, cluster identity 3 [ 99.174251][ T6105] tipc: Node number set to 1674 [ 99.182203][ T6103] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 99.185889][ T6105] tipc: Cannot configure node identity twice [ 99.188836][ T6103] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.188966][ T6103] vhci_hcd vhci_hcd.0: Device attached [ 99.211442][ T6109] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 99.235321][ T6106] vhci_hcd: connection closed [ 99.236840][ T12] vhci_hcd: stop threads [ 99.246153][ T12] vhci_hcd: release socket [ 99.250723][ T12] vhci_hcd: disconnect device [ 99.257721][ T6082] wg1 speed is unknown, defaulting to 1000 [ 99.564274][ T6114] infiniband syz2: set active [ 99.569078][ T6114] infiniband syz2: added veth0_to_bond [ 99.732255][ T6114] RDS/IB: syz2: added [ 99.783376][ T6114] smc: adding ib device syz2 with port count 1 [ 99.866023][ T6114] smc: ib device syz2 port 1 has pnetid [ 99.923944][ T6123] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 99.931841][ T6123] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 99.958914][ T6123] team0: Failed to send options change via netlink (err -105) [ 99.966567][ T6123] team0: Port device batadv1 added [ 100.256974][ T6138] 0ªX¹¦À: renamed from caif0 [ 100.342019][ T6138] 0ªX¹¦À: entered allmulticast mode [ 100.348152][ T6138] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 100.365500][ T6143] netlink: 'syz.4.799': attribute type 4 has an invalid length. [ 100.398744][ T6148] netlink: 'syz.0.801': attribute type 10 has an invalid length. [ 100.521203][ T6158] Invalid ELF header magic: != ELF [ 101.337973][ C0] ================================================================== [ 101.346092][ C0] BUG: KCSAN: data-race in serial8250_do_startup / serial8250_handle_irq [ 101.354532][ C0] [ 101.356850][ C0] write to 0xffffffff88e91976 of 1 bytes by task 6187 on cpu 1: [ 101.364490][ C0] serial8250_do_startup+0x1661/0x1eb0 [ 101.369963][ C0] serial8250_startup+0x41/0x50 [ 101.374815][ C0] uart_startup+0x466/0x930 [ 101.379351][ C0] uart_port_activate+0x67/0xc0 [ 101.384206][ C0] tty_port_open+0x148/0x1d0 [ 101.388814][ C0] uart_open+0x30/0x40 [ 101.392898][ C0] tty_open+0x3d1/0xaf0 [ 101.397086][ C0] chrdev_open+0x2e8/0x3a0 [ 101.401610][ C0] do_dentry_open+0x646/0xa20 [ 101.406386][ C0] vfs_open+0x37/0x1e0 [ 101.410466][ C0] path_openat+0x1c5e/0x2170 [ 101.415078][ C0] do_filp_open+0x109/0x230 [ 101.419594][ C0] do_sys_openat2+0xa6/0x110 [ 101.424187][ C0] __x64_sys_openat+0xf2/0x120 [ 101.428964][ C0] x64_sys_call+0x1af/0x2fb0 [ 101.433564][ C0] do_syscall_64+0xd0/0x1a0 [ 101.438084][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.444095][ C0] [ 101.446411][ C0] read to 0xffffffff88e91976 of 1 bytes by interrupt on cpu 0: [ 101.453957][ C0] serial8250_handle_irq+0x3f9/0x660 [ 101.459257][ C0] serial8250_default_handle_irq+0x8e/0x120 [ 101.465167][ C0] serial8250_interrupt+0x60/0x110 [ 101.470284][ C0] __handle_irq_event_percpu+0x90/0x440 [ 101.475832][ C0] handle_irq_event+0x64/0xf0 [ 101.480528][ C0] handle_edge_irq+0x1d0/0x5d0 [ 101.485287][ C0] __common_interrupt+0x60/0x100 [ 101.490229][ C0] common_interrupt+0x7e/0x90 [ 101.494938][ C0] asm_common_interrupt+0x26/0x40 [ 101.499978][ C0] __sanitizer_cov_trace_pc+0x37/0x70 [ 101.505465][ C0] __skb_datagram_iter+0x469/0x680 [ 101.510604][ C0] skb_copy_datagram_iter+0x3d/0x110 [ 101.515904][ C0] __unix_dgram_recvmsg+0x4df/0x840 [ 101.521099][ C0] unix_dgram_recvmsg+0x81/0x90 [ 101.525952][ C0] sock_recvmsg_nosec+0x107/0x130 [ 101.530980][ C0] ____sys_recvmsg+0x26f/0x280 [ 101.535742][ C0] ___sys_recvmsg+0x11f/0x370 [ 101.540415][ C0] do_recvmmsg+0x1ef/0x540 [ 101.544844][ C0] __x64_sys_recvmmsg+0xe5/0x170 [ 101.549781][ C0] x64_sys_call+0x1c6a/0x2fb0 [ 101.554455][ C0] do_syscall_64+0xd0/0x1a0 [ 101.558956][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.564864][ C0] [ 101.567178][ C0] value changed: 0x00 -> 0x05 [ 101.571845][ C0] [ 101.574159][ C0] Reported by Kernel Concurrency Sanitizer on: [ 101.580317][ C0] CPU: 0 UID: 0 PID: 6177 Comm: syz.1.814 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 101.592638][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 101.602695][ C0] ================================================================== [ 101.772948][ T6170] Falling back ldisc for ttyS3. [ 103.233741][ T2178] veth0_to_bond: left promiscuous mode