last executing test programs: 1m7.687821769s ago: executing program 4 (id=79): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) 1m7.083071314s ago: executing program 4 (id=88): socket(0x840000000002, 0x3, 0x100) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000002c0)={[{@noblock_validity}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x803}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) 1m6.230011991s ago: executing program 4 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0xfffffffffffffd08, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000800000014000400200100010000000000000000000000020c000480050001"], 0x70}}, 0x4008000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0x77bc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) 1m5.960732302s ago: executing program 4 (id=103): socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000480)='./file2\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[], 0x46, 0x2c1, &(0x7f0000001880)="$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") socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) syz_emit_ethernet(0x4f, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x9, 0x0) 1m5.053847741s ago: executing program 4 (id=118): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r2}, &(0x7f0000000180), &(0x7f0000000940)=r3}, 0x20) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 1m2.225108191s ago: executing program 4 (id=178): clock_gettime(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) write$cgroup_subtree(r1, &(0x7f0000000740)=ANY=[], 0x9) ftruncate(r3, 0x6000000) copy_file_range(r3, 0x0, r3, &(0x7f00000004c0)=0x100, 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x2, 0xfffffffffdffffff}) 1m2.194221793s ago: executing program 32 (id=178): clock_gettime(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) write$cgroup_subtree(r1, &(0x7f0000000740)=ANY=[], 0x9) ftruncate(r3, 0x6000000) copy_file_range(r3, 0x0, r3, &(0x7f00000004c0)=0x100, 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x2, 0xfffffffffdffffff}) 35.058444637s ago: executing program 1 (id=618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r2}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x84040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x5, 0x50}, 0xa002, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 34.631819666s ago: executing program 1 (id=630): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xd}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) 33.771548883s ago: executing program 1 (id=625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) creat(0x0, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = memfd_create(&(0x7f00000002c0)='\xd9\x16h\xde\xf3|m\xe9^\xf5\"@\x05\xa0\x8f\xaa\x86nwZ\x11**F\xdf\x0f\x00\x00\x00\x00\x00\x00\x00\x13\x03\xe8_\xad\r\x00\x00\x00\x00\x00f', 0x7) lseek(r1, 0xfffffffffffffffb, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, 0x0, 0x0, 0x4004040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 33.640166478s ago: executing program 1 (id=627): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0xf9, 0x7ffc1ffb}]}) clock_settime(0xfffffffb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc496cf5de499ae74, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 33.272986984s ago: executing program 1 (id=633): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@printk={@llu}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) fchown(0xffffffffffffffff, 0x0, 0xee01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x204012, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 28.024057657s ago: executing program 1 (id=695): socket$inet6(0xa, 0x3, 0x3c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x1) unshare(0x40060080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c40)={0x14, 0x2f, 0x1, 0x70bd2c, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 28.023807507s ago: executing program 33 (id=695): socket$inet6(0xa, 0x3, 0x3c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x1) unshare(0x40060080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c40)={0x14, 0x2f, 0x1, 0x70bd2c, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 2.419866657s ago: executing program 0 (id=1093): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000004c0)={[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@uid_lt}, {@subj_type={'subj_type', 0x3d, ',$:@'}}, {@hash}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x0, 0x4ec, &(0x7f0000000880)="$eJzs3MFvFNUfAPDvbLu0wI8fFZEERC2gsTGxhYLCwQsmJh40MeJBjk1bSGUBQ3sQ0siSGDyTeDcejTdNvOrRePIPwIMHE0NClAvgaczszmy3291ut5Q2bT+fZNv3ZubNe29m3uybeTsTwLY1nP1JIv4XEXcjYm89uniB4fq/Rw/mJx8/mJ+Mapqe+zupLfcwi+eKdLvzyEgpovRF0rLCutnrNy5NVCrT16Jai4/NXf50bPb6jddnLk9cnL44fWX8zJlTJ0+cfnP8jdakg10r1Sa/rF4PD31+9fDBd8/feX+yv3VlzfXoqEj1T7XrolFs2w5eaV7fFrCnKZwsrdfNdS0MKzaYH4blrP3PV46e3+gCAesmTdN0oPPsatrq1pIpwKaVxEaXANgYxRd9dv1bfOpTyuvR/dhw98/WL4AePphPb0ZMPmrUvz9K+TLlluvbzDJ9pp4MR8TH1X+/zj6x3H2IP9YoQwBg2/v5bN4NTKKl/1eKA03L/T8fQxmKiGciYl9EPBsR+yPiuYhFyy6SRKTL5L+/dUIj/x/yUYTSvdXWbSWy/t9b+dhW8cnzLRYZ6stjeyKKDvP08XybjER54MJMZfpEh/Xv6JJ/c/8v+2T5F33BvBz3+ls6m1MTcxOrq+1S929FHOpvrX/Sn+24YhgniYiDEXGoh/UONYVnXvv2cCPSclnRvf41aZshvTUZP0u/iXi1vv+rsWj/L+SYNI9PlpaMT44NRmX6+Fh2FBxvm8evv93+oFP+Xev/45+tSd45/dO5J612Q7b/dzUd/1GM3y7UfyiJSBrjtbMRaV9vedz+/cvaeoePLZ232uN/R/JRLVy0r88mHtdOYzuS91qmz81dG19IW8Rr/0/U6z9yrH3735enybbE8xGRHcQvRMSLEX1F2Y9ExNGIaFO1hl/efvmTTvNWePw/NVn9p9qe/xbt/4Xx+hUGaikHI7IpfZeO3H3c4eSR13/v8vv/VC00kk9pf/5LFp0iVlrSJ96AAAAAsAmUovbb/9JoI1wqjY7W7wHtj12lytXZuZci4spU/RmBoSiXLsxUposbckNRTor7n0NN8fGW+Mn8vvFXfTtr8dHJq5Wpja48bHO7a20+WdL+M3/1eJ8X2IS20HNoQI+6tf8Dd9apIMC68/0P21dT++/0ZouqX8rA1uT7H7avdu3/Zny37LMLzhmw+aXaMmxry7f/7u/bBDav/viwEa499tz2aVtgK9L/h22p1+f6ewukA+1nDUabNwYMPp1i7GyT14YEsp7VGq6wHBErW3jnarIouoCd3/BQ6m2FA7F0Vl8slypp/x6HiKh2TJVtla7luXhgzQ/+4p0oa33YfL/QTssr3N1PGnC9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbCn/BQAA//94f9B3") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) chown(0x0, 0x0, r0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file7/file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="668fbf6ec63a1d31018f554ef7c48693126964c337686b105e07de39db9e1e75a576a4dd5377a581d77ee977", @ANYRES32=0xee01, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB], 0x74, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008000140fffffffe0c0002800800014004"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.961875117s ago: executing program 6 (id=1096): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.806588503s ago: executing program 0 (id=1099): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_free\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 1.731751416s ago: executing program 0 (id=1102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}}, 0x24}}, 0x40440c0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="010008"]) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x4, r3, 0x1, 0x3}, 0x49) 1.646957s ago: executing program 0 (id=1105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) 1.598316622s ago: executing program 6 (id=1106): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) nanosleep(&(0x7f00000002c0), &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) socket$inet(0x2, 0x1, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.597898382s ago: executing program 0 (id=1107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f310000140001007767320000000000000000000000000014000100"], 0xa8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x94) 1.520999685s ago: executing program 3 (id=1109): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='+\x93[@\x00_\x16\xaa\xd8)\xea\xc4\x86\xab\xec\xf4\xf3\xce\x05\xc7\x8f1\x117\xc7q*\x98\x9f\xa9\x8b\xce\xf1') r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) 1.430296829s ago: executing program 3 (id=1111): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11) r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.293329405s ago: executing program 0 (id=1115): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) 1.267603056s ago: executing program 3 (id=1116): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x820b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.205723699s ago: executing program 2 (id=1119): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10061, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x28) 988.326918ms ago: executing program 3 (id=1121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0xd}, {0x77d, 0x6, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x6, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x4, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x1000002, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0x7fffffff, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x4}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x3, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x800003, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0xb, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0xa}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 924.768701ms ago: executing program 3 (id=1122): unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10000, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x20}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x0, 0x0, 0x9}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r4, 0xffffffffffffffff, 0x0) 859.395423ms ago: executing program 5 (id=1124): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 839.858504ms ago: executing program 5 (id=1125): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0xfffffffe, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='tlb_flush\x00'}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 714.13833ms ago: executing program 6 (id=1126): r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_clone(0x1208000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mq_unlink(0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 665.529201ms ago: executing program 2 (id=1127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = getpid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, 0x0, 0x0) r3 = syz_pidfd_open(r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 664.804282ms ago: executing program 2 (id=1128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 592.121485ms ago: executing program 5 (id=1129): prlimit64(0x0, 0xe, 0x0, 0x0) capset(&(0x7f0000000340)={0x19980330}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r2, 0x4) fchown(r1, 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e459, 0x700000000000000) 591.500345ms ago: executing program 6 (id=1130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3e3}, {&(0x7f00000003c0)="847839fc378469d5765bd74a8532b82037b02c9e", 0x14}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 590.968175ms ago: executing program 6 (id=1131): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000640)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x4, '\bW'}]}}}}}}}}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}}, 0x0) 586.705835ms ago: executing program 2 (id=1132): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0xc9bc, 0x8, 0x2, 0x801ef}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 495.593729ms ago: executing program 6 (id=1133): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) socket$inet(0x2, 0x3, 0x9) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$AUDIT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4004040) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) 495.323929ms ago: executing program 2 (id=1134): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x2a020400) connect$pppoe(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) 494.660799ms ago: executing program 5 (id=1135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 323.359367ms ago: executing program 5 (id=1136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r6}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 66.789127ms ago: executing program 3 (id=1137): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r2, 0x0) 29.521869ms ago: executing program 5 (id=1138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002f80)=ANY=[@ANYBLOB="9c1300000801010426bd7000fbdbdf2500000005b20076807b096674bb4030bc4afaa9e93e2c1abf1194948a6e05233a882e4fdcee98ec3ba3aef0d4d8f606f5960114b3cf6225a92a9fd4572c76009e68dccf9117d598de118aa3bb3f3ae6681b418ace0f6b681998b79864f4227c2f9824407bab0c0ca2f5ac647d51ff2532449ad51850cff1b1d3eaf19689b2c30b8f3fe95f4f60d495ee44b75de5f8b1c4dad5635ba9984ed1dfce4f4a63b0f6029af06a96cd6c08009f00", @ANYRES32=r2, @ANYBLOB="6e13f308003b00fcaebadd4e7d5331720a646f9cc6a64586179d9fe08ae966f031f4d8c8b01325b94a2114cc93f5cadab7240337b626136cb7e4db89b00643f326f9937389de6613c49dec14b65cf358c7152ac177d097310a37", @ANYRESOCT=r1, @ANYRESOCT, @ANYRES32=r4, @ANYBLOB="028153"], 0x139c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x49, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) 0s ago: executing program 2 (id=1139): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) kernel console output (not intermixed with test programs): pc: Enabled bearer , priority 10 [ 44.550962][ T4234] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 44.555299][ T4238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 44.575684][ T4238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.590663][ T4241] loop2: detected capacity change from 0 to 512 [ 44.598716][ T4238] netlink: 'syz.0.234': attribute type 10 has an invalid length. [ 44.598932][ T4241] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.606609][ T4238] netlink: 32 bytes leftover after parsing attributes in process `syz.0.234'. [ 44.609899][ T4238] ipvlan2: entered promiscuous mode [ 44.615480][ T4241] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.624406][ T4238] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 44.647083][ T4238] bridge0: port 3(ipvlan2) entered blocking state [ 44.653766][ T4238] bridge0: port 3(ipvlan2) entered disabled state [ 44.660649][ T4238] ipvlan2: entered allmulticast mode [ 44.661190][ T3994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.666057][ T4238] bond1: entered allmulticast mode [ 44.681393][ T4238] ipvlan2: left allmulticast mode [ 44.686434][ T4238] bond1: left allmulticast mode [ 44.689185][ T4241] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.235: Allocating blocks 41-42 which overlap fs metadata [ 44.705453][ T4241] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.235: Allocating blocks 41-42 which overlap fs metadata [ 44.719440][ T4241] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.235: Failed to acquire dquot type 1 [ 44.730888][ T4241] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 44.745543][ T4241] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #12: comm syz.2.235: corrupted inode contents [ 44.758443][ T4241] EXT4-fs error (device loop2): ext4_dirty_inode:6513: inode #12: comm syz.2.235: mark_inode_dirty error [ 44.770604][ T4241] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #12: comm syz.2.235: corrupted inode contents [ 44.787043][ T4241] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.235: mark_inode_dirty error [ 44.798923][ T4241] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #12: comm syz.2.235: corrupted inode contents [ 44.811134][ T4241] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 44.833828][ T4251] syz.5.238 uses obsolete (PF_INET,SOCK_PACKET) [ 44.848910][ T4241] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #12: comm syz.2.235: corrupted inode contents [ 44.871951][ T4241] EXT4-fs error (device loop2): ext4_truncate:4633: inode #12: comm syz.2.235: mark_inode_dirty error [ 44.884979][ T4241] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 44.894410][ T4241] EXT4-fs (loop2): 1 truncate cleaned up [ 44.900681][ T4241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.924028][ T4241] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.235: Allocating blocks 41-42 which overlap fs metadata [ 44.938108][ T4241] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.235: Failed to acquire dquot type 1 [ 44.950355][ T4241] mmap: syz.2.235 (4241) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.977127][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.985952][ T4258] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 45.049592][ T4267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.246'. [ 45.064173][ T921] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 45.072756][ T921] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 45.092382][ T921] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 45.100735][ T921] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 45.126989][ T921] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 45.135341][ T921] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 45.156946][ T4275] loop0: detected capacity change from 0 to 256 [ 45.163386][ T4269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.179971][ T4275] FAT-fs (loop0): bogus number of FAT sectors [ 45.186065][ T4275] FAT-fs (loop0): Can't find a valid FAT filesystem [ 45.198367][ T2651] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 45.206673][ T2651] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 45.272605][ T4284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 45.297635][ T4284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'. [ 45.380752][ T4293] netlink: 'syz.1.257': attribute type 10 has an invalid length. [ 45.396938][ T4293] netlink: 'syz.1.257': attribute type 10 has an invalid length. [ 45.405957][ T4293] team0: Port device dummy0 removed [ 45.414305][ T4293] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.428539][ T4297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.259'. [ 45.529873][ T4300] infiniband syz!: set active [ 45.534847][ T4300] infiniband syz!: added team_slave_0 [ 45.540969][ T3403] tipc: Node number set to 2886997007 [ 45.556155][ T4300] RDS/IB: syz!: added [ 45.566124][ T4300] smc: adding ib device syz! with port count 1 [ 45.572418][ T4300] smc: ib device syz! port 1 has no pnetid [ 45.607377][ T4316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.267'. [ 45.618579][ T4316] ip6gre1: entered promiscuous mode [ 45.623898][ T4316] ip6gre1: entered allmulticast mode [ 45.649678][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 46.027946][ T4353] team0 (unregistering): Port device team_slave_0 removed [ 46.045340][ T4353] team0 (unregistering): Port device team_slave_1 removed [ 46.130583][ T4362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.180948][ T4362] netlink: 'syz.1.286': attribute type 10 has an invalid length. [ 46.211956][ T4362] ipvlan2: entered promiscuous mode [ 46.217368][ T4362] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 46.225497][ T4362] bridge0: port 3(ipvlan2) entered blocking state [ 46.232068][ T4362] bridge0: port 3(ipvlan2) entered disabled state [ 46.238678][ T4362] ipvlan2: entered allmulticast mode [ 46.244061][ T4362] bond1: entered allmulticast mode [ 46.249838][ T4362] ipvlan2: left allmulticast mode [ 46.254926][ T4362] bond1: left allmulticast mode [ 46.502975][ T4389] tipc: Started in network mode [ 46.507904][ T4389] tipc: Node identity 4, cluster identity 4711 [ 46.514224][ T4389] tipc: Node number set to 4 [ 46.614857][ T4394] netlink: 'syz.3.297': attribute type 10 has an invalid length. [ 46.627772][ T4394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.649029][ T4394] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 46.651255][ T4396] loop1: detected capacity change from 0 to 2048 [ 46.711984][ T4396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 46.756473][ T4404] loop0: detected capacity change from 0 to 512 [ 46.763023][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 46.763035][ T29] audit: type=1400 audit(1764776119.465:1037): avc: denied { read append open } for pid=4395 comm="syz.1.300" path="/66/file2/memory.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.787210][ T4404] EXT4-fs: Ignoring removed i_version option [ 46.799341][ T4404] EXT4-fs: Ignoring removed bh option [ 46.846185][ T4404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.861280][ T4404] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.871628][ T29] audit: type=1400 audit(1764776119.555:1038): avc: denied { map } for pid=4395 comm="syz.1.300" path="/66/file2/memory.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.894621][ T29] audit: type=1400 audit(1764776119.555:1039): avc: denied { write } for pid=4395 comm="syz.1.300" path="/66/file2/memory.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.923137][ T4396] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.923936][ T29] audit: type=1400 audit(1764776119.575:1040): avc: denied { ioctl } for pid=4402 comm="syz.0.302" path="/90/bus/file1" dev="loop0" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.964848][ T4396] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1060 with error 28 [ 46.977395][ T4396] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.977395][ T4396] [ 46.987048][ T4396] EXT4-fs (loop1): Total free blocks count 0 [ 46.989089][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.993353][ T4396] EXT4-fs (loop1): Free/Dirty block details [ 47.008143][ T4396] EXT4-fs (loop1): free_blocks=2415919104 [ 47.013955][ T4396] EXT4-fs (loop1): dirty_blocks=1072 [ 47.019232][ T4396] EXT4-fs (loop1): Block reservation details [ 47.025271][ T4396] EXT4-fs (loop1): i_reserved_data_blocks=67 [ 47.031795][ T4411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4411 comm=syz.1.300 [ 47.062182][ T4415] netlink: 'syz.0.304': attribute type 10 has an invalid length. [ 47.073775][ T4415] team0: Port device dummy0 added [ 47.098904][ T4415] netlink: 'syz.0.304': attribute type 10 has an invalid length. [ 47.107180][ T4415] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.131733][ T4415] team0: Failed to send options change via netlink (err -105) [ 47.144156][ T4415] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.210261][ T4415] team0: Port device dummy0 removed [ 47.218401][ T4415] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.286808][ T2651] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1060 with error 28 [ 47.452745][ T29] audit: type=1326 audit(1764776120.155:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4439 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 47.479093][ T29] audit: type=1326 audit(1764776120.175:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4439 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 47.503771][ T29] audit: type=1326 audit(1764776120.175:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4439 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 47.527164][ T29] audit: type=1326 audit(1764776120.175:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4439 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 47.551904][ T29] audit: type=1326 audit(1764776120.255:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4439 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 47.575532][ T29] audit: type=1326 audit(1764776120.255:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4439 comm="syz.5.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 47.748713][ T4448] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 47.784607][ T4454] netlink: 'syz.1.322': attribute type 20 has an invalid length. [ 47.801084][ T42] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.801135][ T4454] netlink: 'syz.1.322': attribute type 20 has an invalid length. [ 47.809522][ T42] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.829061][ T42] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.837412][ T42] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.873398][ T4458] loop2: detected capacity change from 0 to 512 [ 47.898811][ T4458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.913250][ T4458] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.933649][ T4464] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.954531][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.986882][ T4466] loop2: detected capacity change from 0 to 512 [ 47.995801][ T4464] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.011906][ T4466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.028883][ T4466] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.042605][ T4466] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #2: comm syz.2.327: corrupted inode contents [ 48.055022][ T4466] EXT4-fs error (device loop2): ext4_dirty_inode:6513: inode #2: comm syz.2.327: mark_inode_dirty error [ 48.066781][ T4466] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #2: comm syz.2.327: corrupted inode contents [ 48.080423][ T4464] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.080779][ T4466] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #2: comm syz.2.327: corrupted inode contents [ 48.102668][ T4466] EXT4-fs error (device loop2): ext4_dirty_inode:6513: inode #2: comm syz.2.327: mark_inode_dirty error [ 48.115031][ T4466] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #2: comm syz.2.327: corrupted inode contents [ 48.127252][ T4466] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.327: mark_inode_dirty error [ 48.140691][ T4466] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #2: comm syz.2.327: corrupted inode contents [ 48.153287][ T4466] EXT4-fs error (device loop2): ext4_dirty_inode:6513: inode #2: comm syz.2.327: mark_inode_dirty error [ 48.170134][ T4464] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.207543][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.249571][ T42] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.261794][ T42] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.295498][ T42] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.306765][ T42] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.364410][ T3680] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 48.372085][ T3680] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 48.379502][ T3680] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 48.387095][ T3680] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 48.394600][ T3680] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 48.398004][ T4487] veth2: entered promiscuous mode [ 48.402117][ T3680] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 48.407125][ T4487] veth2: entered allmulticast mode [ 48.414593][ T3680] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 48.427082][ T3680] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 48.434534][ T3680] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 48.441936][ T3680] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 48.450161][ T3680] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 48.494789][ T4490] fido_id[4490]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 48.555110][ T4495] veth8: entered promiscuous mode [ 48.560208][ T4495] veth8: entered allmulticast mode [ 48.707412][ T4483] loop1: detected capacity change from 0 to 32768 [ 48.762316][ T4010] loop1: p1 p2 p3 < p5 p6 > [ 48.776761][ T4010] loop1: p1 size 242222080 extends beyond EOD, truncated [ 48.785269][ T4010] loop1: p2 start 4294967295 is beyond EOD, truncated [ 48.796825][ T4483] loop1: p1 p2 p3 < p5 p6 > [ 48.801623][ T4483] loop1: p1 size 242222080 extends beyond EOD, truncated [ 48.809413][ T4483] loop1: p2 start 4294967295 is beyond EOD, truncated [ 48.822469][ T3008] loop1: p1 p2 p3 < p5 p6 > [ 48.827347][ T3008] loop1: p1 size 242222080 extends beyond EOD, truncated [ 48.835407][ T3008] loop1: p2 start 4294967295 is beyond EOD, truncated [ 48.911435][ T4010] udevd[4010]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 48.911468][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 48.924824][ T3708] udevd[3708]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 48.942302][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 48.957431][ T4010] udevd[4010]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 48.969837][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 48.971053][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 48.986127][ T3708] udevd[3708]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 49.010670][ T4010] udevd[4010]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 49.021341][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 49.050202][ T4519] loop1: detected capacity change from 0 to 256 [ 49.057848][ T4519] FAT-fs (loop1): bogus number of FAT sectors [ 49.063969][ T4519] FAT-fs (loop1): Can't find a valid FAT filesystem [ 49.249850][ T4532] loop2: detected capacity change from 0 to 1024 [ 49.257013][ T4532] EXT4-fs: Ignoring removed bh option [ 49.281452][ T4532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.389648][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.504736][ T4562] __nla_validate_parse: 16 callbacks suppressed [ 49.504765][ T4562] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.357'. [ 49.521139][ T4562] netlink: zone id is out of range [ 49.526262][ T4562] netlink: zone id is out of range [ 49.531808][ T4562] netlink: zone id is out of range [ 49.537143][ T4562] netlink: del zone limit has 8 unknown bytes [ 50.461825][ T4684] tipc: Cannot configure node identity twice [ 50.517898][ T4700] 9p: Unknown access argument : -22 [ 50.715716][ T4713] loop2: detected capacity change from 0 to 2048 [ 50.741113][ T4713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.754294][ T4713] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.853286][ T4720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.872413][ T4720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.436715][ T4733] loop0: detected capacity change from 0 to 512 [ 51.457327][ T4733] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.470640][ T4733] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.533832][ T4733] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 51.547166][ T4733] EXT4-fs (loop0): 1 truncate cleaned up [ 51.554888][ T4733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.608849][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.629867][ T2871] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 345: padding at end of block bitmap is not set [ 51.654798][ T2871] EXT4-fs (loop2): Remounting filesystem read-only [ 51.695509][ T4750] syzkaller0: entered allmulticast mode [ 51.737685][ T4756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.386'. [ 51.745969][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.793182][ T4763] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4763 comm=wޣ [ 51.805318][ T4763] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4763 comm=wޣ [ 51.873702][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 51.873717][ T29] audit: type=1400 audit(1764776124.575:1159): avc: denied { write } for pid=4769 comm="syz.5.395" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.883637][ T4772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 51.970855][ T4770] netlink: 'syz.5.395': attribute type 11 has an invalid length. [ 52.034415][ T4776] loop5: detected capacity change from 0 to 2048 [ 52.067055][ T4781] loop2: detected capacity change from 0 to 512 [ 52.077687][ T4776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.079251][ T4781] EXT4-fs: Ignoring removed i_version option [ 52.095771][ T4781] EXT4-fs: Ignoring removed bh option [ 52.097104][ T4776] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.122176][ T4781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.134978][ T4781] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.173234][ T4789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.186504][ T4789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.226555][ T4792] loop1: detected capacity change from 0 to 512 [ 52.262059][ T4792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.288136][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.297709][ T4792] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.327301][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.363306][ T29] audit: type=1326 audit(1764776125.065:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 52.387570][ T29] audit: type=1326 audit(1764776125.065:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 52.411008][ T29] audit: type=1326 audit(1764776125.095:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 52.438893][ T29] audit: type=1400 audit(1764776125.095:1163): avc: denied { mounton } for pid=4795 comm="syz.2.401" path="/51/file1" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 52.473347][ T29] audit: type=1326 audit(1764776125.175:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f94f172f783 code=0x7ffc0000 [ 52.496768][ T29] audit: type=1326 audit(1764776125.175:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f94f172f783 code=0x7ffc0000 [ 52.520115][ T29] audit: type=1326 audit(1764776125.175:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 52.543451][ T29] audit: type=1326 audit(1764776125.175:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 52.750942][ T4814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.405'. [ 52.822743][ T29] audit: type=1400 audit(1764776125.525:1168): avc: denied { mounton } for pid=4827 comm="syz.0.409" path="/108/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 52.894384][ T4838] random: crng reseeded on system resumption [ 52.999125][ T4849] loop0: detected capacity change from 0 to 128 [ 53.007733][ T2871] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 345: padding at end of block bitmap is not set [ 53.023112][ T2871] EXT4-fs (loop5): Remounting filesystem read-only [ 53.082423][ T3994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.175993][ T4862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.423'. [ 53.184966][ T4862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 53.280592][ T4876] netlink: 256 bytes leftover after parsing attributes in process `syz.0.426'. [ 53.444029][ T4898] loop0: detected capacity change from 0 to 512 [ 53.517665][ T4898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.539572][ T4898] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.554945][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 53.574525][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.599441][ T4915] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2660 [ 53.615819][ T4913] netlink: 2 bytes leftover after parsing attributes in process `syz.3.437'. [ 53.665201][ T4913] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.672392][ T4913] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.731764][ T4913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.741891][ T4913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.767437][ T4913] veth2: left promiscuous mode [ 53.772357][ T4913] veth2: left allmulticast mode [ 53.777602][ T4913] veth6: left promiscuous mode [ 53.782517][ T4913] veth6: left allmulticast mode [ 53.789112][ T4913] veth8: left promiscuous mode [ 53.794014][ T4913] veth8: left allmulticast mode [ 53.799700][ T2092] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.808905][ T2092] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.818016][ T2092] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.827057][ T2092] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.052336][ T4928] SELinux: failed to load policy [ 54.537694][ T4956] loop1: detected capacity change from 0 to 512 [ 54.544481][ T4956] EXT4-fs: Ignoring removed i_version option [ 54.550585][ T4956] EXT4-fs: Ignoring removed bh option [ 54.572562][ T4956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.585620][ T4956] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.611267][ T4963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 54.620715][ T4963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 54.655441][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.685299][ T4965] loop0: detected capacity change from 0 to 2048 [ 54.702769][ T4965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 54.770502][ T4965] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.785505][ T4965] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1486 with error 28 [ 54.797969][ T4965] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.797969][ T4965] [ 54.807630][ T4965] EXT4-fs (loop0): Total free blocks count 0 [ 54.813637][ T4965] EXT4-fs (loop0): Free/Dirty block details [ 54.819534][ T4965] EXT4-fs (loop0): free_blocks=2415919104 [ 54.825294][ T4965] EXT4-fs (loop0): dirty_blocks=1488 [ 54.830713][ T4965] EXT4-fs (loop0): Block reservation details [ 54.836679][ T4965] EXT4-fs (loop0): i_reserved_data_blocks=93 [ 54.846239][ T4977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4977 comm=syz.0.453 [ 55.448590][ T4990] veth4: entered promiscuous mode [ 55.453766][ T4990] veth4: entered allmulticast mode [ 55.490558][ T2092] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.584224][ T2092] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1486 with error 28 [ 55.619011][ T5010] loop2: detected capacity change from 0 to 512 [ 55.635911][ T5010] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.658448][ T5010] EXT4-fs (loop2): mount failed [ 55.764560][ T5018] loop0: detected capacity change from 0 to 512 [ 55.775516][ T5018] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.801751][ T5018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.814465][ T5018] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.859487][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 55.911396][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.718567][ T5032] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.772096][ T5032] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.822205][ T5032] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.904738][ T5046] bridge: RTM_NEWNEIGH with invalid ether address [ 56.931698][ T5032] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.046831][ T2871] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.057930][ T53] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.069136][ T53] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.081703][ T2871] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.184877][ T5054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5054 comm=syz.3.479 [ 57.425061][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 57.425074][ T29] audit: type=1400 audit(1764776130.125:1216): avc: denied { getopt } for pid=5080 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.452118][ T5081] serio: Serial port ptm1 [ 57.546352][ T5096] syzkaller0: entered allmulticast mode [ 57.550199][ T3543] Bluetooth: hci0: command 0x1003 tx timeout [ 57.553083][ T5096] syzkaller0: entered promiscuous mode [ 57.558052][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.571859][ T5096] syzkaller0 (unregistering): left allmulticast mode [ 57.578587][ T5096] syzkaller0 (unregistering): left promiscuous mode [ 57.602376][ T5101] loop5: detected capacity change from 0 to 2048 [ 57.624254][ T5101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 57.694800][ T5101] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.717204][ T5101] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1432 with error 28 [ 57.729872][ T5101] EXT4-fs (loop5): This should not happen!! Data will be lost [ 57.729872][ T5101] [ 57.740190][ T5101] EXT4-fs (loop5): Total free blocks count 0 [ 57.746256][ T5101] EXT4-fs (loop5): Free/Dirty block details [ 57.752187][ T5101] EXT4-fs (loop5): free_blocks=2415919104 [ 57.757910][ T5101] EXT4-fs (loop5): dirty_blocks=1440 [ 57.763277][ T5101] EXT4-fs (loop5): Block reservation details [ 57.769358][ T5101] EXT4-fs (loop5): i_reserved_data_blocks=90 [ 57.805335][ T5131] loop2: detected capacity change from 0 to 1024 [ 57.812123][ T5131] EXT4-fs: Ignoring removed orlov option [ 57.828571][ T5131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.843024][ T5128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5128 comm=syz.5.485 [ 57.891106][ T5139] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.900990][ T5139] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 57.911028][ T5139] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 58.041574][ T5139] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.051393][ T5139] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 58.061262][ T5139] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 58.230575][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 58.252642][ T5174] bond0: (slave team0): Releasing backup interface [ 58.268806][ T29] audit: type=1326 audit(1764776130.965:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b9d4f749 code=0x7ffc0000 [ 58.293942][ T5174] team0 (unregistering): Port device team_slave_0 removed [ 58.311634][ T5174] team0 (unregistering): Port device team_slave_1 removed [ 58.322268][ T29] audit: type=1326 audit(1764776130.965:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b9d4f749 code=0x7ffc0000 [ 58.345793][ T29] audit: type=1326 audit(1764776130.965:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77b9d4f749 code=0x7ffc0000 [ 58.369170][ T29] audit: type=1326 audit(1764776130.965:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b9d4f749 code=0x7ffc0000 [ 58.392550][ T29] audit: type=1326 audit(1764776130.965:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77b9d4f749 code=0x7ffc0000 [ 58.415905][ T29] audit: type=1326 audit(1764776130.965:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b9d4f749 code=0x7ffc0000 [ 58.439417][ T29] audit: type=1326 audit(1764776130.965:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77b9d4f749 code=0x7ffc0000 [ 58.462926][ T29] audit: type=1326 audit(1764776130.965:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b9d4f749 code=0x7ffc0000 [ 58.486336][ T29] audit: type=1326 audit(1764776130.965:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77b9d4f749 code=0x7ffc0000 [ 58.517143][ T4627] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1432 with error 28 [ 58.518895][ T5178] pim6reg: entered allmulticast mode [ 58.556426][ T5139] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.566269][ T5139] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 58.576150][ T5139] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 58.596703][ T5180] pim6reg: left allmulticast mode [ 58.623891][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.625269][ T5187] netlink: 176 bytes leftover after parsing attributes in process `syz.3.497'. [ 58.662075][ T5139] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.671920][ T5139] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 58.681866][ T5139] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 58.728882][ T5191] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5191 comm=syz.3.499 [ 58.741547][ T5191] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5191 comm=syz.3.499 [ 58.758158][ T5194] loop2: detected capacity change from 0 to 1024 [ 58.778443][ T5194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.798469][ T5199] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.826138][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.834440][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 58.842813][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 58.855029][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.863328][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 58.871759][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 58.881937][ T5199] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.899426][ T5194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.929389][ T934] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.937744][ T934] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 58.946040][ T934] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 58.954374][ T934] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.962607][ T934] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 58.971141][ T934] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 58.982918][ T5199] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.039741][ T5210] serio: Serial port ptm0 [ 59.046135][ T5199] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.127963][ T934] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.154707][ T934] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.185362][ T934] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.222865][ T934] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.317776][ T5249] loop5: detected capacity change from 0 to 164 [ 60.362441][ T5249] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 60.392563][ T5249] netlink: 'syz.5.517': attribute type 21 has an invalid length. [ 60.406915][ T5249] netlink: 132 bytes leftover after parsing attributes in process `syz.5.517'. [ 60.443284][ T5252] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 60.456234][ T5254] loop1: detected capacity change from 0 to 128 [ 60.534678][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.550590][ T5264] syzkaller0: entered allmulticast mode [ 60.582989][ T5264] syzkaller0: entered promiscuous mode [ 60.596159][ T5256] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 60.608201][ T5264] syzkaller0 (unregistering): left allmulticast mode [ 60.615330][ T5264] syzkaller0 (unregistering): left promiscuous mode [ 60.615401][ T5268] loop2: detected capacity change from 0 to 2048 [ 60.640676][ T5268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 60.673720][ T5254] syz.1.519: attempt to access beyond end of device [ 60.673720][ T5254] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 60.753107][ T5268] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.768071][ T5268] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1586 with error 28 [ 60.780660][ T5268] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.780660][ T5268] [ 60.790316][ T5268] EXT4-fs (loop2): Total free blocks count 0 [ 60.796390][ T5268] EXT4-fs (loop2): Free/Dirty block details [ 60.802326][ T5268] EXT4-fs (loop2): free_blocks=2415919104 [ 60.808050][ T5268] EXT4-fs (loop2): dirty_blocks=1600 [ 60.813348][ T5268] EXT4-fs (loop2): Block reservation details [ 60.819403][ T5268] EXT4-fs (loop2): i_reserved_data_blocks=100 [ 60.826351][ T5280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5280 comm=syz.2.524 [ 60.960003][ T5285] loop5: detected capacity change from 0 to 2048 [ 60.975373][ T5283] SELinux: failed to load policy [ 61.011903][ T5285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 61.032757][ T5285] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.058480][ T3994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 61.179831][ T5294] loop0: detected capacity change from 0 to 512 [ 61.216898][ T5294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.248969][ T5294] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.309217][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.410740][ T4627] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1586 with error 28 [ 61.454473][ T5302] syzkaller0: entered promiscuous mode [ 61.460214][ T5302] syzkaller0: entered allmulticast mode [ 61.560915][ T5306] loop2: detected capacity change from 0 to 8192 [ 62.057829][ T5321] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.103992][ T5321] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.174229][ T5321] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.244105][ T5321] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.312720][ T42] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.327071][ T42] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.342727][ T42] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.360767][ T42] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.566580][ T5329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 62.598504][ T5332] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.608420][ T5332] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 62.618270][ T5332] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 62.631229][ T5333] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.671826][ T5332] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.681703][ T5332] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 62.691608][ T5332] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 62.741398][ T5333] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.775626][ T5332] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.785454][ T5332] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 62.795364][ T5332] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 62.891428][ T5333] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.926087][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 62.926101][ T29] audit: type=1326 audit(1764776135.625:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.2.548" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9a484f749 code=0x0 [ 62.955881][ T5332] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.965627][ T5332] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 62.975596][ T5332] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 62.996177][ T5333] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.564797][ T53] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.573082][ T53] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 63.581420][ T53] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 63.592958][ T53] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.601279][ T53] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 63.609543][ T53] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 63.621164][ T53] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.629410][ T53] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 63.637792][ T53] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 63.648415][ T53] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.656644][ T53] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 63.664906][ T53] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 63.898443][ T29] audit: type=1400 audit(1764776136.595:1253): avc: denied { mounton } for pid=5355 comm="syz.2.554" path="/proc/203/task" dev="proc" ino=12492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 64.055301][ T5361] loop2: detected capacity change from 0 to 512 [ 64.062082][ T29] audit: type=1400 audit(1764776136.765:1254): avc: denied { mounton } for pid=5360 comm="syz.2.555" path="/81/bus" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.062314][ T5361] EXT4-fs: dax option not supported [ 64.109035][ T29] audit: type=1400 audit(1764776136.805:1255): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 64.148130][ T5363] loop2: detected capacity change from 0 to 1024 [ 64.155402][ T5363] EXT4-fs: Ignoring removed orlov option [ 64.173094][ T5363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.352231][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.375644][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 64.394547][ T5375] bridge0: port 3(batadv1) entered blocking state [ 64.401342][ T5375] bridge0: port 3(batadv1) entered disabled state [ 64.408895][ T5375] batadv1: entered allmulticast mode [ 64.415269][ T5375] batadv1: entered promiscuous mode [ 64.498806][ T5382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.563'. [ 64.855711][ T5404] batman_adv: batadv0: Adding interface: dummy0 [ 64.862105][ T5404] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.888642][ T29] audit: type=1400 audit(1764776137.555:1256): avc: denied { create } for pid=5403 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.908255][ T4628] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 64.917491][ T4628] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 64.947615][ T5404] batman_adv: batadv0: Interface activated: dummy0 [ 64.976982][ T29] audit: type=1400 audit(1764776137.675:1257): avc: denied { ioctl } for pid=5403 comm="syz.2.572" path="socket:[11772]" dev="sockfs" ino=11772 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 65.010420][ T5404] batadv0: mtu less than device minimum [ 65.016555][ T5404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.027501][ T5404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.038629][ T5404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.049624][ T5404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.060613][ T5404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.071582][ T5404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.082366][ T5404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.094154][ T5404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.105320][ T5404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.138338][ T5410] netlink: 'syz.1.574': attribute type 12 has an invalid length. [ 65.155886][ T5413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.575'. [ 65.171177][ T5415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'. [ 65.228674][ T5420] netlink: 96 bytes leftover after parsing attributes in process `syz.1.578'. [ 65.267425][ T5423] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.277587][ T5423] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 65.287508][ T5423] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 65.392383][ T5423] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.402273][ T5423] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 65.412201][ T5423] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 65.430336][ T5429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.581'. [ 65.491146][ T5429] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5429 comm=syz.0.581 [ 65.492066][ T5423] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.513522][ T5423] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 65.523425][ T5423] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 65.591813][ T5423] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.601692][ T5423] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 65.611651][ T5423] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 65.868990][ T5439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 65.930230][ T4634] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.947401][ T4634] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.965827][ T4634] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.991728][ T4634] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.032383][ T29] audit: type=1326 audit(1764776138.735:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5444 comm="syz.5.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 66.055985][ T29] audit: type=1326 audit(1764776138.735:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5444 comm="syz.5.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 66.080068][ T29] audit: type=1326 audit(1764776138.735:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5444 comm="syz.5.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 66.103516][ T29] audit: type=1326 audit(1764776138.735:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5444 comm="syz.5.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 66.361966][ T5466] loop5: detected capacity change from 0 to 512 [ 66.373127][ T5466] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.384743][ T5466] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 66.394845][ T5466] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.594: Corrupt directory, running e2fsck is recommended [ 66.408037][ T5466] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 66.416547][ T5466] EXT4-fs error (device loop5): ext4_iget_extra_inode:5071: inode #15: comm syz.5.594: corrupted in-inode xattr: invalid ea_ino [ 66.430540][ T5466] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.594: couldn't read orphan inode 15 (err -117) [ 66.442838][ T5466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.526473][ T5474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 66.561756][ T3994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.692174][ T5488] loop5: detected capacity change from 0 to 2048 [ 66.737714][ T5492] syzkaller0: entered allmulticast mode [ 66.743706][ T5492] syzkaller0: entered promiscuous mode [ 66.755399][ T5492] syzkaller0 (unregistering): left allmulticast mode [ 66.762205][ T5492] syzkaller0 (unregistering): left promiscuous mode [ 66.960032][ T5496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.605'. [ 67.138213][ T5504] capability: warning: `syz.2.608' uses 32-bit capabilities (legacy support in use) [ 67.545747][ T4627] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.554047][ T4627] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 67.562360][ T4627] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 67.686042][ T4627] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.694295][ T4627] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 67.702572][ T4627] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 67.773263][ T4627] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.781556][ T4627] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 67.789845][ T4627] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 67.811555][ T4627] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.819821][ T4627] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 67.828099][ T4627] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 68.048837][ T5538] netlink: 'syz.1.630': attribute type 13 has an invalid length. [ 68.122794][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.129966][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.185984][ T5540] loop5: detected capacity change from 0 to 1024 [ 68.225980][ T5540] EXT4-fs: Ignoring removed orlov option [ 68.238482][ T5538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.256224][ T5540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.262844][ T5538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.355444][ T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.363956][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 68.372430][ T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 68.461980][ T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.470393][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 68.478848][ T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 68.517700][ T5546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.622'. [ 68.529008][ T5546] netem: change failed [ 68.571110][ T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.579664][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 68.588236][ T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 68.713870][ T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.722280][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 68.730737][ T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 68.932522][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 68.932537][ T29] audit: type=1326 audit(1764776141.635:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 68.993240][ T5558] loop1: detected capacity change from 0 to 512 [ 69.027599][ T5558] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.042741][ T3994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.054782][ T5558] EXT4-fs (loop1): 1 truncate cleaned up [ 69.066167][ T5558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.120015][ T29] audit: type=1326 audit(1764776141.635:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 69.143403][ T29] audit: type=1326 audit(1764776141.635:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 69.166723][ T29] audit: type=1326 audit(1764776141.635:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 69.190040][ T29] audit: type=1326 audit(1764776141.635:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 69.213305][ T29] audit: type=1326 audit(1764776141.635:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 69.236789][ T29] audit: type=1326 audit(1764776141.635:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 69.260156][ T29] audit: type=1326 audit(1764776141.635:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 69.283553][ T29] audit: type=1326 audit(1764776141.635:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 69.306789][ T29] audit: type=1326 audit(1764776141.635:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f172f749 code=0x7ffc0000 [ 69.393892][ T3317] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /116/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 69.460964][ T3317] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 69.493748][ T5573] netlink: 'syz.3.632': attribute type 4 has an invalid length. [ 69.510319][ T3317] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /116/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 69.512399][ T5574] netlink: 'syz.2.634': attribute type 10 has an invalid length. [ 69.534715][ T5571] batman_adv: batadv0: Interface deactivated: dummy0 [ 69.539690][ T5574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.634'. [ 69.546413][ T5571] batman_adv: batadv0: Removing interface: dummy0 [ 69.560327][ T5575] netlink: 'syz.3.632': attribute type 4 has an invalid length. [ 69.577309][ T5571] bridge_slave_0: left allmulticast mode [ 69.580055][ T3317] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 69.583071][ T5571] bridge_slave_0: left promiscuous mode [ 69.608171][ T5571] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.618530][ T5571] bridge_slave_1: left allmulticast mode [ 69.624359][ T5571] bridge_slave_1: left promiscuous mode [ 69.630128][ T5571] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.632994][ T3317] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /116/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 69.650994][ T5577] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.632'. [ 69.681791][ T3317] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 69.702219][ T3317] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /116/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 69.724753][ T3317] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 69.726911][ T5571] bond0: (slave bond_slave_0): Releasing backup interface [ 69.752536][ T3317] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /116/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 69.785772][ T5571] bond0: (slave bond_slave_1): Releasing backup interface [ 69.792738][ T3317] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 69.822975][ T5571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.830507][ T5571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.840460][ T5571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.847873][ T5571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.865745][ T5574] batman_adv: batadv0: Adding interface: veth1_vlan [ 69.872410][ T5574] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.898773][ T5574] batman_adv: batadv0: Interface activated: veth1_vlan [ 69.989420][ T5388] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.155336][ T5600] vlan2: entered allmulticast mode [ 70.165085][ T5602] netlink: 'syz.3.645': attribute type 27 has an invalid length. [ 70.188819][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.197795][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.207580][ T5602] net_ratelimit: 314 callbacks suppressed [ 70.207590][ T5602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.360319][ T5639] veth2: entered promiscuous mode [ 71.365410][ T5639] veth2: entered allmulticast mode [ 71.384818][ T5641] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.432096][ T5647] syzkaller0: entered promiscuous mode [ 71.437606][ T5647] syzkaller0: entered allmulticast mode [ 71.463009][ T5641] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.521841][ T5641] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.568019][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 71.585736][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 71.599580][ T5659] team0 (unregistering): Port device team_slave_0 removed [ 71.610287][ T5659] team0 (unregistering): Port device team_slave_1 removed [ 71.621982][ T5641] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.667112][ T5665] loop2: detected capacity change from 0 to 1024 [ 71.667462][ T5624] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.693286][ T5665] EXT4-fs: Ignoring removed oldalloc option [ 71.699387][ T5665] EXT4-fs: Ignoring removed bh option [ 71.700484][ T5624] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.713609][ T5624] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.723384][ T5665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.736219][ T5624] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.400273][ T5681] geneve2: entered promiscuous mode [ 72.405518][ T5681] geneve2: entered allmulticast mode [ 72.546697][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.570510][ T3543] Bluetooth: hci0: sending frame failed (-49) [ 72.576629][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 73.710574][ T5719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.680'. [ 73.724870][ T5721] bond0: (slave dummy0): Releasing backup interface [ 73.733289][ T5721] batman_adv: batadv0: Adding interface: dummy0 [ 73.739537][ T5721] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.764832][ T5721] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 73.797555][ T5728] netlink: 'syz.2.683': attribute type 4 has an invalid length. [ 73.805293][ T5728] netlink: 152 bytes leftover after parsing attributes in process `syz.2.683'. [ 73.843672][ T5728] .`: renamed from bond0 (while UP) [ 73.857083][ T5732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.685'. [ 73.903209][ T5736] loop2: detected capacity change from 0 to 256 [ 73.973957][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 74.006798][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 74.006810][ T29] audit: type=1400 audit(1764776146.705:1489): avc: denied { firmware_load } for pid=5739 comm="syz.2.687" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 74.114870][ T29] audit: type=1326 audit(1764776146.815:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 74.138393][ T29] audit: type=1326 audit(1764776146.815:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 74.164299][ T29] audit: type=1326 audit(1764776146.865:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 74.187696][ T29] audit: type=1326 audit(1764776146.865:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 74.211101][ T29] audit: type=1326 audit(1764776146.865:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 74.234455][ T29] audit: type=1326 audit(1764776146.865:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 74.258196][ T29] audit: type=1326 audit(1764776146.865:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 74.281553][ T29] audit: type=1326 audit(1764776146.865:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 74.304855][ T29] audit: type=1326 audit(1764776146.865:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 74.384420][ T5750] loop0: detected capacity change from 0 to 1024 [ 74.402006][ T5750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.435805][ T5750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.802920][ T5624] bridge_slave_1: left allmulticast mode [ 74.808655][ T5624] bridge_slave_1: left promiscuous mode [ 74.814531][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.824953][ T5624] bridge_slave_0: left allmulticast mode [ 74.830766][ T5624] bridge_slave_0: left promiscuous mode [ 74.836578][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.962902][ T5624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.972758][ T5624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.985499][ T5624] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 75.000509][ T5624] bond0 (unregistering): Released all slaves [ 75.014923][ T5624] bond1 (unregistering): Released all slaves [ 75.075958][ T5624] tipc: Left network mode [ 75.168383][ T5791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.701'. [ 75.186240][ T5624] hsr_slave_0: left promiscuous mode [ 75.213517][ T5624] hsr_slave_1: left promiscuous mode [ 75.219315][ T5624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.226833][ T5624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.291579][ T5624] team0 (unregistering): Port device team_slave_1 removed [ 75.311762][ T5624] team0 (unregistering): Port device team_slave_0 removed [ 75.319560][ T4628] smc: removing ib device syz! [ 75.378242][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.548228][ T5760] chnl_net:caif_netlink_parms(): no params data found [ 75.649488][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.656660][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.664836][ T5760] bridge_slave_0: entered allmulticast mode [ 75.671335][ T5760] bridge_slave_0: entered promiscuous mode [ 75.690669][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.697751][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.705434][ T5760] bridge_slave_1: entered allmulticast mode [ 75.712692][ T5760] bridge_slave_1: entered promiscuous mode [ 75.734385][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.750547][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.785914][ T5760] team0: Port device team_slave_0 added [ 75.794638][ T5760] team0: Port device team_slave_1 added [ 75.812828][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.819817][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.845841][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.858497][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.865712][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.892420][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.922018][ T5760] hsr_slave_0: entered promiscuous mode [ 75.928776][ T5760] hsr_slave_1: entered promiscuous mode [ 75.934834][ T5760] debugfs: 'hsr0' already exists in 'hsr' [ 75.940705][ T5760] Cannot create hsr debugfs directory [ 76.013374][ T5760] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 76.022758][ T5760] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 76.032042][ T5760] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 76.057445][ T5760] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 76.097111][ T5849] netlink: 'syz.2.714': attribute type 27 has an invalid length. [ 76.098638][ T5846] veth12: entered promiscuous mode [ 76.110125][ T5846] veth12: entered allmulticast mode [ 76.275891][ T5864] netlink: 32 bytes leftover after parsing attributes in process `syz.3.706'. [ 76.429488][ T5849] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 76.542048][ T5849] veth2: left promiscuous mode [ 76.546920][ T5849] veth2: left allmulticast mode [ 76.564387][ T5881] loop0: detected capacity change from 0 to 128 [ 76.586863][ T5881] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 76.602351][ T5856] 8021q: adding VLAN 0 to HW filter on device .` [ 76.616070][ T5881] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.633242][ T5856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.654060][ T5624] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.691016][ T5624] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.732192][ T5624] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.742424][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.776861][ T5624] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.789983][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.814391][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.821499][ T5624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.863003][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.870201][ T5624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.001915][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.054928][ T5906] usb usb1: usbfs: process 5906 (syz.5.715) did not claim interface 8 before use [ 77.065572][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.094597][ T5905] loop2: detected capacity change from 0 to 1024 [ 77.122981][ T5905] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.166202][ T5905] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.713: Invalid block bitmap block 0 in block_group 0 [ 77.190295][ T5905] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.713: Failed to acquire dquot type 0 [ 77.242359][ T5921] loop5: detected capacity change from 0 to 512 [ 77.249211][ T5760] veth0_vlan: entered promiscuous mode [ 77.255433][ T5905] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.713: Freeing blocks not in datazone - block = 0, count = 4096 [ 77.269080][ T5905] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.713: Invalid inode bitmap blk 0 in block_group 0 [ 77.283340][ T5624] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:32: Failed to release dquot type 0 [ 77.302898][ T5760] veth1_vlan: entered promiscuous mode [ 77.318859][ T5905] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 77.334348][ T5760] veth0_macvtap: entered promiscuous mode [ 77.343604][ T5760] veth1_macvtap: entered promiscuous mode [ 77.350746][ T5921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.364404][ T5905] EXT4-fs (loop2): 1 orphan inode deleted [ 77.376905][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.387548][ T5905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.388167][ T5921] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.414717][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.428402][ T4627] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.438365][ T4627] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.461598][ T4627] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.477887][ T4627] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.503003][ T3994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.529692][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.543032][ T5624] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:32: Failed to release dquot type 0 [ 77.829152][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.722'. [ 77.838562][ T5926] Set syz1 is full, maxelem 65536 reached [ 77.990246][ T5948] batman_adv: batadv0: Removing interface: dummy0 [ 78.001663][ T5948] bridge_slave_0: left promiscuous mode [ 78.007293][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.016930][ T5948] bridge_slave_1: left allmulticast mode [ 78.022706][ T5948] bridge_slave_1: left promiscuous mode [ 78.028353][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.037295][ T5949] netlink: 'syz.0.726': attribute type 10 has an invalid length. [ 78.045621][ T5949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.726'. [ 78.055026][ T5948] bond0: (slave bond_slave_0): Releasing backup interface [ 78.065680][ T5948] bond0: (slave bond_slave_1): Releasing backup interface [ 78.076650][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.084199][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.093081][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.100486][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.109704][ T5948] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 78.128945][ T5949] batman_adv: batadv0: Adding interface: veth1_vlan [ 78.135610][ T5949] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.161460][ T5949] batman_adv: batadv0: Interface activated: veth1_vlan [ 78.385589][ T5967] loop0: detected capacity change from 0 to 512 [ 78.394847][ T5967] EXT4-fs: Ignoring removed i_version option [ 78.400953][ T5967] EXT4-fs: Ignoring removed bh option [ 78.423483][ T5967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.436468][ T5967] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.452832][ T5967] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.474888][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.973425][ T5984] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.737'. [ 79.026539][ T5990] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 79.163661][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 79.163675][ T29] audit: type=1400 audit(1764776151.865:1609): avc: denied { read write } for pid=5997 comm="syz.6.741" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 79.194019][ T29] audit: type=1400 audit(1764776151.865:1610): avc: denied { open } for pid=5997 comm="syz.6.741" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 79.233737][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.742'. [ 79.395870][ T6010] veth6: entered promiscuous mode [ 79.401281][ T6010] veth6: entered allmulticast mode [ 79.498590][ T29] audit: type=1400 audit(1764776152.195:1611): avc: denied { connect } for pid=6016 comm="syz.0.749" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.523419][ T6019] loop2: detected capacity change from 0 to 1024 [ 79.574222][ T6019] EXT4-fs: Ignoring removed orlov option [ 79.613583][ T6019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.636953][ T29] audit: type=1400 audit(1764776152.285:1612): avc: denied { read } for pid=6022 comm="syz.6.751" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.659721][ T29] audit: type=1400 audit(1764776152.285:1613): avc: denied { open } for pid=6022 comm="syz.6.751" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 80.622742][ T6040] netlink: 'syz.0.756': attribute type 27 has an invalid length. [ 80.656505][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.759134][ T6040] wg2: left promiscuous mode [ 80.763819][ T6040] wg2: left allmulticast mode [ 80.802379][ T6040] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 80.823408][ T6040] veth2: left promiscuous mode [ 80.828202][ T6040] veth2: left allmulticast mode [ 80.833284][ T6040] veth4: left promiscuous mode [ 80.838120][ T6040] veth4: left allmulticast mode [ 80.855329][ T6040] ip6gre1: left promiscuous mode [ 80.860407][ T6040] ip6gre1: left allmulticast mode [ 80.918850][ T6043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.940658][ T6043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.956443][ T4627] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.965464][ T6047] netlink: 'syz.3.759': attribute type 30 has an invalid length. [ 80.988811][ T4627] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.002630][ T4627] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.016279][ T4627] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.091951][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.764'. [ 81.623286][ T6084] loop0: detected capacity change from 0 to 512 [ 81.645256][ T6084] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 81.714273][ T6084] loop0: detected capacity change from 0 to 512 [ 81.734647][ T6084] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.773: inode has both inline data and extents flags [ 81.750423][ T6084] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.773: couldn't read orphan inode 15 (err -117) [ 81.777808][ T6084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.817030][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.871974][ T6102] veth14: entered promiscuous mode [ 81.877110][ T6102] veth14: entered allmulticast mode [ 81.902081][ T6105] netlink: 9 bytes leftover after parsing attributes in process `syz.5.781'. [ 81.913292][ T6105] netlink: 9 bytes leftover after parsing attributes in process `syz.5.781'. [ 81.926227][ T5617] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.938016][ T6106] loop6: detected capacity change from 0 to 512 [ 81.983699][ T6106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.997804][ T6106] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.635590][ T6131] capability: warning: `syz.5.787' uses deprecated v2 capabilities in a way that may be insecure [ 82.648355][ T29] audit: type=1400 audit(1764776155.345:1614): avc: denied { setopt } for pid=6130 comm="syz.5.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.698268][ T6136] loop5: detected capacity change from 0 to 512 [ 82.705469][ T6136] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 82.744944][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.771494][ T6139] loop5: detected capacity change from 0 to 512 [ 82.786731][ T6139] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.789: inode has both inline data and extents flags [ 82.803083][ T6139] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.789: couldn't read orphan inode 15 (err -117) [ 82.816171][ T6139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.865987][ T3994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.925246][ T6150] loop6: detected capacity change from 0 to 128 [ 82.948272][ T6150] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 82.956227][ T6150] FAT-fs (loop6): Filesystem has been set read-only [ 82.962943][ T6150] syz.6.793: attempt to access beyond end of device [ 82.962943][ T6150] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 82.976680][ T6150] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 82.984546][ T6150] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 82.992971][ T6150] syz.6.793: attempt to access beyond end of device [ 82.992971][ T6150] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 83.007562][ T6152] syz.6.793: attempt to access beyond end of device [ 83.007562][ T6152] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 83.020754][ T6152] Buffer I/O error on dev loop6, logical block 2065, async page read [ 83.028934][ T6152] syz.6.793: attempt to access beyond end of device [ 83.028934][ T6152] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 83.042167][ T6152] Buffer I/O error on dev loop6, logical block 2066, async page read [ 83.050319][ T6152] syz.6.793: attempt to access beyond end of device [ 83.050319][ T6152] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 83.063537][ T6152] Buffer I/O error on dev loop6, logical block 2067, async page read [ 83.071906][ T6152] syz.6.793: attempt to access beyond end of device [ 83.071906][ T6152] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 83.085119][ T6152] Buffer I/O error on dev loop6, logical block 2068, async page read [ 83.093323][ T6152] syz.6.793: attempt to access beyond end of device [ 83.093323][ T6152] loop6: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 83.106467][ T6152] Buffer I/O error on dev loop6, logical block 2069, async page read [ 83.115135][ T6152] syz.6.793: attempt to access beyond end of device [ 83.115135][ T6152] loop6: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 83.128294][ T6152] Buffer I/O error on dev loop6, logical block 2070, async page read [ 83.136922][ T6152] syz.6.793: attempt to access beyond end of device [ 83.136922][ T6152] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 83.150084][ T6152] Buffer I/O error on dev loop6, logical block 2071, async page read [ 83.158607][ T6152] syz.6.793: attempt to access beyond end of device [ 83.158607][ T6152] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 83.171837][ T6152] Buffer I/O error on dev loop6, logical block 2072, async page read [ 83.180037][ T6152] Buffer I/O error on dev loop6, logical block 2065, async page read [ 83.188120][ T6152] Buffer I/O error on dev loop6, logical block 2066, async page read [ 83.419970][ T29] audit: type=1326 audit(1764776156.115:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 83.470586][ T29] audit: type=1326 audit(1764776156.145:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 83.493968][ T29] audit: type=1326 audit(1764776156.145:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 83.517281][ T29] audit: type=1326 audit(1764776156.145:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 83.533719][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 83.592167][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 83.846887][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 83.954266][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.6.806'. [ 83.963161][ T3543] Bluetooth: hci0: command 0x1003 tx timeout [ 83.969149][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.013566][ T6187] netlink: 'syz.6.808': attribute type 3 has an invalid length. [ 84.037136][ T6187] netlink: 'syz.6.808': attribute type 3 has an invalid length. [ 84.055249][ T6189] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 84.062972][ T6189] netlink: 'syz.0.807': attribute type 4 has an invalid length. [ 84.070649][ T6189] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.807'. [ 84.270708][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 84.270723][ T29] audit: type=1326 audit(1764776156.975:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.5.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 84.300976][ T29] audit: type=1326 audit(1764776156.975:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.5.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 84.324439][ T29] audit: type=1326 audit(1764776157.005:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.5.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 84.348241][ T29] audit: type=1326 audit(1764776157.005:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.5.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 84.372904][ T29] audit: type=1326 audit(1764776157.005:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.5.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 84.396248][ T29] audit: type=1326 audit(1764776157.005:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.5.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 84.419704][ T29] audit: type=1326 audit(1764776157.005:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.5.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 84.443041][ T29] audit: type=1326 audit(1764776157.005:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.5.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 84.466390][ T29] audit: type=1326 audit(1764776157.005:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.5.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 84.489700][ T29] audit: type=1326 audit(1764776157.005:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.5.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d031f749 code=0x7ffc0000 [ 84.537670][ T6203] netlink: 'syz.5.813': attribute type 30 has an invalid length. [ 84.597889][ T6211] loop2: detected capacity change from 0 to 512 [ 84.610246][ T6211] EXT4-fs: Ignoring removed i_version option [ 84.616301][ T6211] EXT4-fs: Ignoring removed bh option [ 84.644053][ T6211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.657003][ T6211] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.747594][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.133927][ T6223] netlink: 'syz.6.818': attribute type 27 has an invalid length. [ 85.161291][ T6221] loop0: detected capacity change from 0 to 1024 [ 85.190676][ T6221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.232905][ T6221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.233919][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.252053][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.342370][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.374021][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.594816][ T6230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.611098][ T6230] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.629869][ T6230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.680353][ T6235] syzkaller0: entered promiscuous mode [ 85.685900][ T6235] syzkaller0: entered allmulticast mode [ 85.692765][ T4627] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.720052][ T4627] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.752666][ T4627] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.770289][ T6250] loop7: detected capacity change from 0 to 16384 [ 85.782927][ T4627] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.841829][ T6254] syzkaller0: entered promiscuous mode [ 85.847319][ T6254] syzkaller0: entered allmulticast mode [ 85.898307][ T6256] Falling back ldisc for ptm0. [ 86.081394][ T6258] loop2: detected capacity change from 0 to 256 [ 86.089879][ T6258] FAT-fs (loop2): bogus number of FAT sectors [ 86.096005][ T6258] FAT-fs (loop2): Can't find a valid FAT filesystem [ 86.260488][ T6263] netlink: 24 bytes leftover after parsing attributes in process `syz.5.830'. [ 86.357456][ T6269] loop2: detected capacity change from 0 to 1024 [ 86.384965][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.388033][ T6269] EXT4-fs: inline encryption not supported [ 86.399795][ T6269] EXT4-fs: Ignoring removed i_version option [ 86.407258][ T6269] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.426363][ T6269] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #3: block 2: comm syz.2.833: lblock 2 mapped to illegal pblock 2 (length 1) [ 86.446901][ T6269] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #3: block 48: comm syz.2.833: lblock 0 mapped to illegal pblock 48 (length 1) [ 86.461762][ T6269] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.833: Failed to acquire dquot type 0 [ 86.473408][ T6269] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 86.482944][ T6269] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.833: mark_inode_dirty error [ 86.494717][ T6269] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 86.510015][ T6269] EXT4-fs (loop2): 1 orphan inode deleted [ 86.516450][ T6269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.538192][ T6272] infiniband syz!: set down [ 86.542736][ T6272] infiniband syz!: added team_slave_0 [ 86.548441][ T5617] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.581670][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.590770][ T5617] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:25: Failed to release dquot type 0 [ 86.610493][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.642773][ T6272] RDS/IB: syz!: added [ 86.658254][ T6272] smc: adding ib device syz! with port count 1 [ 86.668090][ T6272] smc: ib device syz! port 1 has no pnetid [ 86.749543][ T6283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.837'. [ 86.762673][ T6269] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 86.810454][ T6269] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 86.820358][ T6269] EXT4-fs error (device loop2): ext4_map_blocks:777: inode #3: block 48: comm syz.2.833: lblock 0 mapped to illegal pblock 48 (length 1) [ 86.836710][ T6269] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 86.885997][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.185681][ T6297] loop5: detected capacity change from 0 to 1764 [ 87.212379][ T6299] netlink: 'syz.5.844': attribute type 27 has an invalid length. [ 87.232510][ T6299] ip6tnl0: left promiscuous mode [ 87.237522][ T6299] ip6tnl0: left allmulticast mode [ 87.247582][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.254781][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.288842][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.298329][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.321152][ T6299] veth2: left promiscuous mode [ 87.325943][ T6299] veth2: left allmulticast mode [ 87.330891][ T6299] veth4: left promiscuous mode [ 87.335726][ T6299] veth4: left allmulticast mode [ 87.340913][ T6299] veth6: left promiscuous mode [ 87.345695][ T6299] veth6: left allmulticast mode [ 87.365479][ T6300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.382336][ T6300] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.395402][ T6300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.412315][ T4628] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.422490][ T4628] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.431737][ T4628] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.440238][ T4628] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.685420][ T6326] netlink: 140 bytes leftover after parsing attributes in process `syz.3.848'. [ 87.892138][ T6364] loop2: detected capacity change from 0 to 1024 [ 87.902635][ T6364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.918360][ T6363] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.498132][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.858'. [ 88.537006][ T6382] loop6: detected capacity change from 0 to 128 [ 89.281169][ T29] kauditd_printk_skb: 834 callbacks suppressed [ 89.281181][ T29] audit: type=1326 audit(1764776161.985:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9a4882005 code=0x7ffc0000 [ 89.339118][ T29] audit: type=1326 audit(1764776162.025:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9a48465e7 code=0x7ffc0000 [ 89.362405][ T29] audit: type=1326 audit(1764776162.025:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9a47eb829 code=0x7ffc0000 [ 89.385674][ T29] audit: type=1326 audit(1764776162.025:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 89.409095][ T29] audit: type=1326 audit(1764776162.025:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9a4882005 code=0x7ffc0000 [ 89.432447][ T29] audit: type=1326 audit(1764776162.025:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9a4882005 code=0x7ffc0000 [ 89.455765][ T29] audit: type=1326 audit(1764776162.025:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9a48465e7 code=0x7ffc0000 [ 89.479127][ T29] audit: type=1326 audit(1764776162.025:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9a47eb829 code=0x7ffc0000 [ 89.502486][ T29] audit: type=1326 audit(1764776162.025:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 89.525842][ T29] audit: type=1326 audit(1764776162.035:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9a4882005 code=0x7ffc0000 [ 89.626126][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.870'. [ 89.711693][ T6436] delete_channel: no stack [ 89.740476][ T6444] syzkaller0: entered promiscuous mode [ 89.745982][ T6444] syzkaller0: entered allmulticast mode [ 90.692369][ T6475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.886'. [ 90.701351][ T6475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.886'. [ 90.779732][ T6481] veth4: entered promiscuous mode [ 90.784927][ T6481] veth4: entered allmulticast mode [ 90.793859][ T6483] netlink: 'syz.3.892': attribute type 12 has an invalid length. [ 90.829633][ T6489] netlink: 'syz.3.895': attribute type 4 has an invalid length. [ 90.840181][ T6489] netlink: 'syz.3.895': attribute type 4 has an invalid length. [ 91.028263][ T6508] xt_connbytes: Forcing CT accounting to be enabled [ 91.036088][ T6508] set match dimension is over the limit! [ 91.133798][ T6519] netlink: 'syz.6.893': attribute type 1 has an invalid length. [ 91.395358][ T6549] netlink: 'syz.3.915': attribute type 4 has an invalid length. [ 91.466781][ T6559] IPv6: Can't replace route, no match found [ 92.153514][ T6573] netlink: 'syz.0.937': attribute type 27 has an invalid length. [ 92.157771][ T6575] loop5: detected capacity change from 0 to 1024 [ 92.168103][ T6575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.193410][ T6575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.211239][ T6573] veth14: left promiscuous mode [ 92.216119][ T6573] veth14: left allmulticast mode [ 92.234735][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.243504][ T6579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.443684][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.931'. [ 93.097482][ T3994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.157276][ T6608] tipc: Started in network mode [ 93.162220][ T6608] tipc: Node identity 026338146db3, cluster identity 4711 [ 93.169385][ T6608] tipc: Enabled bearer , priority 0 [ 93.181705][ T6607] tipc: Resetting bearer [ 93.202047][ T6607] tipc: Disabling bearer [ 93.323739][ T6624] netlink: 24 bytes leftover after parsing attributes in process `syz.6.946'. [ 93.368749][ T6627] syz_tun: entered allmulticast mode [ 93.375293][ T6624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6624 comm=syz.6.946 [ 93.394347][ T6626] syz_tun: left allmulticast mode [ 93.417633][ T6630] bond_slave_1: mtu less than device minimum [ 93.437538][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.950'. [ 93.650292][ T6652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.954'. [ 93.683369][ T6656] netlink: 4 bytes leftover after parsing attributes in process `+@'. [ 93.701709][ T6656] bridge_slave_1: left allmulticast mode [ 93.707475][ T6656] bridge_slave_1: left promiscuous mode [ 93.713187][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.731415][ T6656] bridge_slave_0: left allmulticast mode [ 93.737084][ T6656] bridge_slave_0: left promiscuous mode [ 93.742772][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.420256][ T6678] netlink: 'syz.5.967': attribute type 2 has an invalid length. [ 94.427933][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.967'. [ 94.475290][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 94.475303][ T29] audit: type=1400 audit(1764776167.175:2664): avc: denied { mount } for pid=6677 comm="syz.6.966" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 94.557146][ T29] audit: type=1326 audit(1764776167.255:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 94.593826][ T29] audit: type=1326 audit(1764776167.255:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 94.617254][ T29] audit: type=1326 audit(1764776167.285:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 94.640656][ T29] audit: type=1326 audit(1764776167.285:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 94.664083][ T29] audit: type=1326 audit(1764776167.285:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 94.687546][ T29] audit: type=1326 audit(1764776167.285:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 94.710890][ T29] audit: type=1326 audit(1764776167.285:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 94.734628][ T29] audit: type=1326 audit(1764776167.285:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 94.757951][ T29] audit: type=1326 audit(1764776167.285:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a484f749 code=0x7ffc0000 [ 94.793595][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 94.812399][ T6684] batman_adv: batadv0: Removing interface: veth1_vlan [ 94.940207][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.6.975'. [ 96.756915][ T6763] xt_TPROXY: Can be used only with -p tcp or -p udp [ 96.978721][ T6778] veth0_to_team: entered promiscuous mode [ 97.182808][ T6784] serio: Serial port ptm0 [ 97.368522][ T6801] xt_TCPMSS: Only works on TCP SYN packets [ 97.390757][ T6804] netlink: 'syz.3.1013': attribute type 30 has an invalid length. [ 97.424279][ T6808] loop5: detected capacity change from 0 to 512 [ 97.430857][ T6808] EXT4-fs: Ignoring removed i_version option [ 97.436879][ T6808] EXT4-fs: Ignoring removed bh option [ 97.452524][ T6808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.500273][ T6808] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.536706][ T3427] kernel write not supported for file bpf-prog (pid: 3427 comm: kworker/0:6) [ 97.546815][ T3994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.586631][ T6829] loop5: detected capacity change from 0 to 512 [ 97.595798][ T6829] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 97.608110][ T6829] EXT4-fs (loop5): 1 truncate cleaned up [ 97.614415][ T6829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.648595][ T3994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.669869][ T6834] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 97.893966][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1028'. [ 97.983893][ T6849] loop5: detected capacity change from 0 to 1024 [ 98.031645][ T6849] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.066670][ T6849] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm +}[@: bad orphan inode 11 [ 98.090066][ T6849] ext4_test_bit(bit=10, block=4) = 1 [ 98.095390][ T6849] is_bad_inode(inode)=0 [ 98.099593][ T6849] NEXT_ORPHAN(inode)=3254779904 [ 98.104461][ T6849] max_ino=32 [ 98.107644][ T6849] i_nlink=0 [ 98.130462][ T6849] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #3: block 1: comm +}[@: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.144600][ T6849] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm +}[@: Failed to acquire dquot type 0 [ 98.157173][ T6849] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 0 in block_group 0 [ 98.169582][ T6849] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 98.178416][ T4632] EXT4-fs error (device loop5): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.178782][ T6849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.213612][ T4632] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:15: Failed to release dquot type 0 [ 98.226240][ T6849] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 98.255984][ T3994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.267790][ T6861] netlink: 'syz.0.1036': attribute type 1 has an invalid length. [ 98.299537][ T6863] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1037'. [ 98.326929][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1036'. [ 98.392575][ T6864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.426768][ T6861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.436660][ T6861] bond2: (slave geneve2): making interface the new active one [ 98.445145][ T6861] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 98.453923][ T5617] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 98.468375][ T5617] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 98.562171][ T5617] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 98.595617][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 98.604701][ T5617] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 98.674595][ T6888] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1045'. [ 98.702972][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 98.792948][ T6903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1052'. [ 99.006083][ T6909] ip6t_rpfilter: unknown options [ 99.098233][ T6927] loop0: detected capacity change from 0 to 128 [ 99.105668][ T6927] vfat: Unknown parameter 'E[OjApwuni_xlate' [ 99.479689][ T6951] tipc: New replicast peer: 255.255.255.255 [ 99.485840][ T6951] tipc: Enabled bearer , priority 10 [ 99.550222][ T29] kauditd_printk_skb: 683 callbacks suppressed [ 99.550237][ T29] audit: type=1326 audit(1764776172.125:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 99.579876][ T29] audit: type=1326 audit(1764776172.135:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 99.603247][ T29] audit: type=1326 audit(1764776172.135:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 99.626760][ T29] audit: type=1326 audit(1764776172.135:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 99.650252][ T29] audit: type=1326 audit(1764776172.135:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 99.673778][ T29] audit: type=1326 audit(1764776172.135:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 99.697241][ T29] audit: type=1326 audit(1764776172.135:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 99.720685][ T29] audit: type=1326 audit(1764776172.135:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 99.744022][ T29] audit: type=1326 audit(1764776172.135:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99c91f749 code=0x7ffc0000 [ 99.767523][ T29] audit: type=1400 audit(1764776172.175:3363): avc: denied { cmd } for pid=6948 comm="syz.6.1070" path="socket:[17288]" dev="sockfs" ino=17288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.851046][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 100.020673][ T6978] syzkaller0: entered promiscuous mode [ 100.026163][ T6978] syzkaller0: entered allmulticast mode [ 100.252299][ T6999] loop0: detected capacity change from 0 to 512 [ 100.258826][ T6999] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 100.651006][ T23] tipc: Node number set to 2886997007 [ 100.714167][ T7006] loop6: detected capacity change from 0 to 1024 [ 100.723335][ T7006] EXT4-fs: Ignoring removed orlov option [ 100.744035][ T7006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.792169][ T6999] Set syz1 is full, maxelem 65536 reached [ 100.935288][ T7023] syzkaller0: entered promiscuous mode [ 100.940915][ T7023] syzkaller0: entered allmulticast mode [ 100.965553][ T7025] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 100.979464][ T7025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.993090][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 101.003461][ T7025] bond2 (unregistering): Released all slaves [ 101.033861][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.072608][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1108'. [ 101.155835][ T7039] netlink: 83992 bytes leftover after parsing attributes in process `+[@'. [ 101.164661][ T7039] netlink: zone id is out of range [ 101.169764][ T7039] netlink: zone id is out of range [ 101.175212][ T7039] netlink: zone id is out of range [ 101.181665][ T7039] netlink: zone id is out of range [ 101.188859][ T7039] netlink: zone id is out of range [ 101.194382][ T7039] netlink: zone id is out of range [ 101.199504][ T7039] netlink: zone id is out of range [ 101.204634][ T7039] netlink: zone id is out of range [ 101.209734][ T7039] netlink: zone id is out of range [ 101.290071][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1112'. [ 101.315563][ T7048] netlink: 'syz.3.1111': attribute type 4 has an invalid length. [ 101.340386][ T7049] tipc: Enabled bearer , priority 0 [ 101.390740][ T7049] tipc: Disabling bearer [ 101.411711][ T7057] netlink: 'syz.3.1116': attribute type 39 has an invalid length. [ 101.497838][ T7066] 9pnet: Could not find request transport: t [ 101.518288][ T7069] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1119'. [ 101.836808][ T3427] hid_parser_main: 8 callbacks suppressed [ 101.836824][ T3427] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.850109][ T3427] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.857521][ T3427] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.864935][ T3427] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.872534][ T3427] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 101.880224][ T3427] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.887648][ T3427] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.895142][ T3427] hid-generic 0000:0000:0000.0002: item fetching failed at offset 8/43 [ 101.935348][ T3427] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 102.122355][ T7100] netlink: 'syz.6.1131': attribute type 27 has an invalid length. [ 102.150284][ T7100] netlink: 'syz.6.1131': attribute type 27 has an invalid length. [ 102.206527][ T7109] loop6: detected capacity change from 0 to 1024 [ 102.229536][ T7109] EXT4-fs: Ignoring removed orlov option [ 102.328351][ T7109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.361122][ T7119] netlink: 'syz.5.1136': attribute type 1 has an invalid length. [ 102.385369][ T7119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.501007][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1136'. [ 102.540819][ T7119] bond1 (unregistering): Released all slaves [ 102.689589][ T7109] ================================================================== [ 102.697702][ T7109] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 102.705766][ T7109] [ 102.708073][ T7109] write to 0xffff88810c93fb04 of 4 bytes by task 7122 on cpu 1: [ 102.715683][ T7109] xas_set_mark+0x12b/0x140 [ 102.720177][ T7109] __folio_start_writeback+0x155/0x390 [ 102.725628][ T7109] ext4_bio_write_folio+0x5ad/0x9f0 [ 102.730822][ T7109] mpage_process_page_bufs+0x4a1/0x620 [ 102.736270][ T7109] mpage_prepare_extent_to_map+0x781/0xbf0 [ 102.742067][ T7109] ext4_do_writepages+0xa05/0x2750 [ 102.747165][ T7109] ext4_writepages+0x176/0x300 [ 102.751923][ T7109] do_writepages+0x1c6/0x310 [ 102.756504][ T7109] file_write_and_wait_range+0x156/0x2c0 [ 102.762127][ T7109] generic_buffers_fsync_noflush+0x45/0x130 [ 102.768014][ T7109] ext4_sync_file+0x1ab/0x690 [ 102.772683][ T7109] vfs_fsync_range+0x10d/0x130 [ 102.777438][ T7109] ext4_buffered_write_iter+0x34f/0x3c0 [ 102.782972][ T7109] ext4_file_write_iter+0x387/0xf60 [ 102.788157][ T7109] iter_file_splice_write+0x66b/0xa20 [ 102.793527][ T7109] direct_splice_actor+0x156/0x2a0 [ 102.798645][ T7109] splice_direct_to_actor+0x312/0x680 [ 102.804008][ T7109] do_splice_direct+0xda/0x150 [ 102.808765][ T7109] do_sendfile+0x380/0x650 [ 102.813176][ T7109] __x64_sys_sendfile64+0x105/0x150 [ 102.818379][ T7109] x64_sys_call+0x2db1/0x3000 [ 102.823065][ T7109] do_syscall_64+0xd8/0x2a0 [ 102.827561][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.833631][ T7109] [ 102.835939][ T7109] read to 0xffff88810c93fb04 of 4 bytes by task 7109 on cpu 0: [ 102.843465][ T7109] file_write_and_wait_range+0x10e/0x2c0 [ 102.849089][ T7109] generic_buffers_fsync_noflush+0x45/0x130 [ 102.854983][ T7109] ext4_sync_file+0x1ab/0x690 [ 102.859647][ T7109] vfs_fsync_range+0x10d/0x130 [ 102.864402][ T7109] ext4_buffered_write_iter+0x34f/0x3c0 [ 102.870021][ T7109] ext4_file_write_iter+0x387/0xf60 [ 102.875205][ T7109] iter_file_splice_write+0x66b/0xa20 [ 102.880568][ T7109] direct_splice_actor+0x156/0x2a0 [ 102.885668][ T7109] splice_direct_to_actor+0x312/0x680 [ 102.891024][ T7109] do_splice_direct+0xda/0x150 [ 102.895772][ T7109] do_sendfile+0x380/0x650 [ 102.900181][ T7109] __x64_sys_sendfile64+0x105/0x150 [ 102.905384][ T7109] x64_sys_call+0x2db1/0x3000 [ 102.910068][ T7109] do_syscall_64+0xd8/0x2a0 [ 102.914559][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.920444][ T7109] [ 102.922749][ T7109] value changed: 0x0a000021 -> 0x04000021 [ 102.928444][ T7109] [ 102.930745][ T7109] Reported by Kernel Concurrency Sanitizer on: [ 102.936979][ T7109] CPU: 0 UID: 0 PID: 7109 Comm: syz.6.1133 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.946683][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.956722][ T7109] ================================================================== [ 103.493006][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.