last executing test programs: 7.878476397s ago: executing program 4 (id=1487): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) 7.59217077s ago: executing program 4 (id=1494): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r2}, 0x20) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r2, &(0x7f0000000000)=""/211, 0xd3, 0x20, 0x0, 0x0) 7.138535866s ago: executing program 4 (id=1500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8e4b}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0xaf}, [@algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) 6.028955771s ago: executing program 4 (id=1512): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x3) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 5.607044286s ago: executing program 4 (id=1515): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) creat(&(0x7f0000000340)='./file1\x00', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_create(0x9, 0x800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r0]) 5.389430859s ago: executing program 4 (id=1517): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000304090000000000000000004500", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 5.31063955s ago: executing program 32 (id=1517): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000304090000000000000000004500", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 4.395415982s ago: executing program 2 (id=1535): r0 = getpid() r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0xfffffffc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) 3.875652639s ago: executing program 3 (id=1541): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x2500, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 3.552093463s ago: executing program 3 (id=1542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) 2.768141383s ago: executing program 1 (id=1546): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080)=r3, 0x12) 2.729875614s ago: executing program 1 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 2.508502407s ago: executing program 0 (id=1548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019240)='./file0\x00', &(0x7f0000019300)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc', &(0x7f0000000000)='.-+\x00']}, &(0x7f0000019100)={[0x0]}) 2.504087687s ago: executing program 3 (id=1549): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x480000f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r2, 0x2d3e, 0x0, 0x4, 0x0, 0x0) 2.489700877s ago: executing program 5 (id=1520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.53535577s ago: executing program 0 (id=1550): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000280)="ff8561171643b966595339d70b7e72239cee80539e672d67d14c37c041843f3c91285e1cda9bfef066040f04d2fd0f80ee74a18acb943cef0df1d92abc200b4374affd56c5", 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.53426459s ago: executing program 1 (id=1551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r4, r0}, 0xc) 1.49417281s ago: executing program 1 (id=1552): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x100}, 0x18) 1.456252381s ago: executing program 0 (id=1553): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000400000004000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x120000) 1.449873921s ago: executing program 5 (id=1554): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000540)='./control\x00', 0x60) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r0, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') openat(r0, &(0x7f0000000280)='./control\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') 1.407706002s ago: executing program 0 (id=1555): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000400)='^\'#/\x00', r0) keyctl$instantiate(0xc, r1, 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x53a, &(0x7f0000000a40)="$eJzs3U9sI1cZAPBvJvHau02bLfQAqNClFBa0WjvxtquqF8qpQqgS0COHbUi8UbT2ehU7pQl7yB65I7ESJzhx5oDEAakn7kgc4MalHJAKrEBNERJGHttZb2Inbv7Ym/j3k0bzZt54vvcymvcmz8m8AKbWlYjYjogLEfFuRMx39yfdJd7sLO3jPn50f3nn0f3lJFqtd/6RZPntfdH3mbZnuucsRMT334r4YbIn6B8jGptbd5aq1cp6d1epWbtXamxuXV+rLa1WVit3y+WbizcXXr/xWvnE6vpS7dcfXYyI3/32ix/+YfsbP24Xa66b11+Pk9Spem43TttsRHznNIJNwEy3PheO8uEjfYiTlEbEZyLi5ez+n4+Z7Go+6cnL9M0xlg4AOA2t1ny05vu3AYDzLs3GwJK02B0LmIs0LRY7Y3gvxKW0Wm80r92ub9xd6YyVXY5cenutWlnojhVejlxye222spile9vVSnnP9o2IeD4ifpq/mG0Xl+vVlUk++ADAFHtmT///73yn/wcAzrnC42R+kuUAAManMOkCAABjp/8HgOmj/weA6aP/B4Dpo/8HgOmj/weAqfLdt99uL62d7vuvV97b3LhTf+/6SqVxp1jbWC4u19fvFVfr9dXsnT21w85XrdfvLb4aG++XmpVGs9TY3LpVq2/cbd7K3ut9q5IbS60AgIM8/9IHf04iYvuNi9kSfe/7P7SvfvG0SwecpnTSBQAmZuaAvP+MsRzA+O2f7QuYFsbjYXr9r9VqRd/cvRHxYDfV9zLQoX8i9HA39cn3Ys+ZHksHzht60C8fwKm7+vljjP8DZ5rxf5heR3sEH/AsD5w5xv9herVaiTn/AWDKGOMHBn5r36f/+/+FVt/Gw1MqEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwBc9mSpMXuXOBzkabFYsSzEXE5csnttWplISKei4g/5XP59vZiRJg3CADOsvRvSXf+r6vzr8ztzb2Q/ySfrSPiRz9/52fvLzWb64sRF5J/7u5vPuzuL0+i/ADAYXr9dK8f7/n40f3l3jLO8nz0rc7kou24O92lkzMbs9m6kI01XPpX0t3uaD+vzJxA/O0HEfG5QfVPsrGRy92ZT/fGb8d+dqzx0yfip1leZ93+WXz2BMoC0+aDdvvz5qD7L40r2Xrw/V/IWqjj67V/O/vav3S3/ZsZ0v5dGTXGq7//9r6drflO3oOIL8xG7PRO3tf+9OInQ+K/MmL8v7z4pZeH5bV+EXE1BtU/eSJWqVm7V2psbl1fqy2tVlYrd8vlm4s3F16/8Vq5lI1Rl3oj1fv9/Y1rzw2L367/pSHxC4fU/6sj1v+X/333B18+IP7XvzL4+r9wQPx2n/i1EeMvXfpNYVheO/7KkPofdv2vjRj/w79urYx4KAAwBo3NrTtL1Wpl/fiJwoHHpJX1Ru64IXKHH5NEbJ9IdUZJ5H/1k7cOPzg/tvIcMRHDsmaelhKem0T+6SjGCIlJt0zAaXt800+6JAAAAAAAAAAAAAAAwDAj/T/QxU9z8P7EhKsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAOfb/AAAA//+af9Tf") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0xa4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 1.331362193s ago: executing program 3 (id=1556): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000003, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 1.326285903s ago: executing program 5 (id=1557): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x2a, {0x2, 0x0, @multicast1=0xe000cc02}}) splice(r0, 0x0, r1, 0x0, 0x2, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 951.448488ms ago: executing program 0 (id=1558): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x80}, 0x18) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 789.328159ms ago: executing program 2 (id=1559): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) 788.58293ms ago: executing program 0 (id=1560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) 776.75591ms ago: executing program 1 (id=1561): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000080)='./file0\x00', 0x320) r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x20}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 697.319321ms ago: executing program 2 (id=1562): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000400000000b7080000020000007b8af8ff00000000bfa20000000000000702000080abef43b703000008000000b704000000000000850000fff70000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r4) 612.160912ms ago: executing program 1 (id=1563): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_GET_FPEMU(0x9, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) 416.169945ms ago: executing program 5 (id=1564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0x4e, 0x0) write$binfmt_script(r2, &(0x7f0000000800)={'#! ', './file0'}, 0xb) 414.894115ms ago: executing program 2 (id=1574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x880) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 386.371015ms ago: executing program 3 (id=1565): creat(&(0x7f00000000c0)='./control\x00', 0x0) r0 = inotify_init() r1 = epoll_create(0x401) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) r3 = inotify_add_watch(r0, &(0x7f00000001c0)='./control\x00', 0xa2000396) inotify_rm_watch(r0, r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb000001d}) epoll_wait(r1, &(0x7f0000000e80)=[{}, {}], 0x2, 0x0) 158.617468ms ago: executing program 3 (id=1566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 131.626328ms ago: executing program 2 (id=1567): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 0s ago: executing program 2 (id=1568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x84, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff1e5b, 0x2, 0x3, 0x2, 0xfffffff2, {0x8, 0x1, 0x2, 0x101, 0x1, 0xffffffff}, {0x3, 0x3, 0x1, 0x7, 0x93f8, 0x2}, 0x2, 0xd74, 0x5}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x800) kernel console output (not intermixed with test programs): ubj=root:sysadm_r:sysadm_t pid=4011 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e4fe969 code=0x7ffc0000 [ 43.403858][ T29] audit: type=1326 audit(1747965491.078:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e4fe969 code=0x7ffc0000 [ 43.428739][ T29] audit: type=1400 audit(1747965491.188:450): avc: denied { create } for pid=4020 comm="syz.0.237" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.449542][ T29] audit: type=1326 audit(1747965491.228:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd79e4fe969 code=0x7ffc0000 [ 43.472854][ T29] audit: type=1326 audit(1747965491.228:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e4fe969 code=0x7ffc0000 [ 43.840668][ T4046] loop2: detected capacity change from 0 to 1024 [ 43.847788][ T4046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.868302][ T4046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.884226][ T4051] netlink: 'syz.0.248': attribute type 10 has an invalid length. [ 43.892401][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.899968][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.967089][ T4051] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.974254][ T4051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.981630][ T4051] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.988742][ T4051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.999149][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.000439][ T4051] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 44.030526][ T4053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4053 comm=syz.0.248 [ 44.053979][ T4052] bridge_slave_1: left allmulticast mode [ 44.059743][ T4052] bridge_slave_1: left promiscuous mode [ 44.065463][ T4052] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.097453][ T4052] bridge_slave_0: left allmulticast mode [ 44.103237][ T4052] bridge_slave_0: left promiscuous mode [ 44.109181][ T4052] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.112758][ T4051] netlink: 80 bytes leftover after parsing attributes in process `syz.0.248'. [ 44.136756][ T4057] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.153510][ T4052] bond0: (slave bridge0): Releasing backup interface [ 44.175699][ T4057] loop1: detected capacity change from 0 to 2048 [ 44.215350][ T3305] loop1: p1 < > p4 [ 44.220119][ T3305] loop1: p4 size 8388608 extends beyond EOD, truncated [ 44.228644][ T4059] loop3: detected capacity change from 0 to 1024 [ 44.238421][ T4057] loop1: p1 < > p4 [ 44.243998][ T4057] loop1: p4 size 8388608 extends beyond EOD, truncated [ 44.271941][ T4059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.338004][ T4059] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.251: bg 0: block 88: padding at end of block bitmap is not set [ 44.360617][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 44.375786][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 44.385793][ T4059] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 44.426102][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 44.445167][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 44.489835][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.685933][ T4079] loop3: detected capacity change from 0 to 2048 [ 44.884630][ T4089] loop2: detected capacity change from 0 to 128 [ 44.970961][ T4095] netlink: zone id is out of range [ 44.976208][ T4095] netlink: zone id is out of range [ 44.981362][ T4095] netlink: zone id is out of range [ 44.986554][ T4095] netlink: zone id is out of range [ 44.991688][ T4095] netlink: zone id is out of range [ 44.996846][ T4095] netlink: zone id is out of range [ 45.002037][ T4095] netlink: zone id is out of range [ 45.007225][ T4095] netlink: zone id is out of range [ 45.008995][ T4093] infiniband syz!: set active [ 45.012333][ T4095] netlink: zone id is out of range [ 45.022483][ T4093] infiniband syz!: added team_slave_0 [ 45.054615][ T4093] RDS/IB: syz!: added [ 45.063405][ T4093] smc: adding ib device syz! with port count 1 [ 45.074197][ T4093] smc: ib device syz! port 1 has pnetid [ 45.103966][ T4101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 45.142955][ T4105] netlink: 'syz.2.269': attribute type 1 has an invalid length. [ 45.176444][ T4105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.260558][ T4105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.276160][ T4105] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 45.316255][ T4105] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 45.351897][ T4109] ip6erspan0: entered promiscuous mode [ 45.374592][ T4109] bond1: (slave ip6erspan0): making interface the new active one [ 45.397050][ T4109] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 45.707115][ T4134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.281'. [ 46.154959][ T4157] loop2: detected capacity change from 0 to 2048 [ 46.269707][ T4162] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 46.348431][ T4169] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 46.400787][ T4175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.295'. [ 47.023302][ T4201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 47.081836][ T4203] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 47.155047][ T4211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 47.190951][ T4215] netlink: 'syz.0.318': attribute type 1 has an invalid length. [ 47.212754][ T4215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.232878][ T4215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.240225][ T4215] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 47.254071][ T4215] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 47.263429][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 47.342876][ T4221] ip6erspan0: entered promiscuous mode [ 47.350788][ T4221] bond1: (slave ip6erspan0): making interface the new active one [ 47.359473][ T4221] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 47.622109][ T4237] wg2: entered promiscuous mode [ 47.627109][ T4237] wg2: entered allmulticast mode [ 47.697792][ T4248] netlink: 96 bytes leftover after parsing attributes in process `syz.2.331'. [ 47.985812][ T4269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.340'. [ 47.994808][ T4269] tipc: Started in network mode [ 47.999805][ T4269] tipc: Node identity 1, cluster identity 4711 [ 48.006025][ T4269] tipc: Node number set to 1 [ 48.200681][ T4277] loop1: detected capacity change from 0 to 1024 [ 48.258918][ T4277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.288611][ T4277] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.345: Allocating blocks 497-513 which overlap fs metadata [ 48.449321][ T4277] EXT4-fs (loop1): pa ffff888106dd3150: logic 272, phys. 433, len 5 [ 48.457416][ T4277] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 48.562792][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 48.562821][ T29] audit: type=1400 audit(1747965496.358:561): avc: denied { ioctl } for pid=4283 comm="syz.4.346" path="socket:[6811]" dev="sockfs" ino=6811 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.651878][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.968467][ T29] audit: type=1400 audit(1747965496.768:562): avc: denied { mount } for pid=4298 comm="syz.3.353" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.083278][ T4302] loop3: detected capacity change from 0 to 512 [ 49.116411][ T4302] EXT4-fs: Ignoring removed bh option [ 49.144135][ T4302] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.157281][ T4302] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.204997][ T4302] EXT4-fs (loop3): 1 truncate cleaned up [ 49.211307][ T4302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.227433][ T29] audit: type=1326 audit(1747965497.028:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 49.264013][ T29] audit: type=1326 audit(1747965497.048:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 49.287491][ T29] audit: type=1326 audit(1747965497.048:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 49.310756][ T29] audit: type=1326 audit(1747965497.048:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 49.334094][ T29] audit: type=1326 audit(1747965497.048:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 49.365639][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.421039][ T4317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 49.573824][ T29] audit: type=1400 audit(1747965497.368:568): avc: denied { read } for pid=4322 comm="syz.0.359" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.596808][ T29] audit: type=1400 audit(1747965497.368:569): avc: denied { open } for pid=4322 comm="syz.0.359" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.665719][ T29] audit: type=1400 audit(1747965497.468:570): avc: denied { read } for pid=4322 comm="syz.0.359" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.421060][ T4364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.443233][ T4364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.973325][ T4559] loop3: detected capacity change from 0 to 128 [ 52.294676][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 52.480046][ T4449] syz.0.388 (4449) used greatest stack depth: 9864 bytes left [ 52.489570][ T4457] syz.0.388 (4457) used greatest stack depth: 8472 bytes left [ 53.443285][ T4443] syz.0.388 (4443) used greatest stack depth: 7208 bytes left [ 53.847919][ T4617] loop2: detected capacity change from 0 to 1024 [ 53.914598][ T4617] EXT4-fs: Ignoring removed nobh option [ 53.920245][ T4617] EXT4-fs: Ignoring removed nobh option [ 53.946478][ T4617] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 53.956900][ T4617] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: comm syz.2.426: inode #4294967295: comm syz.2.426: iget: illegal inode # [ 53.996799][ T4617] EXT4-fs (loop2): no journal found [ 54.002112][ T4617] EXT4-fs (loop2): can't get journal size [ 54.004234][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 54.004254][ T29] audit: type=1326 audit(1747965501.808:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 54.054274][ T29] audit: type=1326 audit(1747965501.838:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 54.078399][ T29] audit: type=1326 audit(1747965501.838:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 54.101817][ T29] audit: type=1326 audit(1747965501.838:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 54.105523][ T4617] EXT4-fs (loop2): failed to initialize system zone (-22) [ 54.126095][ T29] audit: type=1326 audit(1747965501.838:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 54.156172][ T29] audit: type=1326 audit(1747965501.838:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 54.180289][ T29] audit: type=1326 audit(1747965501.838:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 54.203902][ T29] audit: type=1326 audit(1747965501.838:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 54.228239][ T29] audit: type=1326 audit(1747965501.838:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 54.252345][ T29] audit: type=1326 audit(1747965501.838:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.4.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 54.281029][ T4617] EXT4-fs (loop2): mount failed [ 54.309959][ T4647] unsupported nla_type 52263 [ 54.464347][ T4659] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 54.566635][ T4659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.629985][ T4688] bond1: (slave veth3): Enslaving as an active interface with a down link [ 54.651288][ T4690] caif0: entered promiscuous mode [ 54.656537][ T4690] caif0: entered allmulticast mode [ 54.666153][ T4691] vlan2: entered allmulticast mode [ 54.671339][ T4691] bond1: entered allmulticast mode [ 54.696540][ T4690] block device autoloading is deprecated and will be removed. [ 54.704452][ T4690] syz.0.424: attempt to access beyond end of device [ 54.704452][ T4690] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 54.725364][ T4691] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 55.853078][ T4799] netlink: 'syz.0.437': attribute type 1 has an invalid length. [ 55.867868][ T4799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.883123][ T4799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 55.894833][ T4799] bond2 (unregistering): Released all slaves [ 56.463175][ T4881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4881 comm=syz.1.445 [ 56.673859][ T4900] loop0: detected capacity change from 0 to 1024 [ 56.717508][ T4900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.741801][ T4900] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.453: bg 0: block 88: padding at end of block bitmap is not set [ 56.827755][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.974775][ T4933] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 57.023117][ T4936] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 57.069605][ T4942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.080042][ T4942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.090825][ T4947] capability: warning: `syz.4.472' uses deprecated v2 capabilities in a way that may be insecure [ 57.212995][ T4963] loop4: detected capacity change from 0 to 1024 [ 57.258422][ T4963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.278030][ T4963] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.479: bg 0: block 88: padding at end of block bitmap is not set [ 57.312233][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.497490][ T4995] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.567987][ T4995] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.637497][ T4995] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.650085][ T5002] loop1: detected capacity change from 0 to 1024 [ 57.676500][ T5002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.706782][ T5002] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.494: bg 0: block 88: padding at end of block bitmap is not set [ 57.733501][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.744805][ T4995] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.819299][ T4995] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.837563][ T5017] random: crng reseeded on system resumption [ 57.850975][ T4995] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.897400][ T4995] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.910266][ T4995] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.961751][ T5029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.505'. [ 58.432485][ T5048] loop2: detected capacity change from 0 to 1024 [ 58.450955][ T5048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.492990][ T5048] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.509: bg 0: block 88: padding at end of block bitmap is not set [ 58.564197][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.580304][ T5062] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.618361][ T5066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'. [ 58.630726][ T5062] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.652747][ T5064] random: crng reseeded on system resumption [ 58.717166][ T5062] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.756930][ T5062] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.842517][ T5062] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.857864][ T5062] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.878275][ T5062] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.908508][ T5062] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.180093][ T5094] loop3: detected capacity change from 0 to 1024 [ 59.198070][ T5094] EXT4-fs: Ignoring removed nobh option [ 59.203725][ T5094] EXT4-fs: Ignoring removed nobh option [ 59.223685][ T5094] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 59.246139][ T5094] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.524: inode #4294967295: comm syz.3.524: iget: illegal inode # [ 59.276326][ T5094] EXT4-fs (loop3): no journal found [ 59.281686][ T5094] EXT4-fs (loop3): can't get journal size [ 59.307460][ T5094] EXT4-fs (loop3): failed to initialize system zone (-22) [ 59.323844][ T5094] EXT4-fs (loop3): mount failed [ 59.902269][ T5082] syz.3.524 (5082) used greatest stack depth: 7000 bytes left [ 59.936413][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 59.936496][ T29] audit: type=1326 audit(1747965507.738:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 59.966752][ T29] audit: type=1326 audit(1747965507.738:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 59.990850][ T29] audit: type=1326 audit(1747965507.788:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 60.014872][ T29] audit: type=1326 audit(1747965507.788:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 60.038192][ T29] audit: type=1326 audit(1747965507.788:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 60.062284][ T29] audit: type=1326 audit(1747965507.788:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 60.133365][ T5103] loop3: detected capacity change from 0 to 1024 [ 60.139905][ T29] audit: type=1326 audit(1747965507.788:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 60.163953][ T29] audit: type=1326 audit(1747965507.788:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 60.188049][ T29] audit: type=1326 audit(1747965507.868:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 60.211361][ T29] audit: type=1326 audit(1747965507.888:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 60.246231][ T5103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.268690][ T5103] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.529: bg 0: block 88: padding at end of block bitmap is not set [ 60.302925][ T5115] random: crng reseeded on system resumption [ 60.303769][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.326600][ T5116] netlink: 52 bytes leftover after parsing attributes in process `syz.4.534'. [ 60.428263][ T5127] pim6reg1: entered promiscuous mode [ 60.433595][ T5127] pim6reg1: entered allmulticast mode [ 60.571678][ T5135] netlink: 'syz.3.544': attribute type 3 has an invalid length. [ 60.580210][ T5135] netlink: 132 bytes leftover after parsing attributes in process `syz.3.544'. [ 60.759989][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.774286][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.793177][ T5159] loop0: detected capacity change from 0 to 1024 [ 60.815462][ T5159] EXT4-fs error (device loop0): __ext4_fill_super:5502: inode #2: comm syz.0.554: casefold flag without casefold feature [ 60.828832][ T5159] EXT4-fs (loop0): get root inode failed [ 60.834598][ T5159] EXT4-fs (loop0): mount failed [ 60.890992][ T5170] netlink: 'syz.4.559': attribute type 3 has an invalid length. [ 60.898781][ T5170] netlink: 132 bytes leftover after parsing attributes in process `syz.4.559'. [ 61.071613][ T5183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.078899][ T5183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.143734][ T5193] loop3: detected capacity change from 0 to 1024 [ 61.166685][ T5193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.184636][ T5193] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.567: bg 0: block 88: padding at end of block bitmap is not set [ 61.210380][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.239831][ T5200] pim6reg1: entered promiscuous mode [ 61.245437][ T5200] pim6reg1: entered allmulticast mode [ 61.393364][ T5211] random: crng reseeded on system resumption [ 61.421361][ T5215] loop0: detected capacity change from 0 to 512 [ 61.515194][ T5224] loop1: detected capacity change from 0 to 1024 [ 61.524866][ T5215] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 61.545976][ T5215] EXT4-fs (loop0): mount failed [ 61.556174][ T5224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.585937][ T5224] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.583: bg 0: block 88: padding at end of block bitmap is not set [ 61.629474][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.723058][ T5247] program syz.0.591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.848833][ T5259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.595'. [ 61.917990][ T5259] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5259 comm=syz.0.595 [ 62.075817][ T5265] random: crng reseeded on system resumption [ 62.238254][ T5270] loop2: detected capacity change from 0 to 512 [ 62.257732][ T5270] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.282137][ T5270] EXT4-fs (loop2): mount failed [ 62.286860][ T5272] loop0: detected capacity change from 0 to 1024 [ 62.310199][ T5272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.328335][ T5272] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.598: bg 0: block 88: padding at end of block bitmap is not set [ 62.376448][ T5280] can0: slcan on ttyS3. [ 62.386262][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.444116][ T5280] can0 (unregistered): slcan off ttyS3. [ 62.451912][ T5283] can0: slcan on ttyS3. [ 62.514109][ T5280] can0 (unregistered): slcan off ttyS3. [ 62.539531][ T5291] program syz.4.604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.592220][ T5296] can0: slcan on ttyS3. [ 62.614735][ T5300] random: crng reseeded on system resumption [ 62.684078][ T5296] can0 (unregistered): slcan off ttyS3. [ 62.692283][ T5305] can0: slcan on ttyS3. [ 62.718730][ T5308] netlink: 'syz.0.611': attribute type 1 has an invalid length. [ 62.772677][ T5310] loop4: detected capacity change from 0 to 1024 [ 62.784488][ T5308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 62.795471][ T5308] bond2: (slave bond3): making interface the new active one [ 62.803180][ T5308] bond2: (slave bond3): Enslaving as an active interface with an up link [ 62.820197][ T5310] EXT4-fs: Ignoring removed nobh option [ 62.825934][ T5310] EXT4-fs: Ignoring removed nobh option [ 62.900443][ T5296] can0 (unregistered): slcan off ttyS3. [ 62.937742][ T5310] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 62.976869][ T5310] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.605: inode #4294967295: comm syz.4.605: iget: illegal inode # [ 62.979942][ T5308] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 63.053388][ T5310] EXT4-fs (loop4): no journal found [ 63.059440][ T5310] EXT4-fs (loop4): can't get journal size [ 63.095604][ T5310] EXT4-fs (loop4): failed to initialize system zone (-22) [ 63.150963][ T5310] EXT4-fs (loop4): mount failed [ 63.376959][ T5323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.615'. [ 63.399450][ T5323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5323 comm=syz.2.615 [ 63.527103][ T5327] program syz.3.618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.658520][ T5340] netlink: 'syz.3.624': attribute type 4 has an invalid length. [ 63.689094][ T5340] netlink: 'syz.3.624': attribute type 4 has an invalid length. [ 63.852773][ T5348] can0: slcan on ttyS3. [ 63.863386][ T5350] loop2: detected capacity change from 0 to 512 [ 63.889632][ T5350] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.628: invalid indirect mapped block 256 (level 2) [ 63.894090][ T5348] can0 (unregistered): slcan off ttyS3. [ 63.910572][ T5350] EXT4-fs (loop2): 2 truncates cleaned up [ 63.917167][ T5350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.934999][ T5350] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.628: bg 0: block 5: invalid block bitmap [ 63.950824][ T5354] can0: slcan on ttyS3. [ 63.983216][ T5350] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 63.995570][ T5350] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.995570][ T5350] [ 64.005311][ T5350] EXT4-fs (loop2): Total free blocks count 0 [ 64.011345][ T5350] EXT4-fs (loop2): Free/Dirty block details [ 64.017415][ T5350] EXT4-fs (loop2): free_blocks=0 [ 64.022383][ T5350] EXT4-fs (loop2): dirty_blocks=1 [ 64.027466][ T5350] EXT4-fs (loop2): Block reservation details [ 64.033554][ T5350] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 64.064608][ T5348] can0 (unregistered): slcan off ttyS3. [ 64.090988][ T5350] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747904 > max in inode 15 [ 64.107724][ T5350] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747908 > max in inode 15 [ 64.118693][ T5350] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747912 > max in inode 15 [ 64.152128][ T5350] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747916 > max in inode 15 [ 64.163473][ T5350] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747920 > max in inode 15 [ 64.173874][ T5350] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747924 > max in inode 15 [ 64.184966][ T5350] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747928 > max in inode 15 [ 64.195888][ T5350] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747932 > max in inode 15 [ 64.212647][ T5350] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747936 > max in inode 15 [ 64.223498][ T5350] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747940 > max in inode 15 [ 64.899500][ T5400] loop1: detected capacity change from 0 to 1024 [ 64.922611][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.954226][ T5400] EXT4-fs: Ignoring removed nobh option [ 64.959963][ T5400] EXT4-fs: Ignoring removed nobh option [ 65.009299][ T5400] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 65.043158][ T5400] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: comm syz.1.644: inode #4294967295: comm syz.1.644: iget: illegal inode # [ 65.107729][ T5400] EXT4-fs (loop1): no journal found [ 65.112279][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 65.112296][ T29] audit: type=1400 audit(1747965512.908:1299): avc: denied { read write } for pid=5411 comm="syz.4.652" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.113010][ T5400] EXT4-fs (loop1): can't get journal size [ 65.119649][ T29] audit: type=1400 audit(1747965512.918:1300): avc: denied { open } for pid=5411 comm="syz.4.652" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.205370][ T29] audit: type=1400 audit(1747965513.008:1301): avc: denied { write } for pid=5414 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 65.242535][ T5400] EXT4-fs (loop1): failed to initialize system zone (-22) [ 65.300039][ T5400] EXT4-fs (loop1): mount failed [ 65.445728][ T29] audit: type=1400 audit(1747965513.248:1302): avc: denied { ioctl } for pid=5420 comm="syz.2.656" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 65.751534][ T5433] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 65.798746][ T5433] 8021q: adding VLAN 0 to HW filter on device bond5 [ 65.816464][ T5433] bond4: (slave bond5): making interface the new active one [ 65.828013][ T5433] bond4: (slave bond5): Enslaving as an active interface with an up link [ 65.847322][ T5433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'. [ 65.857693][ T5433] 8021q: adding VLAN 0 to HW filter on device bond4 [ 65.891755][ T5437] netlink: 'syz.0.661': attribute type 4 has an invalid length. [ 65.904678][ T5437] netlink: 'syz.0.661': attribute type 4 has an invalid length. [ 65.983892][ T29] audit: type=1400 audit(1747965513.778:1303): avc: denied { listen } for pid=5444 comm="syz.0.664" lport=43262 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.047988][ T29] audit: type=1400 audit(1747965513.818:1304): avc: denied { accept } for pid=5444 comm="syz.0.664" lport=43262 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.071657][ T29] audit: type=1400 audit(1747965513.818:1305): avc: denied { write } for pid=5444 comm="syz.0.664" lport=43262 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 66.096011][ T29] audit: type=1400 audit(1747965513.818:1306): avc: denied { setopt } for pid=5444 comm="syz.0.664" lport=43262 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 66.190288][ T29] audit: type=1400 audit(1747965513.978:1307): avc: denied { setopt } for pid=5451 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 66.373298][ T5462] netlink: 'syz.1.673': attribute type 1 has an invalid length. [ 66.441117][ T5462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 66.449598][ T5462] bond2: (slave bond3): making interface the new active one [ 66.457631][ T5462] bond2: (slave bond3): Enslaving as an active interface with an up link [ 66.486029][ T5462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.673'. [ 66.526402][ T5462] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.576150][ T5459] netlink: 132 bytes leftover after parsing attributes in process `syz.0.671'. [ 66.727339][ T5485] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 67.087508][ T5503] loop1: detected capacity change from 0 to 8192 [ 67.096267][ T5505] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 67.135940][ T5505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.146971][ T5505] bond1: (slave bond2): making interface the new active one [ 67.158604][ T5505] bond1: (slave bond2): Enslaving as an active interface with an up link [ 67.182149][ T5505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.689'. [ 67.192092][ T5505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.347228][ T5515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'. [ 67.403801][ T5515] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.419849][ T5518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.693'. [ 67.459938][ T5515] bond1: (slave bond2): Enslaving as an active interface with an up link [ 67.504729][ T5518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.638284][ T5513] netlink: 132 bytes leftover after parsing attributes in process `syz.4.692'. [ 67.796425][ T29] audit: type=1326 audit(1747965515.598:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 68.454450][ T5559] netlink: 132 bytes leftover after parsing attributes in process `syz.3.711'. [ 68.637110][ T5577] pim6reg1: entered promiscuous mode [ 68.642495][ T5577] pim6reg1: entered allmulticast mode [ 68.961084][ T5590] loop4: detected capacity change from 0 to 128 [ 69.125454][ T5590] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.198575][ T5590] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.289260][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.636073][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.645541][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.963580][ T5634] pim6reg1: entered promiscuous mode [ 69.969097][ T5634] pim6reg1: entered allmulticast mode [ 70.124600][ T5640] ipt_REJECT: TCP_RESET invalid for non-tcp [ 70.554008][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 70.554026][ T29] audit: type=1326 audit(1747965518.348:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 70.583513][ T29] audit: type=1326 audit(1747965518.348:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 70.607053][ T29] audit: type=1326 audit(1747965518.348:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 70.664218][ T29] audit: type=1326 audit(1747965518.448:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 70.687805][ T29] audit: type=1326 audit(1747965518.448:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 70.711164][ T29] audit: type=1326 audit(1747965518.458:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 70.734499][ T29] audit: type=1326 audit(1747965518.458:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 70.757913][ T29] audit: type=1326 audit(1747965518.458:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 70.781168][ T29] audit: type=1326 audit(1747965518.458:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 70.804636][ T29] audit: type=1326 audit(1747965518.458:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 71.051311][ T5669] loop1: detected capacity change from 0 to 1024 [ 71.059378][ T5669] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.107914][ T5669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.122252][ T5674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.757'. [ 71.148641][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.375938][ T5689] xt_hashlimit: size too large, truncated to 1048576 [ 72.001337][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 72.013664][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 72.026298][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 72.100511][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 72.129611][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 72.166596][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 72.234183][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 72.243607][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 72.333477][ T5725] syzkaller0: entered allmulticast mode [ 72.448446][ T5738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.455793][ T5738] IPv6: NLM_F_CREATE should be set when creating new route [ 72.520297][ T5743] tipc: Started in network mode [ 72.525268][ T5743] tipc: Node identity ac14140f, cluster identity 4711 [ 72.537239][ T5743] tipc: New replicast peer: 255.255.255.255 [ 72.543369][ T5743] tipc: Enabled bearer , priority 10 [ 72.855449][ T5778] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.878559][ T5781] loop1: detected capacity change from 0 to 1024 [ 72.908853][ T5781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.939516][ T5791] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.948517][ T5791] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.957485][ T5791] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.967034][ T5791] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.027477][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.279480][ T5815] loop4: detected capacity change from 0 to 512 [ 73.296221][ T5815] EXT4-fs (loop4): 1 orphan inode deleted [ 73.302651][ T5815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.318423][ T4502] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1 [ 73.318541][ T5815] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.664678][ T10] tipc: Node number set to 2886997007 [ 73.783562][ T5849] __nla_validate_parse: 2 callbacks suppressed [ 73.783578][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 74.121048][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.136124][ T4502] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1 [ 75.075188][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 75.104955][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 75.133513][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 75.192963][ T5913] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 75.208623][ T5913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.223449][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 75.235880][ T5913] vlan2: entered promiscuous mode [ 75.241019][ T5913] bond3: entered promiscuous mode [ 75.252803][ T5913] dummy0: entered promiscuous mode [ 75.260596][ T5913] bond3: (slave dummy0): making interface the new active one [ 75.269423][ T5913] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 75.314139][ T5920] lo speed is unknown, defaulting to 1000 [ 75.321232][ T5920] lo speed is unknown, defaulting to 1000 [ 75.327364][ T5920] lo speed is unknown, defaulting to 1000 [ 75.333594][ T5920] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.342326][ T5920] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 75.342362][ T5924] netlink: 44 bytes leftover after parsing attributes in process `syz.0.850'. [ 75.374481][ T5920] lo speed is unknown, defaulting to 1000 [ 75.380606][ T5920] lo speed is unknown, defaulting to 1000 [ 75.389369][ T5920] lo speed is unknown, defaulting to 1000 [ 75.401475][ T5920] lo speed is unknown, defaulting to 1000 [ 75.411352][ T5920] lo speed is unknown, defaulting to 1000 [ 75.515613][ T5939] netlink: 388 bytes leftover after parsing attributes in process `syz.3.857'. [ 75.666251][ T5956] pim6reg1: entered promiscuous mode [ 75.671683][ T5956] pim6reg1: entered allmulticast mode [ 76.220067][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 76.245368][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.259744][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.471969][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 76.472001][ T29] audit: type=1326 audit(1747965524.268:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 76.519033][ T29] audit: type=1326 audit(1747965524.268:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 76.542605][ T29] audit: type=1326 audit(1747965524.268:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 76.566002][ T29] audit: type=1326 audit(1747965524.268:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 76.589706][ T29] audit: type=1326 audit(1747965524.268:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 76.613272][ T29] audit: type=1326 audit(1747965524.268:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 76.636744][ T29] audit: type=1326 audit(1747965524.268:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 76.660179][ T29] audit: type=1326 audit(1747965524.268:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 76.683677][ T29] audit: type=1326 audit(1747965524.268:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 76.707222][ T29] audit: type=1326 audit(1747965524.268:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f02b026e969 code=0x7ffc0000 [ 76.816044][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.880'. [ 76.825395][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.832900][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.850941][ T6013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.882'. [ 76.851307][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.867372][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.883717][ T6014] veth1_macvtap: left promiscuous mode [ 76.889281][ T6014] macsec0: entered promiscuous mode [ 76.920601][ T6013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6013 comm=syz.4.882 [ 77.340169][ T6035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6035 comm=syz.1.890 [ 77.393568][ T6035] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 77.428997][ T6035] bond4: (slave gretap1): making interface the new active one [ 77.465343][ T6035] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 77.527506][ T6035] vlan2: entered allmulticast mode [ 77.532794][ T6035] bond4: entered allmulticast mode [ 77.537999][ T6035] gretap1: entered allmulticast mode [ 77.548937][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 77.569736][ T6039] netlink: 116 bytes leftover after parsing attributes in process `syz.4.891'. [ 77.637673][ T6045] bridge: RTM_NEWNEIGH with invalid ether address [ 77.672636][ T6049] netlink: 'syz.0.896': attribute type 1 has an invalid length. [ 77.703632][ T6049] 8021q: adding VLAN 0 to HW filter on device bond6 [ 77.730791][ T6054] bond6 (unregistering): Released all slaves [ 77.822112][ T6062] random: crng reseeded on system resumption [ 77.878051][ T6072] netlink: 'syz.1.905': attribute type 1 has an invalid length. [ 77.948510][ T6062] program syz.2.901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.237663][ T6109] lo: entered allmulticast mode [ 78.249876][ T6109] dvmrp1: entered allmulticast mode [ 78.275270][ T6108] lo: left allmulticast mode [ 78.403332][ T6119] lo speed is unknown, defaulting to 1000 [ 78.497145][ T6126] syz_tun: entered allmulticast mode [ 78.503278][ T6126] xfrm0: entered allmulticast mode [ 78.517927][ T6126] dvmrp1: entered allmulticast mode [ 78.524990][ T6125] syz_tun: left allmulticast mode [ 78.575359][ T6132] loop4: detected capacity change from 0 to 512 [ 78.593093][ T6132] EXT4-fs: Ignoring removed oldalloc option [ 78.610311][ T6132] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.930: error while reading EA inode 32 err=-116 [ 78.630805][ T6132] EXT4-fs (loop4): Remounting filesystem read-only [ 78.637477][ T6132] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 78.648704][ T6132] EXT4-fs (loop4): 1 orphan inode deleted [ 78.656349][ T6132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.698648][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.009680][ T6161] __nla_validate_parse: 8 callbacks suppressed [ 79.009701][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.941'. [ 79.191259][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'. [ 79.208743][ T6170] Driver unsupported XDP return value 0 on prog (id 808) dev N/A, expect packet loss! [ 79.261502][ T6179] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.293174][ T6181] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 79.317072][ T6179] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.367779][ T6179] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.369398][ T6189] serio: Serial port ptm0 [ 79.417890][ T6179] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.436762][ T6196] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 79.493954][ T6179] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.506251][ T6179] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.517817][ T6179] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.530281][ T6179] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.598402][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.964'. [ 79.630099][ T6215] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6215 comm=syz.3.964 [ 79.712707][ T6226] syzkaller0: entered allmulticast mode [ 79.716581][ T6228] netlink: 'syz.2.969': attribute type 1 has an invalid length. [ 79.718546][ T6226] syzkaller0: entered promiscuous mode [ 79.735958][ T6226] syzkaller0 (unregistering): left promiscuous mode [ 79.742958][ T6226] syzkaller0 (unregistering): left allmulticast mode [ 79.780630][ T6228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.787823][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 79.802404][ T6234] bond2 (unregistering): Released all slaves [ 79.814492][ T6232] wg2: entered promiscuous mode [ 79.819391][ T6232] wg2: entered allmulticast mode [ 79.889209][ T6241] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 79.970099][ T6247] SELinux: ebitmap: truncated map [ 79.976844][ T6247] SELinux: failed to load policy [ 80.108553][ T6264] syzkaller0: entered promiscuous mode [ 80.114164][ T6264] syzkaller0: entered allmulticast mode [ 80.202691][ T6272] ip6gre1: entered allmulticast mode [ 80.239919][ T6274] SELinux: security policydb version 18 (MLS) not backwards compatible [ 80.248858][ T6274] SELinux: failed to load policy [ 80.337437][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 80.346405][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 80.355315][ T6283] netlink: 'syz.4.993': attribute type 11 has an invalid length. [ 80.420863][ T6283] loop4: detected capacity change from 0 to 512 [ 80.430820][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'. [ 80.473194][ T6283] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 80.962277][ T6302] syzkaller0: entered promiscuous mode [ 80.968759][ T6302] syzkaller0: entered allmulticast mode [ 81.121001][ T6317] loop4: detected capacity change from 0 to 128 [ 81.132388][ T6315] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1004'. [ 81.143662][ T6317] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.160606][ T6317] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.817166][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.826193][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.966593][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 81.966611][ T29] audit: type=1326 audit(1747965529.768:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbfd7e969 code=0x7ffc0000 [ 82.026621][ T4746] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.041790][ T29] audit: type=1326 audit(1747965529.798:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbfd7e969 code=0x7ffc0000 [ 82.066058][ T29] audit: type=1326 audit(1747965529.798:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cbfd7e969 code=0x7ffc0000 [ 82.089668][ T29] audit: type=1326 audit(1747965529.798:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbfd7e969 code=0x7ffc0000 [ 82.114063][ T29] audit: type=1326 audit(1747965529.798:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbfd7e969 code=0x7ffc0000 [ 82.137567][ T29] audit: type=1326 audit(1747965529.798:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3cbfd7e969 code=0x7ffc0000 [ 82.162068][ T29] audit: type=1326 audit(1747965529.798:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3cbfd7e9a3 code=0x7ffc0000 [ 82.190575][ T29] audit: type=1326 audit(1747965529.798:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3cbfd7d41f code=0x7ffc0000 [ 82.214645][ T29] audit: type=1326 audit(1747965529.798:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3cbfd7e9f7 code=0x7ffc0000 [ 82.238055][ T29] audit: type=1326 audit(1747965529.798:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3cbfd7d2d0 code=0x7ffc0000 [ 82.438812][ T6366] SELinux: ebitmap: truncated map [ 82.446127][ T6366] SELinux: failed to load policy [ 82.514974][ T6374] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1030'. [ 82.524829][ T6374] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1030'. [ 82.611966][ T6385] loop3: detected capacity change from 0 to 512 [ 82.619954][ T6385] EXT4-fs: Ignoring removed oldalloc option [ 82.632488][ T6385] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1032: error while reading EA inode 32 err=-116 [ 82.645919][ T6385] EXT4-fs (loop3): Remounting filesystem read-only [ 82.652642][ T6385] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 82.663986][ T6385] EXT4-fs (loop3): 1 orphan inode deleted [ 82.670225][ T6385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.864574][ T6395] loop1: detected capacity change from 0 to 8192 [ 83.407424][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.642598][ T6412] SELinux: ebitmap: truncated map [ 83.654821][ T6412] SELinux: failed to load policy [ 83.842632][ T6434] xt_hashlimit: size too large, truncated to 1048576 [ 84.252062][ T6463] veth1_macvtap: left promiscuous mode [ 84.257883][ T6463] macsec0: entered promiscuous mode [ 84.272502][ T6466] syzkaller0: entered allmulticast mode [ 84.337633][ T6470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.344923][ T6470] IPv6: NLM_F_CREATE should be set when creating new route [ 84.752427][ T6499] wg2: left promiscuous mode [ 84.757228][ T6499] wg2: left allmulticast mode [ 84.782208][ T6499] wg2: entered promiscuous mode [ 84.787229][ T6499] wg2: entered allmulticast mode [ 84.845152][ T6505] __nla_validate_parse: 8 callbacks suppressed [ 84.845171][ T6505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1078'. [ 84.873798][ T6505] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6505 comm=syz.4.1078 [ 85.117482][ T6516] syz.2.1080 (6516): attempted to duplicate a private mapping with mremap. This is not supported. [ 85.191390][ T6518] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 85.250410][ T6522] ipt_REJECT: TCP_RESET invalid for non-tcp [ 85.532871][ T6534] loop4: detected capacity change from 0 to 1024 [ 85.605972][ T6534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.646545][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.908312][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 85.930597][ T6555] team0 (unregistering): Port device team_slave_0 removed [ 85.943422][ T6555] team0 (unregistering): Port device team_slave_1 removed [ 86.530722][ T6592] ipt_REJECT: TCP_RESET invalid for non-tcp [ 86.672677][ T6602] loop2: detected capacity change from 0 to 256 [ 86.737957][ T6602] FAT-fs (loop2): bogus number of FAT sectors [ 86.755868][ T6602] FAT-fs (loop2): Can't find a valid FAT filesystem [ 86.782820][ T6608] netlink: 'syz.3.1116': attribute type 39 has an invalid length. [ 87.007687][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 87.007705][ T29] audit: type=1400 audit(1747965534.808:1625): avc: denied { create } for pid=6612 comm="syz.1.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.071858][ T29] audit: type=1400 audit(1747965534.868:1626): avc: denied { create } for pid=6620 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 87.091632][ T29] audit: type=1400 audit(1747965534.868:1627): avc: denied { bind } for pid=6620 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 87.112344][ T29] audit: type=1400 audit(1747965534.868:1628): avc: denied { name_bind } for pid=6620 comm="syz.1.1119" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 87.133236][ T29] audit: type=1400 audit(1747965534.868:1629): avc: denied { node_bind } for pid=6620 comm="syz.1.1119" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 87.154771][ T29] audit: type=1400 audit(1747965534.868:1630): avc: denied { listen } for pid=6620 comm="syz.1.1119" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 87.175447][ T29] audit: type=1400 audit(1747965534.868:1631): avc: denied { connect } for pid=6620 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 87.195873][ T29] audit: type=1400 audit(1747965534.868:1632): avc: denied { name_connect } for pid=6620 comm="syz.1.1119" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 87.233816][ T29] audit: type=1400 audit(1747965535.028:1633): avc: denied { write } for pid=6620 comm="syz.1.1119" laddr=172.20.20.170 lport=36174 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 87.326589][ T29] audit: type=1326 audit(1747965535.118:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 87.381425][ T6633] siw: device registration error -23 [ 87.400047][ T6635] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.457525][ T6635] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.516467][ T6635] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.575393][ T6635] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.640802][ T6635] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.652088][ T6635] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.663629][ T6635] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.676463][ T6635] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.761026][ T6653] lo speed is unknown, defaulting to 1000 [ 88.070671][ T6667] syzkaller0: entered promiscuous mode [ 88.076278][ T6667] syzkaller0: entered allmulticast mode [ 88.177226][ T6670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1139'. [ 88.198300][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 88.375227][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'. [ 88.458995][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.494478][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.605994][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 88.625740][ T6698] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1150'. [ 88.656451][ T6700] lo speed is unknown, defaulting to 1000 [ 88.794092][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 88.813003][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 88.862200][ T6715] loop1: detected capacity change from 0 to 512 [ 88.884290][ T6715] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.893453][ T6715] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 88.970021][ T6715] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 88.979889][ T6715] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 88.990502][ T6715] System zones: 0-2, 18-18, 34-34 [ 89.014942][ T6715] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 89.044395][ T6715] EXT4-fs (loop1): 1 truncate cleaned up [ 89.050549][ T6715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.189334][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.245665][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 89.473543][ T6758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.483406][ T6759] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6759 comm=syz.2.1169 [ 89.504229][ T6758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.607994][ T6765] serio: Serial port ptm0 [ 89.729679][ T6768] syzkaller0: entered promiscuous mode [ 89.735327][ T6768] syzkaller0: entered allmulticast mode [ 90.951668][ T6808] smc: net device bond0 applied user defined pnetid SYZ0 [ 90.959437][ T6808] smc: net device bond0 erased user defined pnetid SYZ0 [ 91.181352][ T6824] netlink: 'syz.3.1200': attribute type 27 has an invalid length. [ 91.247070][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.254419][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.338147][ T6824] wg2: left promiscuous mode [ 91.342834][ T6824] wg2: left allmulticast mode [ 91.381408][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.391194][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.417106][ T6824] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.426422][ T6824] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.435059][ T6824] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.443512][ T6824] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.465567][ T36] lo speed is unknown, defaulting to 1000 [ 91.471364][ T36] syz0: Port: 1 Link DOWN [ 91.476573][ T6833] syz_tun: entered allmulticast mode [ 91.582893][ T6824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.591154][ T6824] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.601381][ T6824] net_ratelimit: 5 callbacks suppressed [ 91.601392][ T6824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.623408][ T36] lo speed is unknown, defaulting to 1000 [ 91.629287][ T36] syz0: Port: 1 Link ACTIVE [ 91.657990][ T6823] syz_tun: left allmulticast mode [ 91.777947][ T6853] loop4: detected capacity change from 0 to 512 [ 91.785515][ T6853] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.807973][ T6853] EXT4-fs (loop4): 1 truncate cleaned up [ 91.824107][ T6853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.842150][ T6857] __nla_validate_parse: 3 callbacks suppressed [ 91.842185][ T6857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1208'. [ 91.998242][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.618041][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 92.618061][ T29] audit: type=1400 audit(1747965540.408:1824): avc: denied { map } for pid=6873 comm="syz.2.1215" path="socket:[14946]" dev="sockfs" ino=14946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 92.686592][ T29] audit: type=1400 audit(1747965540.458:1825): avc: denied { bind } for pid=6875 comm="syz.2.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.849297][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 92.947688][ T6886] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 92.949351][ T6892] loop3: detected capacity change from 0 to 128 [ 92.981050][ T29] audit: type=1400 audit(1747965540.778:1826): avc: denied { mount } for pid=6891 comm="syz.3.1222" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 92.982827][ T6892] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 93.010974][ T6892] FAT-fs (loop3): Filesystem has been set read-only [ 93.018267][ T6892] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 93.026315][ T6892] syz.3.1222: attempt to access beyond end of device [ 93.026315][ T6892] loop3: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 93.028397][ T6894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 93.088637][ T6889] lo speed is unknown, defaulting to 1000 [ 93.120694][ T29] audit: type=1326 audit(1747965540.918:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 93.144543][ T29] audit: type=1326 audit(1747965540.918:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 93.191751][ T29] audit: type=1326 audit(1747965540.978:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 93.215306][ T29] audit: type=1326 audit(1747965540.978:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 93.238796][ T29] audit: type=1326 audit(1747965540.978:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 93.262367][ T29] audit: type=1326 audit(1747965540.978:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 93.285898][ T29] audit: type=1326 audit(1747965540.978:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 93.383852][ T6905] netlink: 664 bytes leftover after parsing attributes in process `syz.0.1226'. [ 93.462102][ T6918] loop2: detected capacity change from 0 to 2048 [ 93.534402][ T6918] loop2: p1 < > p4 [ 93.557217][ T6918] loop2: p4 size 8388608 extends beyond EOD, truncated [ 93.863277][ T6942] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1242'. [ 93.878803][ T6942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.890280][ T6942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.902010][ T6942] bond0 (unregistering): Released all slaves [ 94.234639][ T6965] loop4: detected capacity change from 0 to 1024 [ 94.241439][ T6965] EXT4-fs: Ignoring removed orlov option [ 94.247257][ T6965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.265849][ T6965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.437746][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.491940][ T6974] loop4: detected capacity change from 0 to 4096 [ 94.504893][ T6974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.535100][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.610954][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1260'. [ 94.620844][ T6986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.628410][ T6986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.637348][ T6986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.645517][ T6986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.930850][ T7002] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 95.078927][ T7007] loop3: detected capacity change from 0 to 1024 [ 95.085915][ T7007] EXT4-fs: Ignoring removed nobh option [ 95.091490][ T7007] EXT4-fs: Ignoring removed bh option [ 95.115824][ T7007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.195274][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.747749][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1281'. [ 95.849553][ T7030] loop1: detected capacity change from 0 to 512 [ 95.869531][ T7030] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.895494][ T7030] EXT4-fs (loop1): 1 truncate cleaned up [ 95.902215][ T7030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.087596][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.162369][ T7059] loop3: detected capacity change from 0 to 2048 [ 96.170268][ T7061] netlink: 'syz.4.1293': attribute type 3 has an invalid length. [ 96.178074][ T7061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1293'. [ 96.193415][ T7061] loop4: detected capacity change from 0 to 512 [ 96.200762][ T7061] EXT4-fs (loop4): unsupported inode size: 0 [ 96.206843][ T7061] EXT4-fs (loop4): blocksize: 2048 [ 96.237685][ T7059] loop3: p1 < > p4 [ 96.242131][ T7059] loop3: p4 size 8388608 extends beyond EOD, truncated [ 96.623203][ T7086] pim6reg1: entered promiscuous mode [ 96.628830][ T7086] pim6reg1: entered allmulticast mode [ 96.668976][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1303'. [ 96.727671][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1307'. [ 96.762325][ T7090] bond3: (slave dummy0): Releasing active interface [ 96.788771][ T7090] bridge_slave_0: left allmulticast mode [ 96.794642][ T7090] bridge_slave_0: left promiscuous mode [ 96.800337][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.815917][ T7090] bridge_slave_1: left allmulticast mode [ 96.821718][ T7090] bridge_slave_1: left promiscuous mode [ 96.827569][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.845098][ T7090] bond0: (slave bond_slave_0): Releasing backup interface [ 96.866060][ T7090] bond0: (slave bond_slave_1): Releasing backup interface [ 96.877573][ T7090] bond1: (slave bond2): Releasing backup interface [ 96.964760][ T7104] loop4: detected capacity change from 0 to 1024 [ 96.986705][ T7104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.024891][ T7104] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1313: Allocating blocks 385-513 which overlap fs metadata [ 97.042357][ T7104] EXT4-fs (loop4): pa ffff888106dd3230: logic 16, phys. 129, len 24 [ 97.051197][ T7104] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 97.101859][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.375105][ T7125] loop1: detected capacity change from 0 to 1024 [ 97.396431][ T7125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.430748][ T7125] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1320: Allocating blocks 497-513 which overlap fs metadata [ 97.529630][ T7125] EXT4-fs (loop1): pa ffff888106e445b0: logic 16, phys. 145, len 23 [ 97.537840][ T7125] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 97.613032][ T7125] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 97.626024][ T7125] EXT4-fs (loop1): This should not happen!! Data will be lost [ 97.626024][ T7125] [ 97.635984][ T7125] EXT4-fs (loop1): Total free blocks count 0 [ 97.641990][ T7125] EXT4-fs (loop1): Free/Dirty block details [ 97.647927][ T7125] EXT4-fs (loop1): free_blocks=16 [ 97.653084][ T7125] EXT4-fs (loop1): dirty_blocks=0 [ 97.658159][ T7125] EXT4-fs (loop1): Block reservation details [ 97.664225][ T7125] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 97.714697][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 97.714719][ T29] audit: type=1326 audit(1747965545.498:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 97.714765][ T29] audit: type=1326 audit(1747965545.508:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 97.714807][ T29] audit: type=1326 audit(1747965545.508:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 97.714900][ T29] audit: type=1326 audit(1747965545.508:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 97.714936][ T29] audit: type=1326 audit(1747965545.508:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 97.714981][ T29] audit: type=1326 audit(1747965545.508:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 97.715011][ T29] audit: type=1326 audit(1747965545.508:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 97.715111][ T29] audit: type=1326 audit(1747965545.508:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 97.715139][ T29] audit: type=1326 audit(1747965545.508:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 97.715180][ T29] audit: type=1326 audit(1747965545.508:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7135 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 97.921574][ T7139] loop3: detected capacity change from 0 to 1764 [ 98.042895][ T7145] bridge_slave_0: left allmulticast mode [ 98.042997][ T7145] bridge_slave_0: left promiscuous mode [ 98.043137][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.123037][ T7145] bridge_slave_1: left allmulticast mode [ 98.123063][ T7145] bridge_slave_1: left promiscuous mode [ 98.123144][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.145006][ T7145] bond1: (slave ip6erspan0): Releasing active interface [ 98.218194][ T7155] loop4: detected capacity change from 0 to 2048 [ 98.267654][ T7155] loop4: p1 < > p4 [ 98.272104][ T7155] loop4: p4 size 8388608 extends beyond EOD, truncated [ 98.280218][ T7161] bond0: (slave bond_slave_0): Releasing backup interface [ 98.291748][ T7161] bond0: (slave bond_slave_1): Releasing backup interface [ 98.307472][ T7161] team0: Failed to send options change via netlink (err -105) [ 98.316284][ T7161] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 98.326638][ T7161] team0: Port device team_slave_0 removed [ 98.336277][ T7161] team0: Failed to send options change via netlink (err -105) [ 98.344387][ T7161] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 98.355041][ T7161] team0: Port device team_slave_1 removed [ 98.362300][ T7161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.369906][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.390941][ T7161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.399233][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.438087][ T7161] bond1: (slave ip6erspan0): Releasing active interface [ 98.457323][ T7161] bond2: (slave bond3): Releasing backup interface [ 98.464045][ T7161] bond2: (slave bond3): the permanent HWaddr of slave - aa:bc:75:a4:a7:90 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 98.481098][ T7161] bond2: (slave gretap1): making interface the new active one [ 98.491498][ T7161] bond2: (slave gretap1): Releasing backup interface [ 98.501984][ T7161] bond4: (slave bond5): Releasing backup interface [ 98.524161][ T7152] lo speed is unknown, defaulting to 1000 [ 98.551126][ T7179] loop1: detected capacity change from 0 to 8192 [ 98.684941][ T7194] netlink: 'syz.0.1344': attribute type 1 has an invalid length. [ 98.762452][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 98.789505][ T7199] TC_ACT_REPEAT abuse ? [ 98.793863][ T7199] TC_ACT_REPEAT abuse ? [ 98.810028][ T7194] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 98.824294][ T7199] TC_ACT_REPEAT abuse ? [ 98.832200][ T7194] bond7: (slave batadv1): Enslaving as a backup interface with an up link [ 98.857097][ T7198] TC_ACT_REPEAT abuse ? [ 98.861654][ T7198] TC_ACT_REPEAT abuse ? [ 98.889011][ T7194] bond7 (unregistering): (slave batadv1): Releasing backup interface [ 98.899708][ T7194] bond7 (unregistering): Released all slaves [ 98.940244][ T7202] pim6reg1: entered promiscuous mode [ 98.945624][ T7202] pim6reg1: entered allmulticast mode [ 98.973372][ T7197] lo speed is unknown, defaulting to 1000 [ 99.203919][ T7229] TC_ACT_REPEAT abuse ? [ 99.208444][ T7229] TC_ACT_REPEAT abuse ? [ 99.212940][ T7229] TC_ACT_REPEAT abuse ? [ 99.219179][ T7228] TC_ACT_REPEAT abuse ? [ 99.223632][ T7228] TC_ACT_REPEAT abuse ? [ 99.351165][ T7237] loop1: detected capacity change from 0 to 1764 [ 99.486276][ T7242] loop3: detected capacity change from 0 to 512 [ 99.493076][ T7242] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.505155][ T7242] EXT4-fs (loop3): 1 truncate cleaned up [ 99.511329][ T7242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.525684][ T7242] syz.3.1363 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 99.559146][ T7239] loop1: detected capacity change from 0 to 1024 [ 99.587055][ T7239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.600174][ T7239] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.614310][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.629711][ T7239] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1362'. [ 99.654874][ T7248] netlink: 'syz.3.1364': attribute type 1 has an invalid length. [ 99.662969][ T7248] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1364'. [ 99.716794][ T7248] loop3: detected capacity change from 0 to 512 [ 99.734512][ T7248] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1364: bg 0: block 393: padding at end of block bitmap is not set [ 99.749807][ T7248] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 99.760195][ T7248] EXT4-fs (loop3): 2 truncates cleaned up [ 99.760948][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.767225][ T7248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.805906][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.840130][ T7253] syzkaller0: entered promiscuous mode [ 99.845792][ T7253] syzkaller0: entered allmulticast mode [ 99.852496][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 99.861477][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 99.961435][ T7266] raw_sendmsg: syz.3.1372 forgot to set AF_INET. Fix it! [ 99.996810][ T7268] loop3: detected capacity change from 0 to 128 [ 100.042788][ T7268] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 100.074163][ T7268] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.445078][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.559726][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'. [ 100.635751][ T7283] 8021q: adding VLAN 0 to HW filter on device bond5 [ 100.681361][ T7289] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1380'. [ 100.710217][ T7290] 8021q: adding VLAN 0 to HW filter on device bond5 [ 100.812849][ T7290] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 100.815669][ T7293] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1381'. [ 100.860386][ T7290] bond5: (slave vti0): Error -95 calling set_mac_address [ 100.894848][ T7283] bond5: (slave dummy0): Error -99 calling set_mac_address [ 100.952860][ T7299] lo speed is unknown, defaulting to 1000 [ 101.114774][ T7310] loop1: detected capacity change from 0 to 1024 [ 101.162512][ T7310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.265566][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.862420][ T7326] hub 9-0:1.0: USB hub found [ 101.868489][ T7326] hub 9-0:1.0: 8 ports detected [ 101.873498][ T7327] caif0: entered promiscuous mode [ 101.878685][ T7327] caif0: entered allmulticast mode [ 101.895688][ T7327] block device autoloading is deprecated and will be removed. [ 101.917791][ T7327] syz.4.1394: attempt to access beyond end of device [ 101.917791][ T7327] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 101.951314][ T7322] lo speed is unknown, defaulting to 1000 [ 101.989028][ T7336] loop4: detected capacity change from 0 to 256 [ 102.076344][ T7346] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 102.309718][ T7357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7357 comm=syz.4.1403 [ 102.328691][ T7356] loop1: detected capacity change from 0 to 512 [ 102.354866][ T7356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.411262][ T7356] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1407: invalid block [ 102.500375][ T7340] xt_connbytes: Forcing CT accounting to be enabled [ 102.511186][ T7356] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1407: invalid indirect mapped block 4294967295 (level 1) [ 102.534820][ T7340] Cannot find del_set index 1 as target [ 102.595484][ T7356] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1407: invalid indirect mapped block 4294967295 (level 1) [ 102.684503][ T7356] EXT4-fs (loop1): 2 truncates cleaned up [ 102.690920][ T7356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.736276][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 102.736295][ T29] audit: type=1326 audit(1747965550.538:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd79e4fe969 code=0x7ffc0000 [ 102.796079][ T29] audit: type=1326 audit(1747965550.568:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e4fe969 code=0x7ffc0000 [ 102.819573][ T29] audit: type=1326 audit(1747965550.578:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e4fe969 code=0x7ffc0000 [ 102.843089][ T29] audit: type=1326 audit(1747965550.578:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd79e4fe969 code=0x7ffc0000 [ 102.866633][ T29] audit: type=1326 audit(1747965550.578:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e4fe969 code=0x7ffc0000 [ 102.883752][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 102.899032][ T29] audit: type=1326 audit(1747965550.588:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e4fe969 code=0x7ffc0000 [ 102.923048][ T29] audit: type=1326 audit(1747965550.588:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd79e4fe969 code=0x7ffc0000 [ 102.923116][ T29] audit: type=1326 audit(1747965550.588:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e4fe969 code=0x7ffc0000 [ 102.923147][ T29] audit: type=1326 audit(1747965550.588:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79e4fe969 code=0x7ffc0000 [ 102.923404][ T29] audit: type=1326 audit(1747965550.588:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd79e4fe969 code=0x7ffc0000 [ 102.972935][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 103.154895][ T7370] SELinux: Context Ü is not valid (left unmapped). [ 103.259524][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.862821][ T7408] loop3: detected capacity change from 0 to 512 [ 103.910930][ T7412] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1428'. [ 103.992916][ T7414] hub 9-0:1.0: USB hub found [ 103.997676][ T7414] hub 9-0:1.0: 8 ports detected [ 104.147116][ T7408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.176153][ T7429] syzkaller0: entered promiscuous mode [ 104.181670][ T7429] syzkaller0: entered allmulticast mode [ 104.183810][ T7433] loop0: detected capacity change from 0 to 2048 [ 104.202534][ T7408] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.268348][ T7438] net_ratelimit: 18 callbacks suppressed [ 104.268366][ T7438] TC_ACT_REPEAT abuse ? [ 104.279531][ T7433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.299634][ T7433] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 104.347539][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.370795][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.371858][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 104.435916][ T7445] loop3: detected capacity change from 0 to 1024 [ 104.483764][ T7445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.526437][ T7455] pim6reg1: entered promiscuous mode [ 104.531797][ T7455] pim6reg1: entered allmulticast mode [ 104.593958][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.874853][ T7470] TC_ACT_REPEAT abuse ? [ 104.879360][ C0] TC_ACT_REPEAT abuse ? [ 104.883782][ T7470] TC_ACT_REPEAT abuse ? [ 104.896519][ T7470] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1450'. [ 104.905655][ T7470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1450'. [ 104.914851][ T7470] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1450'. [ 104.973686][ T7470] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1450'. [ 105.001816][ T7470] TC_ACT_REPEAT abuse ? [ 105.006509][ T1065] TC_ACT_REPEAT abuse ? [ 105.022716][ T7470] TC_ACT_REPEAT abuse ? [ 105.027203][ T1065] TC_ACT_REPEAT abuse ? [ 105.031774][ T7470] TC_ACT_REPEAT abuse ? [ 105.036176][ C0] TC_ACT_REPEAT abuse ? [ 105.719819][ T7493] loop4: detected capacity change from 0 to 512 [ 105.727233][ T7493] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.754466][ T7493] EXT4-fs (loop4): 1 truncate cleaned up [ 105.760479][ T7493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.937551][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1464'. [ 105.995931][ T7506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.043241][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.096790][ T7506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.125866][ T7506] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 106.175513][ T7506] bond0: (slave vti0): Error -95 calling set_mac_address [ 106.231711][ T7520] bond0: (slave dummy0): Error -99 calling set_mac_address [ 106.416067][ T7517] lo speed is unknown, defaulting to 1000 [ 106.494358][ T7527] netlink: 'syz.0.1471': attribute type 4 has an invalid length. [ 106.590768][ T7534] bridge: RTM_NEWNEIGH with invalid ether address [ 106.990078][ T7550] block device autoloading is deprecated and will be removed. [ 107.004274][ T7550] syz.0.1489: attempt to access beyond end of device [ 107.004274][ T7550] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 107.021326][ T7551] loop1: detected capacity change from 0 to 2048 [ 107.059022][ T7551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.095726][ T7551] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 107.154653][ T7558] loop0: detected capacity change from 0 to 128 [ 107.235876][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.907886][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 107.932133][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 107.945830][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 107.945866][ T29] audit: type=1400 audit(1747965555.748:2575): avc: denied { execute } for pid=7574 comm="syz.2.1488" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.958331][ T7577] loop0: detected capacity change from 0 to 512 [ 107.980289][ T29] audit: type=1400 audit(1747965555.748:2576): avc: denied { execute_no_trans } for pid=7574 comm="syz.2.1488" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.036680][ T7577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.051508][ T7577] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.071604][ T7583] loop2: detected capacity change from 0 to 1024 [ 108.080540][ T29] audit: type=1400 audit(1747965555.878:2577): avc: denied { create } for pid=7576 comm="syz.0.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.100602][ T29] audit: type=1400 audit(1747965555.878:2578): avc: denied { connect } for pid=7576 comm="syz.0.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.100979][ T7583] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 108.120326][ T29] audit: type=1400 audit(1747965555.878:2579): avc: denied { write } for pid=7576 comm="syz.0.1490" path="socket:[17094]" dev="sockfs" ino=17094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.132087][ T7583] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 108.167075][ T7583] JBD2: no valid journal superblock found [ 108.172844][ T7583] EXT4-fs (loop2): Could not load journal inode [ 108.198872][ T29] audit: type=1400 audit(1747965555.998:2580): avc: denied { write } for pid=7586 comm="syz.4.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 108.222308][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.242687][ T7585] caif0: entered promiscuous mode [ 108.248513][ T7585] caif0: entered allmulticast mode [ 108.301647][ T7589] loop0: detected capacity change from 0 to 1024 [ 108.351064][ T7589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.371058][ T29] audit: type=1400 audit(1747965556.168:2581): avc: denied { execute } for pid=7582 comm="syz.2.1492" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 108.401189][ T7589] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1495: Allocating blocks 497-513 which overlap fs metadata [ 108.420522][ T7589] EXT4-fs (loop0): pa ffff888106e44540: logic 16, phys. 145, len 23 [ 108.429183][ T7589] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 108.439848][ T7589] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 108.452156][ T7589] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.452156][ T7589] [ 108.461933][ T7589] EXT4-fs (loop0): Total free blocks count 0 [ 108.468021][ T7589] EXT4-fs (loop0): Free/Dirty block details [ 108.474397][ T7589] EXT4-fs (loop0): free_blocks=16 [ 108.479435][ T7589] EXT4-fs (loop0): dirty_blocks=0 [ 108.484583][ T7589] EXT4-fs (loop0): Block reservation details [ 108.490603][ T7589] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 108.555362][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'. [ 108.586550][ T7599] syzkaller0: entered promiscuous mode [ 108.592214][ T7599] syzkaller0: entered allmulticast mode [ 108.592319][ T29] audit: type=1326 audit(1747965556.388:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 108.621411][ T29] audit: type=1326 audit(1747965556.388:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 108.644986][ T29] audit: type=1326 audit(1747965556.388:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7f87e969 code=0x7ffc0000 [ 108.674216][ T7601] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 108.685240][ T7598] 8021q: adding VLAN 0 to HW filter on device bond7 [ 108.743489][ T7604] 8021q: adding VLAN 0 to HW filter on device bond7 [ 108.773147][ T7604] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 108.852889][ T7604] bond7: (slave vti0): Error -95 calling set_mac_address [ 109.079802][ T7598] bond7: (slave dummy0): Error -99 calling set_mac_address [ 109.165929][ T7623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.176969][ T7623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.277974][ T7623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.288496][ T7623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.337510][ T7623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.347977][ T7623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.397608][ T7623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.408002][ T7623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.444749][ T7623] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.453057][ T7623] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.463630][ T7624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1507'. [ 109.466076][ T7623] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.480941][ T7623] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.495326][ T7623] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.503616][ T7623] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.526061][ T7623] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.534411][ T7623] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.705361][ T7638] lo speed is unknown, defaulting to 1000 [ 109.774013][ T7642] loop4: detected capacity change from 0 to 4096 [ 109.782954][ T7642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.805423][ T7642] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 109.816496][ T7642] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 109.837632][ T3319] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /280/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 109.859417][ T3319] EXT4-fs error (device loop4): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 109.880228][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 109.892878][ T3319] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /280/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 109.915237][ T3319] EXT4-fs error (device loop4): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 109.935685][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 109.950129][ T3319] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /280/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 109.973041][ T3319] EXT4-fs error (device loop4): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 109.992879][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 110.004934][ T3319] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /280/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 110.026623][ T3319] EXT4-fs error (device loop4): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 110.046340][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 110.057990][ T3319] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /280/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 110.079517][ T3319] EXT4-fs error (device loop4): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 110.100025][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 110.112311][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 110.125122][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 110.143792][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 110.156677][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 110.168653][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 110.202434][ T7648] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.272360][ T7648] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.292883][ T7651] netlink: 'syz.3.1516': attribute type 3 has an invalid length. [ 110.316624][ T7648] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.379224][ T7655] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 110.485730][ T7648] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.512776][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 110.525365][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 110.539300][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1521'. [ 110.617377][ T7670] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.640199][ T7648] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.665943][ T7648] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.689528][ T7648] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.702321][ T7648] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.712669][ T7670] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.765434][ T7660] lo speed is unknown, defaulting to 1000 [ 110.788871][ T7670] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.836466][ T7670] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.851978][ T7660] chnl_net:caif_netlink_parms(): no params data found [ 110.876344][ T4502] xfrm0 (unregistering): left allmulticast mode [ 110.889755][ T4502] dvmrp1 (unregistering): left allmulticast mode [ 110.935797][ T4502] bond0 (unregistering): Released all slaves [ 110.944651][ T4502] bond1 (unregistering): Released all slaves [ 110.952911][ T4502] bond2 (unregistering): Released all slaves [ 110.962862][ T4502] bond3 (unregistering): Released all slaves [ 110.989616][ T7670] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.005211][ T7670] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.048873][ T7670] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.061596][ T7670] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.072859][ T4502] hsr_slave_0: left promiscuous mode [ 111.078642][ T4502] hsr_slave_1: left promiscuous mode [ 111.122921][ T7693] loop2: detected capacity change from 0 to 4096 [ 111.136321][ T7693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.161494][ T7660] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.168656][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.176003][ T7660] bridge_slave_0: entered allmulticast mode [ 111.182877][ T7660] bridge_slave_0: entered promiscuous mode [ 111.203964][ T7660] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.211091][ T7660] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.219128][ T7660] bridge_slave_1: entered allmulticast mode [ 111.219805][ T7693] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.225637][ T7660] bridge_slave_1: entered promiscuous mode [ 111.248307][ T7693] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 111.271387][ T7660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.283406][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.313233][ T7660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.361487][ T7660] team0: Port device team_slave_0 added [ 111.375875][ T7660] team0: Port device team_slave_1 added [ 111.395125][ T7709] loop3: detected capacity change from 0 to 1024 [ 111.403122][ T7707] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.414543][ T7709] ext4: Unknown parameter 'nouser_xattr' [ 111.460101][ T7660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.467152][ T7660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.494221][ T7660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.514880][ T7707] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.542495][ T7660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.549616][ T7660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.560535][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.576933][ T7660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.583773][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.602154][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.609938][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.653320][ T7660] hsr_slave_0: entered promiscuous mode [ 111.662788][ T7660] hsr_slave_1: entered promiscuous mode [ 111.669826][ T7660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.672042][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.678547][ T7660] Cannot create hsr debugfs directory [ 111.685199][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.685240][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.685338][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.714011][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.721892][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.729859][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.737679][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.745478][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.753259][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.761113][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.769058][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.776877][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.784688][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.792447][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.800277][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.808063][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.815940][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.823694][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.831559][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.839337][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 111.848028][ T23] hid-generic 0000:0000:20000000.0002: hidraw0: HID v0.01 Device [syz0] on syz1 [ 111.859560][ T7707] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.937189][ T7707] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.982165][ T7660] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.996298][ T7660] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.006980][ T7660] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.025531][ T7660] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.070864][ T7660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.093513][ T7660] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.107550][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.114681][ T4502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.128179][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.135302][ T4727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.357047][ T7660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.709885][ T7747] tls_set_device_offload_rx: netdev not found [ 112.861837][ T7660] veth0_vlan: entered promiscuous mode [ 112.878042][ T7660] veth1_vlan: entered promiscuous mode [ 112.909130][ T7660] veth0_macvtap: entered promiscuous mode [ 112.916635][ T7660] veth1_macvtap: entered promiscuous mode [ 112.932346][ T7660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.945624][ T7660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.956538][ T7660] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.965400][ T7660] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.974352][ T7660] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.983105][ T7660] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.011960][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 113.011979][ T29] audit: type=1400 audit(1747965560.808:2676): avc: denied { mounton } for pid=7660 comm="syz-executor" path="/root/syzkaller.USK9AY/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 113.046702][ T29] audit: type=1400 audit(1747965560.808:2677): avc: denied { mount } for pid=7660 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 113.069011][ T29] audit: type=1400 audit(1747965560.818:2678): avc: denied { mount } for pid=7660 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 113.091016][ T29] audit: type=1400 audit(1747965560.818:2679): avc: denied { mounton } for pid=7660 comm="syz-executor" path="/root/syzkaller.USK9AY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 113.117834][ T29] audit: type=1400 audit(1747965560.818:2680): avc: denied { mounton } for pid=7660 comm="syz-executor" path="/root/syzkaller.USK9AY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 113.145517][ T29] audit: type=1400 audit(1747965560.838:2681): avc: denied { mounton } for pid=7660 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 113.168412][ T29] audit: type=1400 audit(1747965560.838:2682): avc: denied { mount } for pid=7660 comm="syz-executor" name="/" dev="gadgetfs" ino=3769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 114.202409][ T7777] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1520'. [ 114.232045][ T7779] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1550'. [ 114.253068][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1520'. [ 114.349209][ T29] audit: type=1400 audit(1747965562.148:2683): avc: denied { bind } for pid=7785 comm="syz.0.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.390720][ T29] audit: type=1400 audit(1747965562.168:2684): avc: denied { mount } for pid=7787 comm="syz.5.1554" name="/" dev="ramfs" ino=19091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 114.439860][ T7790] loop0: detected capacity change from 0 to 512 [ 114.477080][ T29] audit: type=1400 audit(1747965562.248:2685): avc: denied { unmount } for pid=7660 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 114.566087][ T7790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 114.591034][ T7790] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.657209][ T7790] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.1555: corrupted inode contents [ 114.684699][ T7790] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #19: comm syz.0.1555: mark_inode_dirty error [ 114.709486][ T7790] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.1555: corrupted inode contents [ 114.738305][ T7790] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm syz.0.1555: mark_inode_dirty error [ 114.766160][ T7790] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm syz.0.1555: mark inode dirty (error -117) [ 114.793496][ T7790] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 114.830146][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 114.863372][ T7804] netlink: 'syz.0.1558': attribute type 4 has an invalid length. [ 114.903652][ T7707] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.915947][ T7707] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.928010][ T7707] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.936513][ T7804] netlink: 'syz.0.1558': attribute type 4 has an invalid length. [ 114.948061][ T7707] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.655408][ T7827] net_ratelimit: 18 callbacks suppressed [ 115.655428][ T7827] TC_ACT_REPEAT abuse ? [ 115.665598][ C1] TC_ACT_REPEAT abuse ? [ 115.670112][ T7827] TC_ACT_REPEAT abuse ? [ 115.700892][ T7827] TC_ACT_REPEAT abuse ? [ 115.705403][ C1] TC_ACT_REPEAT abuse ? [ 115.709863][ T7827] TC_ACT_REPEAT abuse ? [ 115.714348][ T7827] TC_ACT_REPEAT abuse ? [ 115.759826][ T7833] TC_ACT_REPEAT abuse ? [ 115.764259][ C1] TC_ACT_REPEAT abuse ? [ 115.768653][ C1] TC_ACT_REPEAT abuse ? [ 115.796838][ T7815] ================================================================== [ 115.804983][ T7815] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 115.812913][ T7815] [ 115.815257][ T7815] write to 0xffffea0004e59158 of 8 bytes by task 7762 on cpu 1: [ 115.822917][ T7815] __filemap_remove_folio+0x1a5/0x2a0 [ 115.828309][ T7815] filemap_remove_folio+0x6d/0x1d0 [ 115.833448][ T7815] truncate_inode_folio+0x42/0x50 [ 115.838515][ T7815] shmem_undo_range+0x244/0xa80 [ 115.843394][ T7815] shmem_evict_inode+0x134/0x520 [ 115.848382][ T7815] evict+0x2e3/0x550 [ 115.852312][ T7815] iput+0x447/0x5b0 [ 115.856159][ T7815] dentry_unlink_inode+0x24f/0x260 [ 115.861303][ T7815] __dentry_kill+0x18d/0x4b0 [ 115.865936][ T7815] dput+0x5e/0xd0 [ 115.869622][ T7815] __fput+0x444/0x650 [ 115.873641][ T7815] ____fput+0x1c/0x30 [ 115.877638][ T7815] task_work_run+0x12e/0x1a0 [ 115.882266][ T7815] do_exit+0x5dd/0x17c0 [ 115.886441][ T7815] do_group_exit+0xff/0x140 [ 115.890991][ T7815] get_signal+0xe59/0xf70 [ 115.895327][ T7815] arch_do_signal_or_restart+0x97/0x480 [ 115.900896][ T7815] irqentry_exit_to_user_mode+0x5e/0xa0 [ 115.906453][ T7815] irqentry_exit+0x12/0x50 [ 115.910877][ T7815] asm_exc_page_fault+0x26/0x30 [ 115.915737][ T7815] [ 115.918077][ T7815] read to 0xffffea0004e59158 of 8 bytes by task 7815 on cpu 0: [ 115.925628][ T7815] folio_mapping+0xa1/0x120 [ 115.930150][ T7815] evict_folios+0x2986/0x33d0 [ 115.934831][ T7815] try_to_shrink_lruvec+0x45a/0x7e0 [ 115.940040][ T7815] shrink_lruvec+0x22e/0x1a40 [ 115.944734][ T7815] shrink_node+0x686/0x2110 [ 115.949261][ T7815] do_try_to_free_pages+0x3f6/0xcd0 [ 115.954475][ T7815] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 115.960385][ T7815] try_charge_memcg+0x3ab/0x870 [ 115.965258][ T7815] obj_cgroup_charge_pages+0xb7/0x1a0 [ 115.970637][ T7815] __memcg_kmem_charge_page+0x9f/0x170 [ 115.976109][ T7815] __alloc_frozen_pages_noprof+0x188/0x360 [ 115.981927][ T7815] alloc_pages_mpol+0xb3/0x250 [ 115.986701][ T7815] alloc_pages_noprof+0x90/0x130 [ 115.991647][ T7815] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 115.997473][ T7815] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 116.002858][ T7815] ip_set_alloc+0x1f/0x30 [ 116.007212][ T7815] hash_netiface_create+0x282/0x740 [ 116.012435][ T7815] ip_set_create+0x3c9/0x960 [ 116.017042][ T7815] nfnetlink_rcv_msg+0x4c6/0x590 [ 116.022007][ T7815] netlink_rcv_skb+0x123/0x220 [ 116.026787][ T7815] nfnetlink_rcv+0x16b/0x1690 [ 116.031474][ T7815] netlink_unicast+0x5a1/0x670 [ 116.036260][ T7815] netlink_sendmsg+0x58b/0x6b0 [ 116.041029][ T7815] __sock_sendmsg+0x145/0x180 [ 116.045726][ T7815] ____sys_sendmsg+0x31e/0x4e0 [ 116.050521][ T7815] ___sys_sendmsg+0x17b/0x1d0 [ 116.055206][ T7815] __x64_sys_sendmsg+0xd4/0x160 [ 116.060174][ T7815] x64_sys_call+0x2999/0x2fb0 [ 116.064862][ T7815] do_syscall_64+0xd0/0x1a0 [ 116.069373][ T7815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.075288][ T7815] [ 116.077618][ T7815] value changed: 0xffff8881196601f0 -> 0x0000000000000000 [ 116.084743][ T7815] [ 116.087072][ T7815] Reported by Kernel Concurrency Sanitizer on: [ 116.093241][ T7815] CPU: 0 UID: 0 PID: 7815 Comm: syz.1.1563 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(voluntary) [ 116.105664][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.115731][ T7815] ================================================================== [ 116.475923][ T7815] syz.1.1563 (7815) used greatest stack depth: 6536 bytes left