last executing test programs: 2m17.179804951s ago: executing program 0 (id=149): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r3, 0x7, '\x00', 0x0, r2, 0x0, 0x6}, 0x50) 2m17.179343232s ago: executing program 0 (id=150): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, 0x0, 0x24008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000f29d30b000"], 0x48) 2m17.079973133s ago: executing program 0 (id=152): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) chdir(&(0x7f0000000100)='./file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000010c0)={'bond0\x00', 0x1000}) 2m16.843395628s ago: executing program 0 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b301a, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 2m16.842134348s ago: executing program 0 (id=154): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) 2m16.667931291s ago: executing program 0 (id=157): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) unshare(0x22020400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/135, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) 2m16.641072522s ago: executing program 32 (id=157): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) unshare(0x22020400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/135, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) 1m0.963213385s ago: executing program 3 (id=2245): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8000, 0x20) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r3, 0x0) 1m0.610635702s ago: executing program 3 (id=2251): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) semctl$IPC_INFO(0x0, 0x4, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount(0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 1m0.570091492s ago: executing program 3 (id=2253): shutdown(0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0xa}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 59.69902395s ago: executing program 3 (id=2285): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) 59.567129692s ago: executing program 3 (id=2291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x2000c094) 58.67309352s ago: executing program 3 (id=2307): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 58.65010792s ago: executing program 33 (id=2307): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 3.818937354s ago: executing program 5 (id=3472): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000080)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x10, 0x10, 0xbc, 0x55, 0x0, 0x0, 0x1, 0x10004}, [@FRA_SRC={0x14, 0x2, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x200408f0}, 0x4800) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x101}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x6, 0x0, @val=@iter={0x0}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0xc, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000009c0)="3bf58d7d45", 0x5) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7fffeffd) 3.235178946s ago: executing program 1 (id=3475): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f00000001c0)=0x8) 3.125478698s ago: executing program 2 (id=3478): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x24000000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000005c0)='svcrdma_rq_post_err\x00', r1, 0x0, 0x1}, 0x6a) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x5, 0x2}, 0x10}}, 0x0) socket$inet(0x2, 0x2, 0x200000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x12, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000001540)="028988a8", 0x4, 0x8000050, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0xfb}, 0x14) 3.03439021s ago: executing program 2 (id=3480): bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x543, &(0x7f00000002c0)=0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) io_getevents(r0, 0x2, 0x2, &(0x7f0000000540)=[{}, {}], 0x0) io_uring_setup(0x1418, &(0x7f0000000700)={0x0, 0x60d6, 0x1000, 0x2, 0x113}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}], 0x1, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) 2.879008233s ago: executing program 5 (id=3483): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000ee527c2fcadc506641628833df3b4040c0380a930657f7b92c8a105db12acb705fd0b3d32b1a27c3c4f5782224a9aa74c1f5531aced50c197941b33f51f600c83ba885d7b57d9b808531378f8048f2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000005e80)={@id={0x2, 0x0, @auto="f8ff13be93a237a05ecc5624c29bb9c0"}}) fallocate(r2, 0x3, 0x0, 0x4000008000) 2.861268803s ago: executing program 1 (id=3484): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x53}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x8000000000001946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0xb, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r4 = openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 2.719200936s ago: executing program 1 (id=3486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x7fff, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.556147239s ago: executing program 1 (id=3489): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r4 = fsopen(&(0x7f00000022c0)='hugetlbfs\x00', 0x1) fcntl$dupfd(r4, 0x0, r4) 2.117737627s ago: executing program 2 (id=3491): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48140, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) timer_create(0x0, 0x0, &(0x7f0000000480)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@noinit_itable}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$eJzs3M1vG0UbAPBn7Tht+pW8Vd9CP4AgQJQCSZOW0gMXEEgcQEKCQzmGJK1K0wY1QSJVBQGhckSVOHFBHJH4CzjBBcENiQsHuKNKFeqlhZPRZncT2zhpmjpepf79pHVndtedeTwz9uxO7AB61nD6kETsiojfI2IwyzafMJz9c/vmlcm/b16ZTKJef/OvpC89fOvmlcXi1OJ5O4tMX0Tl0yQOtSl3buHy+YmZmelLeX50/sJ7o3MLl589d2Hi7PTZ6Yvjp06dOD72/Mnx5zoSZxrXrYMfzh4+8Orb116fPH3tnZ+/TYr4szgmO1LQiuG1Dj5Rr3e4uHLtbkhnPYOtoJoN06gtjf/BqMZK4w3GK5+UWjlgU9Xr9fr+5Vyt9fBiHbiPJVF2DYByFB/06fVvsXVx+lG6Gy9mF0Bp3LfzLTvSF5X8nFrL9W0nDUfE6cV/vkq32Jz7EAAATb5P5z/PtJv/VWJ/w3l78jWUoYj4X0TsjYiTEbEvIv4fsXTuAxHx4F2W37pIkpU/0LCncn2jsa1HOv97IV/bap7/FbO/GKrmud1L8deSM+dmpo/lr8mRqG1L82NrlPHDy79+vtqxxvlfuqXlF3PBvB7X+7Y1P2dqYn7iXmJudOPjiIN97eJPllcCkog4EBEHN1jGuaPfHF7t2J3jX0MH1pnqX0c8mbX/YrTEX0jWXp8c3R4z08dGi17Rxi9X31it/HuKvwPS9t/Rtv8vxz+UNK7Xzt3N//7lU+nj1T8+W/WaZqP9vz95q2nfBxPz85fGIvqT17JKN+4fbzlvfOX8NP4jj7Uf/3tj5ZU4FBFpJ34oIh6OiEfyuj/62547vgo/vfT4uy27qivxD5Te/lPrb//6YETRERb6I08s72mfqJ7/8bumQodWko3tv2fV9j+xlDqS71nP+9966nW3vRkAAAC2qkpE7IqkMrKcrlRGRrK/4d8XOyozs3PzT5+Zff/iVPYdgaGoVYo7XYMN90PH8sv6Ij/ekj+e3zf+ojqwlB+ZnJ2ZKjt46HE7Vxn/qT+zu5Tbyq0hsKl8Xwt6l/EPvcv4h9713/G/vTlb6V5dgO5q8/k/UEY9gO5rHv/Zj4B8tJ4n7tqc+gDd0/L5Xy2rHkD3uf8HvWsj4997Btwf+tb6yeb+rlYF6J65gbjzl+QltlKiWK3djCJqaW85GhELl6NSeqQSm5go+50JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgM/4NAAD//55o4Oc=") timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$notify(r2, 0x402, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.907298582s ago: executing program 2 (id=3492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB, @ANYRES32], 0x44}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 1.777642554s ago: executing program 2 (id=3493): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6103067521ab8946335f1c"], 0xb) close(0xffffffffffffffff) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000500000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)=ANY=[@ANYBLOB="18010000210001000000000000000000fc020000000000000000000000000000ff0200000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000000000000000000000fc00"/39], 0x118}}, 0x44) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 1.687656806s ago: executing program 5 (id=3494): socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) fchdir(0xffffffffffffffff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) memfd_create(&(0x7f0000000600)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xe7\xa6\xde\xac\x8e:~V]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x13\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc', 0xb) getdents64(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1b, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0x0, 0x1555d}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="8416aef900062421d511", 0xa}, {0x0}], 0x2}, 0x24000008) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.603275858s ago: executing program 5 (id=3496): bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x8, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8932, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.545781959s ago: executing program 2 (id=3498): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000436000/0x4000)=nil, 0x4000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) r2 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) 1.143366047s ago: executing program 4 (id=3500): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) fcntl$dupfd(r3, 0x0, r3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)={0x2000101c}) epoll_pwait(r4, &(0x7f0000000100)=[{}], 0x1, 0xeb, 0x0, 0x0) epoll_pwait(r4, &(0x7f00000000c0)=[{}], 0x1, 0x80000000, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.081681848s ago: executing program 5 (id=3501): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0x9, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.01931414s ago: executing program 6 (id=3502): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d00390000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 975.76119ms ago: executing program 6 (id=3503): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x9, 0x4) syz_extract_tcp_res(&(0x7f0000000700)={0x41424344, 0x41424344}, 0x2, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, r2, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x10001}, 0x18) umount2(0x0, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="00022abd3000fedbdf2501000000080001007063690011000200303030303a30303a313000f3e2ff0000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c041}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 858.000543ms ago: executing program 6 (id=3504): add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) 852.678683ms ago: executing program 1 (id=3506): r0 = socket$nl_route(0x10, 0x3, 0x0) getcwd(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c6000000d090000472500000000000005000000ffe0bd7babb30800c63290a918eee87989940040db4380c61d4c2f2312b849279bd4a5cc8a8ecf5016e141748112ed64812371a306124811c939146ba8e66580f8584086c94c0002bf479fe847beb82796d71de1d3914fccc7827a0e455e62d3aef2d52e7b0900a49f23f5bd53f82c27e3eeff1e39c03c1c8acf1ca383fb3542ec47e5d57e99f4906ea63f85f86e"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000640)=""/97, 0x61}], 0x5}, 0x5}], 0x1, 0x10022, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x80}, {{&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000000380)}, 0x1}, {{0x0, 0x0, 0x0}, 0xffffffff}], 0x3, 0x2060, 0x0) 799.386464ms ago: executing program 4 (id=3507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xfffe}, {0xffff, 0xffff}, {0xfff2, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040010) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 673.972346ms ago: executing program 1 (id=3508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@noquota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c7", 0xb) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 593.561068ms ago: executing program 4 (id=3509): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 510.760419ms ago: executing program 4 (id=3510): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) inotify_init1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000000000000000000000a"], 0xfc}}, 0x0) 359.275573ms ago: executing program 4 (id=3511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80001, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xd, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 342.876083ms ago: executing program 6 (id=3512): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}}, 0x20004000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x81, 0x1}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0xf) readv(r3, 0x0, 0x0) mq_getsetattr(r2, &(0x7f0000000100)={0x800, 0x1ed00000000002, 0x9, 0x9a}, 0x0) listen(r2, 0x2000200) mq_timedreceive(r2, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000440)=""/92, 0x5c, 0x1000002, 0x0) 240.924695ms ago: executing program 6 (id=3513): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$FICLONE(r1, 0x40049409, r0) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140), 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3d, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 35.355349ms ago: executing program 6 (id=3514): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x13, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="06", 0x1}], 0x1, 0x0, 0x0, 0x4004}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x4) splice(r3, 0x0, r6, 0x0, 0x39000, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x5}]}) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=3515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) gettid() r5 = epoll_create(0x595) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r2, &(0x7f0000000040)={0x9}) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 111.783345][T10314] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 111.826940][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.838465][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.859003][T10346] 9p: Unknown Cache mode or invalid value m [ 111.865326][T10344] loop4: detected capacity change from 0 to 512 [ 111.879306][T10344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.892113][T10344] ext4 filesystem being mounted at /410/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.904115][T10344] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2040: corrupted inode contents [ 111.916843][T10344] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2040: mark_inode_dirty error [ 111.929569][T10344] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2040: corrupted inode contents [ 111.944317][T10344] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2040: corrupted inode contents [ 111.956476][T10344] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2040: mark_inode_dirty error [ 111.968257][T10344] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2040: corrupted inode contents [ 111.980368][T10344] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2040: mark_inode_dirty error [ 111.991859][T10344] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2040: corrupted inode contents [ 112.004056][T10344] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2040: mark_inode_dirty error [ 112.027139][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.109412][T10372] netlink: 'syz.5.2046': attribute type 2 has an invalid length. [ 112.122010][T10372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10372 comm=syz.5.2046 [ 112.149187][T10370] SELinux: failed to load policy [ 112.436106][T10390] loop4: detected capacity change from 0 to 128 [ 112.456131][T10391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2055'. [ 112.881505][T10390] bio_check_eod: 8636 callbacks suppressed [ 112.881523][T10390] syz.4.2054: attempt to access beyond end of device [ 112.881523][T10390] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 112.901138][T10390] buffer_io_error: 3120 callbacks suppressed [ 112.901153][T10390] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 112.932168][T10390] syz.4.2054: attempt to access beyond end of device [ 112.932168][T10390] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 112.946147][T10390] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 112.994976][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2068'. [ 113.051627][T10435] netlink: 'syz.4.2069': attribute type 1 has an invalid length. [ 113.090704][T10435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.097953][T10474] loop1: detected capacity change from 0 to 1024 [ 113.105261][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2069'. [ 113.125802][T10475] bond2 (unregistering): Released all slaves [ 113.142401][T10480] pimreg: entered allmulticast mode [ 113.148946][T10474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.153262][T10480] pimreg: left allmulticast mode [ 113.171024][T10480] dvmrp1: left allmulticast mode [ 113.199543][T10474] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2072: Allocating blocks 449-513 which overlap fs metadata [ 113.239494][T10474] SELinux: Context @ is not valid (left unmapped). [ 113.246677][T10474] EXT4-fs (loop1): pa ffff888106dc32a0: logic 48, phys. 177, len 21 [ 113.254935][T10474] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 113.279136][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.332860][T10537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.342149][T10537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.380926][T10546] netlink: 'syz.3.2083': attribute type 1 has an invalid length. [ 113.397284][T10546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.408013][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2083'. [ 113.428981][T10546] bond3 (unregistering): Released all slaves [ 113.876229][T10625] loop1: detected capacity change from 0 to 512 [ 113.885582][T10625] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2088: bg 0: block 5: invalid block bitmap [ 113.898647][T10625] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 113.907900][T10625] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2088: invalid indirect mapped block 3 (level 2) [ 113.921340][T10625] EXT4-fs (loop1): 2 truncates cleaned up [ 113.928012][T10625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.949829][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 113.949846][ T29] audit: type=1326 audit(1758917120.189:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 113.992994][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.003426][ T29] audit: type=1326 audit(1758917120.219:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 114.027133][ T29] audit: type=1326 audit(1758917120.219:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 114.050795][ T29] audit: type=1326 audit(1758917120.219:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 114.074410][ T29] audit: type=1326 audit(1758917120.219:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 114.098287][ T29] audit: type=1326 audit(1758917120.219:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 114.149573][ T29] audit: type=1400 audit(1758917120.389:3119): avc: denied { bind } for pid=10635 comm="syz.4.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.180560][ T29] audit: type=1400 audit(1758917120.409:3120): avc: denied { listen } for pid=10635 comm="syz.4.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.200220][ T29] audit: type=1400 audit(1758917120.409:3121): avc: denied { accept } for pid=10635 comm="syz.4.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.234872][T10638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2091'. [ 114.244157][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2091'. [ 114.271505][T10638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2091'. [ 114.280840][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2091'. [ 114.415936][T10663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2102'. [ 114.443638][ T29] audit: type=1400 audit(1758917120.679:3122): avc: denied { bind } for pid=10677 comm="syz.5.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.579837][T10687] syz_tun: entered allmulticast mode [ 114.610662][T10686] syz_tun: left allmulticast mode [ 115.028481][T10757] loop3: detected capacity change from 0 to 128 [ 115.070012][T10757] syz.3.2113: attempt to access beyond end of device [ 115.070012][T10757] loop3: rw=2049, sector=138, nr_sectors = 96 limit=128 [ 115.140588][T10757] syz.3.2113: attempt to access beyond end of device [ 115.140588][T10757] loop3: rw=2049, sector=234, nr_sectors = 16 limit=128 [ 115.171298][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'. [ 115.193730][T10777] hsr_slave_0: left promiscuous mode [ 115.208665][T10777] hsr_slave_1: left promiscuous mode [ 115.238318][T10781] syz_tun: entered allmulticast mode [ 115.303954][T10779] syz_tun: left allmulticast mode [ 115.499160][T10813] loop1: detected capacity change from 0 to 1024 [ 115.629280][T10813] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 115.640417][T10813] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 115.718548][T10813] JBD2: no valid journal superblock found [ 115.724437][T10813] EXT4-fs (loop1): Could not load journal inode [ 115.810033][T10884] loop4: detected capacity change from 0 to 512 [ 115.834490][T10884] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.865377][T10896] loop3: detected capacity change from 0 to 512 [ 115.883230][T10884] EXT4-fs (loop4): 1 truncate cleaned up [ 115.900647][T10884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.943162][T10896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.959777][T10923] ./file0: Can't open blockdev [ 115.997143][T10896] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.148392][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.207384][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.230367][T10942] netlink: 'syz.4.2143': attribute type 1 has an invalid length. [ 116.242989][T10946] loop3: detected capacity change from 0 to 164 [ 116.252681][T10946] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 117.189145][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811925dc00: rx timeout, send abort [ 117.697514][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811925dc00: abort rx timeout. Force session deactivation [ 117.723893][T11093] syz_tun: entered allmulticast mode [ 117.774356][T11093] net_ratelimit: 32 callbacks suppressed [ 117.774377][T11093] mroute: pending queue full, dropping entries [ 117.810097][T11092] syz_tun: left allmulticast mode [ 117.822741][T11106] loop3: detected capacity change from 0 to 512 [ 117.839697][T11106] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.917822][T11106] EXT4-fs (loop3): 1 truncate cleaned up [ 117.950099][T11106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.147951][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.363674][T11147] pim6reg: entered allmulticast mode [ 118.386505][T11147] pim6reg: left allmulticast mode [ 118.534277][T11165] loop4: detected capacity change from 0 to 512 [ 118.564077][T11165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.586066][T11165] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.705187][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.797456][T11178] ip6gre2: entered allmulticast mode [ 119.129518][T11202] netlink: zone id is out of range [ 119.150398][T11202] netlink: zone id is out of range [ 119.168517][T11202] netlink: zone id is out of range [ 119.173718][T11202] netlink: zone id is out of range [ 119.188861][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 119.188921][ T29] audit: type=1326 audit(1758917125.429:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 119.218954][ T29] audit: type=1326 audit(1758917125.429:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 119.243163][ T29] audit: type=1326 audit(1758917125.429:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 119.267068][ T29] audit: type=1326 audit(1758917125.429:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 119.290785][ T29] audit: type=1326 audit(1758917125.429:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 119.314521][ T29] audit: type=1326 audit(1758917125.429:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 119.338362][ T29] audit: type=1326 audit(1758917125.429:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 119.365493][T11202] netlink: zone id is out of range [ 119.370793][T11202] netlink: zone id is out of range [ 119.376200][T11202] netlink: zone id is out of range [ 119.381409][T11202] netlink: zone id is out of range [ 119.386920][T11202] netlink: zone id is out of range [ 119.560509][ T29] audit: type=1326 audit(1758917125.599:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 119.584208][ T29] audit: type=1326 audit(1758917125.599:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12e1745d67 code=0x7ffc0000 [ 119.607675][ T29] audit: type=1326 audit(1758917125.599:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11205 comm="syz.2.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12e16eaf79 code=0x7ffc0000 [ 119.745707][T11224] __nla_validate_parse: 3 callbacks suppressed [ 119.745728][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2211'. [ 119.803520][T11224] team0 (unregistering): Port device team_slave_0 removed [ 119.835293][T11224] team0 (unregistering): Port device team_slave_1 removed [ 120.011429][ T36] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=36 comm=kworker/1:1 [ 120.024531][T11261] 9pnet: p9_errstr2errno: server reported unknown error [ 120.243394][T11288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11288 comm=syz.5.2223 [ 120.256115][T11288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11288 comm=syz.5.2223 [ 120.339032][T11294] syzkaller0: entered allmulticast mode [ 120.368764][T11294] syzkaller0 (unregistering): left allmulticast mode [ 120.439196][T11301] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 120.546443][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2230'. [ 120.636580][T11308] team0 (unregistering): Port device team_slave_0 removed [ 120.657971][T11308] team0 (unregistering): Port device team_slave_1 removed [ 120.895904][T11368] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 120.906922][T11370] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2241'. [ 121.571021][T11456] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 121.608152][T11458] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.699304][T11458] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.723244][T11473] loop4: detected capacity change from 0 to 2048 [ 121.741071][T11458] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.754950][T11473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.771480][T11473] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.799425][T11458] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.845073][T11488] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2259: bg 0: block 345: padding at end of block bitmap is not set [ 121.867842][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2263'. [ 121.868179][ T5822] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.886253][T11488] EXT4-fs (loop4): Remounting filesystem read-only [ 121.889545][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2263'. [ 121.909892][ T5817] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.912805][ T5834] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 121.918875][ T5817] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.970563][ T5817] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.981156][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.074821][T11518] program syz.1.2270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.084548][T11518] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 122.408549][T11554] loop3: detected capacity change from 0 to 2048 [ 122.434084][T11554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.522668][ T3309] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 122.555235][ T3309] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 122.636195][T11565] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 122.648757][T11565] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.648757][T11565] [ 122.658545][T11565] EXT4-fs (loop3): Total free blocks count 0 [ 122.664726][T11565] EXT4-fs (loop3): Free/Dirty block details [ 122.670811][T11565] EXT4-fs (loop3): free_blocks=0 [ 122.675800][T11565] EXT4-fs (loop3): dirty_blocks=432 [ 122.681147][T11565] EXT4-fs (loop3): Block reservation details [ 122.687370][T11565] EXT4-fs (loop3): i_reserved_data_blocks=27 [ 123.009435][T11590] net_ratelimit: 2 callbacks suppressed [ 123.009468][T11590] IPv4: Oversized IP packet from 127.202.26.0 [ 123.136503][ T8038] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 123.147397][ T8038] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 123.180900][ T7391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.210739][T11604] netlink: 'syz.4.2303': attribute type 4 has an invalid length. [ 123.218573][T11604] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2303'. [ 123.239404][T11604] .`: renamed from bond0 (while UP) [ 123.551648][T11625] loop1: detected capacity change from 0 to 512 [ 123.564608][T11625] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.600911][T11625] EXT4-fs (loop1): 1 truncate cleaned up [ 123.619575][T11625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.660336][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.721838][T11656] sd 0:0:1:0: device reset [ 123.812859][T11626] chnl_net:caif_netlink_parms(): no params data found [ 123.877306][T11626] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.884481][T11626] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.907168][T11626] bridge_slave_0: entered allmulticast mode [ 123.913965][T11626] bridge_slave_0: entered promiscuous mode [ 123.928783][T11626] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.935973][T11626] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.956947][T11823] netlink: 139 bytes leftover after parsing attributes in process `syz.5.2323'. [ 124.001127][T11826] unsupported nlmsg_type 40 [ 124.008550][T11626] bridge_slave_1: entered allmulticast mode [ 124.029157][T11626] bridge_slave_1: entered promiscuous mode [ 124.168047][T11852] xt_socket: unknown flags 0xd0 [ 124.189678][T11626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.211338][T11626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.244284][T11626] team0: Port device team_slave_0 added [ 124.256358][T11626] team0: Port device team_slave_1 added [ 124.290438][T11626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.297590][T11626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.323703][T11626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.335112][T11626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.342170][T11626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.357114][T11917] loop4: detected capacity change from 0 to 512 [ 124.368240][T11626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.389832][T11917] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.404560][T11626] hsr_slave_0: entered promiscuous mode [ 124.411873][T11917] EXT4-fs (loop4): 1 truncate cleaned up [ 124.419011][T11917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.442094][T11626] hsr_slave_1: entered promiscuous mode [ 124.476407][T11954] pimreg: entered allmulticast mode [ 124.509569][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.523425][T11954] pimreg: left allmulticast mode [ 124.564252][T12010] loop4: detected capacity change from 0 to 2048 [ 124.585512][T11626] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.601571][T12010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.619474][T11626] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.645952][T11626] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.647979][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.672816][T11626] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.794353][T11626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.817671][T11626] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.850903][ T29] kauditd_printk_skb: 517 callbacks suppressed [ 124.850920][ T29] audit: type=1326 audit(1758917131.089:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12074 comm="syz.1.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 124.855376][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.857698][ T29] audit: type=1326 audit(1758917131.099:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12074 comm="syz.1.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 124.881143][ T5817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.890278][ T29] audit: type=1326 audit(1758917131.129:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12074 comm="syz.1.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 124.942895][ T29] audit: type=1326 audit(1758917131.129:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12074 comm="syz.1.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 124.966643][ T29] audit: type=1326 audit(1758917131.129:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12074 comm="syz.1.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 124.973473][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.990379][ T29] audit: type=1326 audit(1758917131.129:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12074 comm="syz.1.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 124.997597][ T5795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.021214][ T29] audit: type=1326 audit(1758917131.129:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12074 comm="syz.1.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 125.051834][ T29] audit: type=1326 audit(1758917131.129:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12074 comm="syz.1.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 125.070850][T11626] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.075610][ T29] audit: type=1326 audit(1758917131.129:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12074 comm="syz.1.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 125.086220][T11626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.199690][T12090] loop4: detected capacity change from 0 to 128 [ 125.210776][T11626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.235726][T12090] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.267887][T12090] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.314798][ T29] audit: type=1400 audit(1758917131.549:3689): avc: denied { add_name } for pid=12089 comm="syz.4.2346" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 125.338259][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.508175][T11626] veth0_vlan: entered promiscuous mode [ 125.524415][T11626] veth1_vlan: entered promiscuous mode [ 125.549900][T12121] loop4: detected capacity change from 0 to 2048 [ 125.569162][T11626] veth0_macvtap: entered promiscuous mode [ 125.578656][T12121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 125.587671][T11626] veth1_macvtap: entered promiscuous mode [ 125.619487][T11626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.636302][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 125.641046][T11626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.671030][ T5825] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.694820][ T5825] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.720183][ T5825] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.734603][ T5825] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.786365][T12159] FAT-fs (loop3): bogus number of reserved sectors [ 125.793084][T12159] FAT-fs (loop3): Can't find a valid FAT filesystem [ 125.963529][T12170] SELinux: Context Ü is not valid (left unmapped). [ 126.162953][T12176] __nla_validate_parse: 2 callbacks suppressed [ 126.163016][T12176] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2367'. [ 126.178427][T12176] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2367'. [ 126.202266][T12162] cgroup: fork rejected by pids controller in /syz4 [ 126.322132][T12216] netlink: 'syz.4.2372': attribute type 1 has an invalid length. [ 126.330133][T12216] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.2372'. [ 126.661385][T12251] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 127.038174][T12265] loop1: detected capacity change from 0 to 1024 [ 127.053792][T12265] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 127.408129][T12294] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2400'. [ 127.609111][T12307] bond0: (slave dummy0): Releasing backup interface [ 127.642674][T12307] bridge_slave_0: left allmulticast mode [ 127.648587][T12307] bridge_slave_0: left promiscuous mode [ 127.654466][T12307] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.672486][T12307] bridge_slave_1: left allmulticast mode [ 127.678691][T12307] bridge_slave_1: left promiscuous mode [ 127.684423][T12307] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.696772][T12307] bond0: (slave bond_slave_0): Releasing backup interface [ 127.728660][T12320] loop6: detected capacity change from 0 to 256 [ 127.735662][T12320] msdos: Bad value for 'tz' [ 127.741272][T12307] bond0: (slave bond_slave_1): Releasing backup interface [ 127.807430][T12312] bridge0: entered promiscuous mode [ 127.831232][T12312] macvtap1: entered allmulticast mode [ 127.836726][T12312] bridge0: entered allmulticast mode [ 127.865069][T12312] bridge0: port 3(macvtap1) entered blocking state [ 127.871978][T12312] bridge0: port 3(macvtap1) entered disabled state [ 127.884778][T12312] bridge0: left allmulticast mode [ 127.890077][T12312] bridge0: left promiscuous mode [ 128.108474][T12363] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 128.134617][T12360] loop1: detected capacity change from 0 to 4096 [ 128.142070][T12360] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.148732][T12360] EXT4-fs: test_dummy_encryption option not supported [ 128.170580][ T36] IPVS: starting estimator thread 0... [ 128.257114][T12372] IPVS: using max 2400 ests per chain, 120000 per kthread [ 128.459998][T12395] loop1: detected capacity change from 0 to 512 [ 128.480632][T12395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.496243][T12395] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.563814][T12395] EXT4-fs (loop1): shut down requested (0) [ 128.583049][T12395] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 128.602628][T12395] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 128.626061][T12395] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 128.685495][T12395] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 128.698153][T12395] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 128.717304][T12395] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 128.738079][T12395] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 128.757229][T12395] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 128.766100][T12395] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 128.787202][T12395] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 128.796057][T12395] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 128.805411][T12395] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 128.840127][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.999366][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2447'. [ 129.023456][T12437] bridge_slave_0: left allmulticast mode [ 129.029236][T12437] bridge_slave_0: left promiscuous mode [ 129.034977][T12437] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.064917][T12437] bridge_slave_1: left allmulticast mode [ 129.070724][T12437] bridge_slave_1: left promiscuous mode [ 129.076550][T12437] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.090505][T12437] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 129.099360][T12437] bond_slave_0: left promiscuous mode [ 129.144198][T12437] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 129.152521][T12437] bond_slave_1: left promiscuous mode [ 129.168087][T12437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.175556][T12437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.224981][T12448] syz_tun: entered allmulticast mode [ 129.233028][T12445] syz_tun: left allmulticast mode [ 129.309676][T12457] syz_tun: entered allmulticast mode [ 129.720361][T12491] IPv6: Can't replace route, no match found [ 129.790098][T12497] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.848963][T12497] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.900281][T12497] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.959542][T12497] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.026866][ T5834] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.048545][ T5834] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.066094][ T5834] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.092885][ T5834] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.152273][T12520] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.163393][T12520] sch_tbf: burst 14 is lower than device lo mtu (65550) ! [ 130.388202][T12551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2487'. [ 130.632724][T12565] loop6: detected capacity change from 0 to 1024 [ 130.664434][T12565] EXT4-fs: Ignoring removed orlov option [ 130.670516][T12565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.700146][T12565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.852124][T11626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.958740][T12585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2497'. [ 131.064255][T12596] netlink: 'syz.1.2499': attribute type 10 has an invalid length. [ 131.098526][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 131.108748][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 131.190489][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 131.190507][ T29] audit: type=1400 audit(1758917137.429:4085): avc: denied { connect } for pid=12605 comm="syz.4.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.231797][T12604] netlink: 'syz.1.2501': attribute type 4 has an invalid length. [ 131.239658][T12604] __nla_validate_parse: 2 callbacks suppressed [ 131.239732][T12604] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2501'. [ 131.323563][ T29] audit: type=1326 audit(1758917137.559:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 131.347152][ T29] audit: type=1326 audit(1758917137.559:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 131.370898][ T29] audit: type=1326 audit(1758917137.559:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 131.394631][ T29] audit: type=1326 audit(1758917137.559:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 131.418542][ T29] audit: type=1326 audit(1758917137.559:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 131.442206][ T29] audit: type=1326 audit(1758917137.559:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 131.465889][ T29] audit: type=1326 audit(1758917137.559:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e95f35d67 code=0x7ffc0000 [ 131.489513][ T29] audit: type=1326 audit(1758917137.559:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e95edaf79 code=0x7ffc0000 [ 131.513277][ T29] audit: type=1326 audit(1758917137.559:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 132.120020][T12695] loop1: detected capacity change from 0 to 1024 [ 132.138616][T12695] EXT4-fs: Ignoring removed orlov option [ 132.144441][T12695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.180126][T12701] @: renamed from vlan0 (while UP) [ 132.216262][T12695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.409581][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.542806][T12735] netlink: 360 bytes leftover after parsing attributes in process `syz.5.2540'. [ 132.752185][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2546'. [ 132.929707][T12749] loop1: detected capacity change from 0 to 2048 [ 132.982323][T12749] loop1: p1 < > p4 < > [ 132.991959][T12765] loop6: detected capacity change from 0 to 512 [ 133.004567][T12765] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 133.027817][T12765] EXT4-fs (loop6): 1 truncate cleaned up [ 133.036025][T12765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.127311][T11626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.303207][T12853] loop4: detected capacity change from 0 to 1024 [ 134.370442][T12853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.517790][T12867] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 134.648453][T12877] loop6: detected capacity change from 0 to 164 [ 134.666259][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2588'. [ 134.675332][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2588'. [ 134.695253][ T5795] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 134.696107][T12877] syz.6.2587: attempt to access beyond end of device [ 134.696107][T12877] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 134.717161][ T5795] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 134.727842][T12883] netlink: 1335 bytes leftover after parsing attributes in process `syz.5.2590'. [ 134.736628][ T5795] EXT4-fs (loop4): This should not happen!! Data will be lost [ 134.736628][ T5795] [ 134.755651][ T5795] EXT4-fs (loop4): Total free blocks count 0 [ 134.755731][T12877] syz.6.2587: attempt to access beyond end of device [ 134.755731][T12877] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 134.761733][ T5795] EXT4-fs (loop4): Free/Dirty block details [ 134.781127][ T5795] EXT4-fs (loop4): free_blocks=68451041280 [ 134.787129][ T5795] EXT4-fs (loop4): dirty_blocks=320 [ 134.792459][ T5795] EXT4-fs (loop4): Block reservation details [ 134.798557][ T5795] EXT4-fs (loop4): i_reserved_data_blocks=20 [ 134.903079][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.946714][T12900] dummy0: entered allmulticast mode [ 134.952770][T12900] dummy0: left allmulticast mode [ 135.001789][T12906] loop1: detected capacity change from 0 to 512 [ 135.039209][T12906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.064088][T12906] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.149026][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.808598][T12979] pim6reg1: entered promiscuous mode [ 135.814007][T12979] pim6reg1: entered allmulticast mode [ 136.073864][T13000] syzkaller0: entered promiscuous mode [ 136.079436][T13000] syzkaller0: entered allmulticast mode [ 136.231957][T13031] tipc: Started in network mode [ 136.237031][T13031] tipc: Node identity 8e799bc6b02c, cluster identity 4711 [ 136.244245][T13031] tipc: Enabled bearer , priority 0 [ 136.254368][T13031] tipc: Disabling bearer [ 137.162436][ T29] kauditd_printk_skb: 539 callbacks suppressed [ 137.162457][ T29] audit: type=1326 audit(1758917143.399:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13042 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd824e1eec9 code=0x7ffc0000 [ 137.202373][ T29] audit: type=1326 audit(1758917143.399:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13042 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd824e1eec9 code=0x7ffc0000 [ 137.226081][ T29] audit: type=1326 audit(1758917143.419:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13042 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd824e1eec9 code=0x7ffc0000 [ 137.249726][ T29] audit: type=1326 audit(1758917143.419:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13042 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd824e1eec9 code=0x7ffc0000 [ 137.273506][ T29] audit: type=1326 audit(1758917143.419:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13042 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd824e1eec9 code=0x7ffc0000 [ 137.297197][ T29] audit: type=1326 audit(1758917143.419:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13042 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd824e1eec9 code=0x7ffc0000 [ 137.321115][ T29] audit: type=1326 audit(1758917143.419:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13042 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd824e1eec9 code=0x7ffc0000 [ 137.345106][ T29] audit: type=1326 audit(1758917143.419:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13042 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd824e15d67 code=0x7ffc0000 [ 137.368819][ T29] audit: type=1326 audit(1758917143.419:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13042 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd824dbaf79 code=0x7ffc0000 [ 137.393028][ T29] audit: type=1326 audit(1758917143.419:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13042 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd824e1eec9 code=0x7ffc0000 [ 137.563978][T13065] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 137.665549][T13073] bond_slave_1: mtu less than device minimum [ 137.742017][T13078] tipc: Enabling of bearer rejected, failed to enable media [ 137.756780][T13080] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2649'. [ 137.873709][T13090] loop1: detected capacity change from 0 to 2048 [ 137.881153][T13090] EXT4-fs: inline encryption not supported [ 137.900076][T13090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.966567][T13099] tipc: Enabling of bearer rejected, failed to enable media [ 138.058569][T13103] loop6: detected capacity change from 0 to 4096 [ 138.065389][T13103] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.075678][T13109] loop4: detected capacity change from 0 to 512 [ 138.083205][T13109] ext4: Unknown parameter 'mask' [ 138.100533][T13103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.328938][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.359162][T11626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.379042][T13142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2668'. [ 138.388384][T13142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2668'. [ 138.388452][T13141] loop4: detected capacity change from 0 to 512 [ 138.415131][T13141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.430938][T13141] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.456350][T13151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.467033][T13151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.519809][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.543283][T13171] SELinux: failed to load policy [ 138.546839][T13175] loop4: detected capacity change from 0 to 512 [ 138.556005][T13175] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.568591][T13175] EXT4-fs (loop4): 1 truncate cleaned up [ 138.574928][T13175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.619262][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.656328][T13186] loop4: detected capacity change from 0 to 2048 [ 138.663327][T13186] EXT4-fs: inline encryption not supported [ 138.680037][T13186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.912977][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.942889][T13202] SELinux: failed to load policy [ 138.949112][T13204] netlink: '+}[@': attribute type 10 has an invalid length. [ 139.229012][T13243] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2700'. [ 139.356190][T13251] usb usb8: usbfs: process 13251 (syz.1.2703) did not claim interface 0 before use [ 139.639257][T13311] loop4: detected capacity change from 0 to 8192 [ 139.641973][T13314] tmpfs: Unsupported parameter 'huge' [ 139.903567][T13338] loop1: detected capacity change from 0 to 512 [ 139.947409][T13338] EXT4-fs: Ignoring removed i_version option [ 139.953499][T13338] EXT4-fs: Ignoring removed bh option [ 139.979819][T13338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.017366][T13338] ext4 filesystem being mounted at /509/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.090769][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.189832][T13365] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2741'. [ 140.278249][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2743'. [ 140.384359][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 140.595228][T13423] loop4: detected capacity change from 0 to 512 [ 140.638856][T13423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.654843][T13423] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.799671][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.856294][T13473] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2773'. [ 140.869815][T13473] hsr_slave_0: left promiscuous mode [ 140.882850][T13473] hsr_slave_1: left promiscuous mode [ 141.425231][T13544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2797'. [ 141.451054][T13544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13544 comm=syz.2.2797 [ 141.466998][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2798'. [ 141.567671][T13568] loop1: detected capacity change from 0 to 512 [ 141.600319][T13568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.614657][T13580] loop4: detected capacity change from 0 to 512 [ 141.625195][T13568] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.638255][T13580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.651684][T13580] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.665612][T13580] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2805: bg 0: block 289: padding at end of block bitmap is not set [ 141.819213][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.873653][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.924518][T13606] pim6reg1: entered promiscuous mode [ 141.930207][T13606] pim6reg1: entered allmulticast mode [ 142.019781][T13630] tipc: Enabling of bearer rejected, failed to enable media [ 142.133182][T13647] loop5: detected capacity change from 0 to 16384 [ 142.191969][T13658] loop4: detected capacity change from 0 to 2048 [ 142.192203][T13661] syz_tun: entered promiscuous mode [ 142.206219][T13661] syz_tun: left promiscuous mode [ 142.222897][T13658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.236083][T13658] ext4 filesystem being mounted at /543/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.273846][T13673] loop6: detected capacity change from 0 to 512 [ 142.289238][T13673] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 142.317978][T13679] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2828: bg 0: block 345: padding at end of block bitmap is not set [ 142.341010][T13679] EXT4-fs (loop4): Remounting filesystem read-only [ 142.362300][ T5795] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 142.403845][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.501500][T13728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.519838][T13728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.621485][T13741] loop6: detected capacity change from 0 to 512 [ 142.629475][T13741] EXT4-fs: Ignoring removed oldalloc option [ 142.640578][T13741] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.2842: Parent and EA inode have the same ino 15 [ 142.653406][T13741] EXT4-fs (loop6): Remounting filesystem read-only [ 142.721163][T13741] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -30) [ 142.730269][T13741] EXT4-fs (loop6): 1 orphan inode deleted [ 142.736422][T13741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.765773][T11626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.789135][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 142.789155][ T29] audit: type=1400 audit(1758917149.029:5062): avc: denied { read } for pid=13772 comm="syz.6.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.883139][T13778] tipc: Enabling of bearer rejected, failed to enable media [ 143.023093][T13785] __nla_validate_parse: 4 callbacks suppressed [ 143.023109][T13785] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2850'. [ 143.068947][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2851'. [ 143.145685][T13801] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 143.175863][T13803] loop4: detected capacity change from 0 to 1024 [ 143.194011][T13803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.241501][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.564462][ T29] audit: type=1326 audit(1758917149.799:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13843 comm="syz.5.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 143.588280][ T29] audit: type=1326 audit(1758917149.799:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13843 comm="syz.5.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 143.604620][T13841] netlink: 'syz.2.2865': attribute type 10 has an invalid length. [ 143.612052][ T29] audit: type=1326 audit(1758917149.799:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13843 comm="syz.5.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 143.643703][ T29] audit: type=1326 audit(1758917149.799:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13843 comm="syz.5.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 143.645170][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2865'. [ 143.667684][ T29] audit: type=1326 audit(1758917149.799:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13843 comm="syz.5.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 143.700030][ T29] audit: type=1326 audit(1758917149.799:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13843 comm="syz.5.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 143.723661][ T29] audit: type=1326 audit(1758917149.799:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13843 comm="syz.5.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 143.761123][ T29] audit: type=1326 audit(1758917149.799:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13843 comm="syz.5.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e95f3eec9 code=0x7ffc0000 [ 143.784800][ T29] audit: type=1326 audit(1758917149.799:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13843 comm="syz.5.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e95f3d710 code=0x7ffc0000 [ 144.513998][T13896] pim6reg1: entered promiscuous mode [ 144.519582][T13896] pim6reg1: entered allmulticast mode [ 144.886042][T13933] loop1: detected capacity change from 0 to 1024 [ 144.893703][T13931] bridge: RTM_NEWNEIGH with invalid ether address [ 144.904443][T13933] EXT4-fs: Ignoring removed orlov option [ 144.915182][T13933] EXT4-fs: Ignoring removed nobh option [ 144.920872][T13933] EXT4-fs: Ignoring removed bh option [ 144.971293][T13933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.996274][T13933] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2888: Allocating blocks 465-513 which overlap fs metadata [ 145.015626][T13933] EXT4-fs (loop1): pa ffff888106e86a80: logic 256, phys. 369, len 9 [ 145.023786][T13933] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 145.034244][T13933] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 145.077880][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.101662][T13949] hub 9-0:1.0: USB hub found [ 145.111466][T13949] hub 9-0:1.0: 8 ports detected [ 145.410851][T13989] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 146.137905][T14044] loop6: detected capacity change from 0 to 1024 [ 146.145471][T14044] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 146.177864][T14046] loop1: detected capacity change from 0 to 512 [ 146.214470][T14044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.231195][T14044] EXT4-fs (loop6): shut down requested (2) [ 146.240500][T14046] EXT4-fs (loop1): failed to initialize system zone (-117) [ 146.248221][T14046] EXT4-fs (loop1): mount failed [ 146.254286][T14044] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 146.263809][T14044] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 146.358345][T11626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.512674][T14087] loop6: detected capacity change from 0 to 1024 [ 146.526374][T14089] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.546354][T14087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.585649][T14089] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.616582][T11626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.670081][T14089] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.744995][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2940'. [ 146.754081][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2940'. [ 146.768471][T14089] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.880497][ T5834] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.902582][ T5834] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.921501][ T5834] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.939627][ T5834] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.990257][T14182] loop4: detected capacity change from 0 to 256 [ 146.997381][T14182] vfat: Unknown parameter '01777777777777777777777ð|¿uI\Z•/ðÿõ0 Õ.w1”ñQHzæŸò8vWk›œ ýÄK;%;åÃ-CÁ}ù¸çiŽŸ!PÎec¼ü{Ž¡;t¦'s©ØEµ{òË}rYMùÜ#2oA·^ç¸äÆÓÝþ ‹Z/–*'¸B§ËÂØ"«¸Æ9díƒÀ4î–•ý' [ 147.068136][T14198] syz_tun: entered allmulticast mode [ 147.079103][T14198] dvmrp8: entered allmulticast mode [ 147.088480][T14197] syz_tun: left allmulticast mode [ 147.093746][T14197] dvmrp8: left allmulticast mode [ 147.151139][T14215] loop4: detected capacity change from 0 to 1024 [ 147.169602][T14215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.200712][T14215] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2948: Allocating blocks 449-513 which overlap fs metadata [ 147.229136][T14215] EXT4-fs (loop4): pa ffff888106dc33f0: logic 48, phys. 177, len 21 [ 147.237303][T14215] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 147.288133][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.416245][T14270] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.490627][T14270] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.537576][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2954'. [ 147.546662][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2954'. [ 147.621558][T14270] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.703540][T14270] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.935328][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2961'. [ 147.945405][T14361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.965917][T14361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.313038][T14385] netlink: 'syz.6.2964': attribute type 27 has an invalid length. [ 148.339807][T14385] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.347174][T14385] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.388098][T14385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.421436][ T135] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.432010][ T135] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.441655][ T135] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.451862][ T135] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.507480][ T3416] IPVS: starting estimator thread 0... [ 148.597135][T14394] IPVS: using max 1920 ests per chain, 96000 per kthread [ 148.605120][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 148.605140][ T29] audit: type=1326 audit(1758917154.839:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.1.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 148.635062][ T29] audit: type=1326 audit(1758917154.839:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.1.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 148.658917][ T29] audit: type=1326 audit(1758917154.839:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.1.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 148.684868][ T29] audit: type=1326 audit(1758917154.859:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.1.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 148.708658][ T29] audit: type=1326 audit(1758917154.859:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.1.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 148.732414][ T29] audit: type=1326 audit(1758917154.859:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.1.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 148.770118][ T29] audit: type=1326 audit(1758917154.919:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.1.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 148.793851][ T29] audit: type=1326 audit(1758917154.919:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.1.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 148.818260][ T29] audit: type=1326 audit(1758917154.919:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.1.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 148.841862][ T29] audit: type=1326 audit(1758917154.999:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.1.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 148.911121][T14409] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.911121][T14409] program syz.1.2974 not setting count and/or reply_len properly [ 148.943983][T14411] hub 9-0:1.0: USB hub found [ 148.955441][T14411] hub 9-0:1.0: 8 ports detected [ 149.229560][T14459] netlink: 12 bytes leftover after parsing attributes in process `¬í'. [ 150.126226][T14513] loop6: detected capacity change from 0 to 512 [ 150.234817][T14526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.243620][T14526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.466199][T14557] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3000'. [ 150.549529][T14568] loop6: detected capacity change from 0 to 1024 [ 150.559147][T14568] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.586099][T14568] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.3005: Allocating blocks 449-513 which overlap fs metadata [ 150.610742][T14568] EXT4-fs (loop6): pa ffff888106dc3460: logic 48, phys. 177, len 21 [ 150.618875][T14568] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 150.641954][T11626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.677022][ T5822] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.691127][ T5822] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.709294][ T5822] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.719183][ T5822] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.019392][T14609] syzkaller0: entered promiscuous mode [ 151.024961][T14609] syzkaller0: entered allmulticast mode [ 151.132846][T14628] bond_slave_1: mtu less than device minimum [ 151.270609][T14649] syzkaller0: refused to change device tx_queue_len [ 151.333388][T14655] netlink: 'syz.1.3028': attribute type 27 has an invalid length. [ 151.462561][T14655] ip6gre1: left allmulticast mode [ 151.479093][ T5795] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.497502][ T5795] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.512063][ T5795] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.531747][ T5795] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.625472][T14680] 9pnet: p9_errstr2errno: server reported unknown error [ 151.715462][ T5834] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 151.968144][T14719] SELinux: ebitmap: truncated map [ 151.975647][T14719] SELinux: failed to load policy [ 152.065516][T14775] netlink: 'syz.4.3042': attribute type 1 has an invalid length. [ 152.073436][T14775] netlink: 'syz.4.3042': attribute type 2 has an invalid length. [ 152.081433][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3042'. [ 152.142452][T14788] loop6: detected capacity change from 0 to 164 [ 152.150027][T14788] ISOFS: unable to read i-node block [ 152.155378][T14788] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 152.310635][T14811] netlink: 'syz.4.3053': attribute type 3 has an invalid length. [ 152.318759][T14811] netlink: 'syz.4.3053': attribute type 3 has an invalid length. [ 152.467947][T14829] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.518646][T14833] bond0: (slave bond_slave_0): Releasing backup interface [ 152.535577][T14833] bond0: (slave bond_slave_1): Releasing backup interface [ 152.572918][T14829] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.629089][T14829] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.689220][T14829] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.754404][ T135] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.778193][ T135] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.792319][ T135] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.801254][ T135] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.870978][T14870] loop1: detected capacity change from 0 to 512 [ 152.878216][T14870] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.903182][T14870] EXT4-fs (loop1): 1 truncate cleaned up [ 152.910122][T14870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.005340][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.041906][T14884] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 153.042046][T14883] IPVS: stopping backup sync thread 14884 ... [ 153.271331][T14892] serio: Serial port ptm0 [ 153.492886][T14901] netlink: 'syz.6.3072': attribute type 3 has an invalid length. [ 153.501187][T14901] netlink: 'syz.6.3072': attribute type 3 has an invalid length. [ 153.727102][T14663] page_pool_release_retry() stalled pool shutdown: id 58, 1 inflight 60 sec [ 153.814087][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3078'. [ 154.296806][T14943] 9pnet: p9_errstr2errno: server reported unknown error [ 154.300662][T14944] syzkaller0: entered promiscuous mode [ 154.309461][T14944] syzkaller0: entered allmulticast mode [ 154.391775][T14958] loop4: detected capacity change from 0 to 1024 [ 154.398571][T14958] EXT4-fs: Ignoring removed orlov option [ 154.409034][T14958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.497819][T14963] @: renamed from vlan0 (while UP) [ 154.528631][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 154.528649][ T29] audit: type=1326 audit(1758917160.769:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 154.624524][ T29] audit: type=1326 audit(1758917160.769:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 154.648259][ T29] audit: type=1326 audit(1758917160.769:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 154.671869][ T29] audit: type=1326 audit(1758917160.769:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 154.695441][ T29] audit: type=1326 audit(1758917160.769:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 154.719194][ T29] audit: type=1326 audit(1758917160.769:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 154.742727][ T29] audit: type=1326 audit(1758917160.769:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 154.766384][ T29] audit: type=1326 audit(1758917160.769:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 154.789994][ T29] audit: type=1326 audit(1758917160.769:5527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 154.813605][ T29] audit: type=1326 audit(1758917160.769:5528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.2.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 154.962503][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.030728][T15000] loop4: detected capacity change from 0 to 128 [ 155.037899][T15000] EXT4-fs: Ignoring removed nobh option [ 155.055923][T15000] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.080286][T15000] ext4 filesystem being mounted at /593/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.134128][T15016] ªªªªªª: renamed from vlan0 [ 155.357207][T15037] tipc: Enabled bearer , priority 0 [ 155.365649][ T5787] tipc: Resetting bearer [ 155.393149][T15024] tipc: Resetting bearer [ 155.425452][T15024] tipc: Disabling bearer [ 155.507915][T15061] loop6: detected capacity change from 0 to 512 [ 155.523349][T15061] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 155.553987][T15061] EXT4-fs (loop6): 1 truncate cleaned up [ 155.571375][T15061] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.660646][T11626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.963992][T15084] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3121'. [ 156.109193][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.142773][T15092] loop4: detected capacity change from 0 to 164 [ 156.168332][T15095] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 156.202730][T15100] loop4: detected capacity change from 0 to 128 [ 156.215644][T15100] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 156.226175][T15100] System zones: 1-3, 19-19, 35-36 [ 156.237768][T15100] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 156.267470][T15100] ext4 filesystem being mounted at /595/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.359343][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.399730][T15124] netlink: 'syz.1.3133': attribute type 4 has an invalid length. [ 156.409345][T15124] netlink: 'syz.1.3133': attribute type 4 has an invalid length. [ 156.455815][T15128] loop4: detected capacity change from 0 to 512 [ 156.463074][T15128] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.470186][T15128] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.481859][T15128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.490698][T15128] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.509352][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3135'. [ 156.515070][T15128] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3132: Allocating blocks 41-42 which overlap fs metadata [ 156.541431][T15128] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3132: Failed to acquire dquot type 1 [ 156.553511][T15128] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 156.568816][T15128] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.3132: corrupted inode contents [ 156.582086][T15128] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.3132: mark_inode_dirty error [ 156.596688][T15128] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.3132: corrupted inode contents [ 156.611014][T15128] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.3132: mark_inode_dirty error [ 156.623974][T15128] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.3132: corrupted inode contents [ 156.657620][T15144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.694351][T15144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.714967][T15128] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 156.733769][T15128] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.3132: corrupted inode contents [ 156.746714][T15128] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.3132: mark_inode_dirty error [ 156.760071][T15128] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 156.770085][T15128] EXT4-fs (loop4): 1 truncate cleaned up [ 156.777847][T15128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.466699][T15128] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 157.502705][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.536664][T15163] loop4: detected capacity change from 0 to 512 [ 157.548983][T15163] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 157.559115][T15163] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3142: bg 0: block 104: invalid block bitmap [ 157.572053][T15163] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 157.580973][T15163] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3142: invalid indirect mapped block 1 (level 1) [ 157.594522][T15163] EXT4-fs (loop4): 1 truncate cleaned up [ 157.612279][T15163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.715592][T15173] netlink: 'syz.2.3145': attribute type 27 has an invalid length. [ 157.847216][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.886529][T15173] macsec0: left promiscuous mode [ 157.897130][T15173] ip6gre1: left allmulticast mode [ 157.902891][T15173] xfrm1: left promiscuous mode [ 157.908096][T15173] xfrm1: left allmulticast mode [ 157.914452][ T5798] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.929532][ T5798] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.946703][ T5798] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.964462][ T5798] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.406907][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3154'. [ 158.683317][T15221] netlink: 'syz.2.3158': attribute type 3 has an invalid length. [ 158.789416][T15228] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3160'. [ 158.904965][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3172'. [ 158.987735][T15245] tipc: Enabled bearer , priority 0 [ 158.995383][T15244] tipc: Resetting bearer [ 159.010511][T15244] tipc: Disabling bearer [ 159.688245][T15271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=15271 comm=syz.6.3175 [ 159.716324][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 159.716345][ T29] audit: type=1326 audit(1758917165.949:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 159.746990][ T29] audit: type=1326 audit(1758917165.949:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 159.770801][ T29] audit: type=1326 audit(1758917165.949:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 159.771002][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'. [ 159.794608][ T29] audit: type=1326 audit(1758917165.949:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 159.827197][ T29] audit: type=1326 audit(1758917165.949:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 159.850818][ T29] audit: type=1326 audit(1758917165.949:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 159.888390][ T29] audit: type=1326 audit(1758917165.999:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8654eec9 code=0x7ffc0000 [ 159.915405][T15280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3178'. [ 160.091973][ T29] audit: type=1400 audit(1758917166.279:5710): avc: denied { create } for pid=15290 comm="syz.1.3179" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.112938][ T29] audit: type=1400 audit(1758917166.289:5711): avc: denied { mounton } for pid=15290 comm="syz.1.3179" path="/589/file0" dev="tmpfs" ino=3074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.136317][ T29] audit: type=1400 audit(1758917166.299:5712): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.136347][T15291] FAT-fs (loop3): bogus number of reserved sectors [ 160.167307][T15291] FAT-fs (loop3): Can't find a valid FAT filesystem [ 160.526409][T15336] netlink: 'syz.6.3190': attribute type 10 has an invalid length. [ 160.590263][T15339] loop4: detected capacity change from 0 to 128 [ 160.624956][T15339] msdos: Unknown parameter 'Ä\pwÔìñ^ò‡!þ…þ1T"ìóÙ;‚5ò¡@¤\/h(J°<é Wi µ“}¸' [ 161.049803][T15377] netlink: 'syz.4.3196': attribute type 13 has an invalid length. [ 161.447279][ T5803] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.455806][ T5803] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.474872][ T5803] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.520463][ T5803] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.560469][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3203'. [ 161.924570][T15416] pim6reg: entered allmulticast mode [ 161.933213][T15416] pim6reg: left allmulticast mode [ 162.112556][T15431] tipc: Enabling of bearer rejected, failed to enable media [ 162.132484][T15429] netlink: 'syz.6.3214': attribute type 39 has an invalid length. [ 162.678359][T15474] loop1: detected capacity change from 0 to 128 [ 162.772192][T14667] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 162.779770][T14667] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 162.787337][T14667] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 162.794769][T14667] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 162.802230][T14667] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 162.809674][T14667] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 162.817242][T14667] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 162.824750][T14667] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 162.832400][T14667] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 162.839955][T14667] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 162.892872][T14667] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 163.065470][T15501] SELinux: security_context_str_to_sid () failed with errno=-22 [ 163.203514][T15513] loop1: detected capacity change from 0 to 512 [ 163.225626][T15513] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 163.235850][T15516] loop4: detected capacity change from 0 to 2048 [ 163.283900][T15513] EXT4-fs (loop1): failed to open journal device unknown-block(0,4) -6 [ 163.301994][T15516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.332564][T15516] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.351060][T15529] kernel profiling enabled (shift: 7) [ 163.361197][T15516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.594126][T15549] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3245'. [ 164.206728][T15576] chnl_net:caif_netlink_parms(): no params data found [ 164.293545][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3257'. [ 164.345939][T15724] syz_tun (unregistering): left allmulticast mode [ 164.367454][T15576] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.374666][T15576] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.396994][T15576] bridge_slave_0: entered allmulticast mode [ 164.405111][T15576] bridge_slave_0: entered promiscuous mode [ 164.436194][T15576] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.443347][T15576] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.451961][T15576] bridge_slave_1: entered allmulticast mode [ 164.458929][T15576] bridge_slave_1: entered promiscuous mode [ 164.502002][T15576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.523976][T15576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.560119][T15576] team0: Port device team_slave_0 added [ 164.568291][T15576] team0: Port device team_slave_1 added [ 164.593971][T15576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.601124][T15576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.627198][T15576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.640074][T15576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.647148][T15576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.673496][T15576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.700822][T15852] loop6: detected capacity change from 0 to 128 [ 164.708094][T15852] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.722078][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 164.722120][ T29] audit: type=1400 audit(1758917170.959:5905): avc: denied { watch watch_reads } for pid=15851 comm="syz.6.3260" path="/191/file0/file0" dev="loop6" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 164.757808][T15576] hsr_slave_0: entered promiscuous mode [ 164.764096][T15576] hsr_slave_1: entered promiscuous mode [ 164.951965][T15947] netlink: 'syz.2.3263': attribute type 13 has an invalid length. [ 165.038866][ T29] audit: type=1326 audit(1758917171.279:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 165.063252][ T29] audit: type=1326 audit(1758917171.279:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 165.087207][ T29] audit: type=1326 audit(1758917171.279:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 165.111178][ T29] audit: type=1326 audit(1758917171.279:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 165.135284][ T29] audit: type=1326 audit(1758917171.279:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 165.158941][ T29] audit: type=1326 audit(1758917171.279:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e174eec9 code=0x7ffc0000 [ 165.192306][ T29] audit: type=1400 audit(1758917171.429:5912): avc: denied { read } for pid=15967 comm="syz.1.3268" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 165.215722][ T29] audit: type=1400 audit(1758917171.429:5913): avc: denied { open } for pid=15967 comm="syz.1.3268" path="/dev/input/event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 165.266674][ T29] audit: type=1400 audit(1758917171.499:5914): avc: denied { block_suspend } for pid=15971 comm="syz.2.3270" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.314109][T15576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.329782][T15576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.339316][T15576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.348934][T15576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.393353][T15576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.408951][T15576] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.427635][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.434828][ T5832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.448766][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.455891][ T5803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.580147][T15576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.744381][T15576] veth0_vlan: entered promiscuous mode [ 165.753660][T15576] veth1_vlan: entered promiscuous mode [ 165.772135][T15576] veth0_macvtap: entered promiscuous mode [ 165.781765][T15576] veth1_macvtap: entered promiscuous mode [ 165.794515][T15576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.821670][T15576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.833931][ T5798] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.843901][ T5798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.864056][ T5798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.873420][ T5803] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.103212][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3282'. [ 166.883382][T16072] vhci_hcd: invalid port number 96 [ 166.888622][T16072] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 166.990038][T16086] bridge_slave_0: left allmulticast mode [ 166.995789][T16086] bridge_slave_0: left promiscuous mode [ 167.001877][T16086] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.011740][T16086] bridge_slave_1: left allmulticast mode [ 167.017590][T16086] bridge_slave_1: left promiscuous mode [ 167.023519][T16086] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.033160][T16086] bond0: (slave bond_slave_0): Releasing backup interface [ 167.047239][T16086] bond0: (slave bond_slave_1): Releasing backup interface [ 167.062156][T16086] team0: Port device team_slave_0 removed [ 167.069221][T16086] team0: Port device team_slave_1 removed [ 167.075453][T16086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.118947][T16091] tipc: Enabling of bearer rejected, failed to enable media [ 167.147574][T16093] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.213714][T16093] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.258575][T16093] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.309159][T16093] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.385865][ T5798] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.398244][ T5836] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.411583][ T5832] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.423660][ T5832] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.881732][T16127] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3300'. [ 167.932711][T16136] loop1: detected capacity change from 0 to 1024 [ 168.129445][T16136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.303979][T16136] ext4 filesystem being mounted at /606/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.858877][T16179] loop6: detected capacity change from 0 to 1024 [ 168.869593][T16179] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 168.882253][T16179] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.897956][T16179] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.3311: lblock 3 mapped to illegal pblock 3 (length 3) [ 168.912207][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3312'. [ 168.912822][T16179] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 168.933626][T16179] EXT4-fs (loop6): This should not happen!! Data will be lost [ 168.933626][T16179] [ 168.956814][T16179] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.3311: lblock 0 mapped to illegal pblock 0 (length 1) [ 168.971132][T16179] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 168.983605][T16179] EXT4-fs (loop6): This should not happen!! Data will be lost [ 168.983605][T16179] [ 169.009069][ T5798] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:24: lblock 8 mapped to illegal pblock 8 (length 8) [ 169.073873][ T5798] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 169.086510][ T5798] EXT4-fs (loop6): This should not happen!! Data will be lost [ 169.086510][ T5798] [ 169.113392][T11626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 169.226071][T16198] loop6: detected capacity change from 0 to 512 [ 169.257672][T16198] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.278994][T16198] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.296013][T16206] loop4: detected capacity change from 0 to 1024 [ 169.327339][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.351705][T11626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.362246][T16206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.417247][T15576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.755814][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 169.755834][ T29] audit: type=1400 audit(1758917175.989:6080): avc: denied { name_bind } for pid=16254 comm="syz.1.3329" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 169.883119][T16266] loop4: detected capacity change from 0 to 512 [ 169.899761][ T29] audit: type=1326 audit(1758917176.129:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16263 comm="syz.6.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a870eec9 code=0x7ffc0000 [ 169.923582][ T29] audit: type=1326 audit(1758917176.129:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16263 comm="syz.6.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a870eec9 code=0x7ffc0000 [ 169.947189][ T29] audit: type=1326 audit(1758917176.129:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16263 comm="syz.6.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a870eec9 code=0x7ffc0000 [ 169.970849][ T29] audit: type=1326 audit(1758917176.129:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16263 comm="syz.6.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a870eec9 code=0x7ffc0000 [ 169.994416][ T29] audit: type=1326 audit(1758917176.129:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16263 comm="syz.6.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a870eec9 code=0x7ffc0000 [ 170.018035][ T29] audit: type=1326 audit(1758917176.129:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16263 comm="syz.6.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a870eec9 code=0x7ffc0000 [ 170.040942][T16266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.041550][ T29] audit: type=1326 audit(1758917176.129:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16263 comm="syz.6.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a870eec9 code=0x7ffc0000 [ 170.074556][T16266] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.077501][ T29] audit: type=1326 audit(1758917176.129:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16263 comm="syz.6.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a870eec9 code=0x7ffc0000 [ 170.077531][ T29] audit: type=1326 audit(1758917176.139:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16263 comm="syz.6.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a870eec9 code=0x7ffc0000 [ 170.238752][T15576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.356791][T16278] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 170.365099][T16279] tipc: Started in network mode [ 170.370231][T16279] tipc: Node identity 1ee2f10bf6ab, cluster identity 4711 [ 170.378162][T16279] tipc: Enabled bearer , priority 0 [ 170.396291][T16282] openvswitch: netlink: Message has 6 unknown bytes. [ 170.412526][T16273] tipc: Resetting bearer [ 170.448064][T16273] tipc: Disabling bearer [ 170.496734][T16289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3335'. [ 170.507950][T16293] loop4: detected capacity change from 0 to 512 [ 170.537727][T16293] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 170.597485][T16293] EXT4-fs (loop4): orphan cleanup on readonly fs [ 170.603120][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3342'. [ 170.624577][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3342'. [ 170.660637][T16293] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.3336: corrupted inode contents [ 170.673577][T16293] EXT4-fs (loop4): Remounting filesystem read-only [ 170.680571][T16293] EXT4-fs (loop4): 1 truncate cleaned up [ 170.686864][ T5836] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 170.697703][ T5836] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 170.755813][ T5836] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 170.768736][T16293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.828856][T15576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.895854][T16343] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.933293][T16343] O3ãc¤±: renamed from bridge_slave_0 [ 171.030454][T16358] loop4: detected capacity change from 0 to 2048 [ 171.079471][T16358] loop4: p2 < > p4 [ 171.084484][T16358] loop4: p4 size 262144 extends beyond EOD, truncated [ 171.093247][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3354'. [ 171.108807][T16358] hub 1-0:1.0: USB hub found [ 171.118025][T16358] hub 1-0:1.0: 8 ports detected [ 171.124335][T16367] bridge1: port 1(veth3) entered blocking state [ 171.130839][T16367] bridge1: port 1(veth3) entered disabled state [ 171.140834][T16367] veth3: entered allmulticast mode [ 171.147349][T16367] veth3: entered promiscuous mode [ 171.161266][T16367] bridge1: port 2(veth0_to_bond) entered blocking state [ 171.168461][T16367] bridge1: port 2(veth0_to_bond) entered disabled state [ 171.177595][T16367] veth0_to_bond: entered allmulticast mode [ 171.184529][T16367] veth0_to_bond: entered promiscuous mode [ 171.230712][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3359'. [ 171.254426][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3359'. [ 172.076584][T16459] loop4: detected capacity change from 0 to 128 [ 172.088379][T16459] syz.4.3373: attempt to access beyond end of device [ 172.088379][T16459] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 172.108300][T16459] syz.4.3373: attempt to access beyond end of device [ 172.108300][T16459] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 172.122150][T16459] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 172.142219][T16459] syz.4.3373: attempt to access beyond end of device [ 172.142219][T16459] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 172.155803][T16459] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 172.165442][T16459] syz.4.3373: attempt to access beyond end of device [ 172.165442][T16459] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 172.180038][T16459] syz.4.3373: attempt to access beyond end of device [ 172.180038][T16459] loop4: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 172.193630][T16459] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 172.203323][T16459] syz.4.3373: attempt to access beyond end of device [ 172.203323][T16459] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 172.216867][T16459] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 172.227127][T16459] syz.4.3373: attempt to access beyond end of device [ 172.227127][T16459] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 172.242114][T16459] syz.4.3373: attempt to access beyond end of device [ 172.242114][T16459] loop4: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 172.255621][T16459] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 172.265687][T16459] syz.4.3373: attempt to access beyond end of device [ 172.265687][T16459] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 172.279179][T16459] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 172.288700][T16459] syz.4.3373: attempt to access beyond end of device [ 172.288700][T16459] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 172.302859][T16459] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 172.312061][T16459] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 172.321527][T16459] Buffer I/O error on dev loop4, logical block 111, lost async page write [ 172.332568][T16459] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 172.522340][T16471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3376'. [ 173.271853][T16515] loop4: detected capacity change from 0 to 512 [ 173.310107][T16515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.357281][T16515] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.395548][T16515] EXT4-fs (loop4): shut down requested (0) [ 173.425127][T16515] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 173.478722][T16515] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 173.507572][T16515] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 173.588367][T15576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.816005][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3391'. [ 173.860148][ T5832] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.869133][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3391'. [ 173.891354][ T5832] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.909288][ T5832] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.927652][ T5832] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.040155][T16565] netlink: 'syz.4.3393': attribute type 21 has an invalid length. [ 174.071014][T16565] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3393'. [ 174.080305][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3393'. [ 174.200769][T16577] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.258667][T16577] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.282804][T16586] ÿÿÿÿÿÿ: renamed from vlan1 [ 174.309877][T16577] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.378965][T16577] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.451300][ T5798] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.468447][T16600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3404'. [ 174.497868][ T5798] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.519939][ T5798] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.545565][ T5798] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.731652][T16625] loop4: detected capacity change from 0 to 1024 [ 174.779452][T16625] EXT4-fs: Ignoring removed orlov option [ 174.801931][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 174.801948][ T29] audit: type=1400 audit(1758917181.039:6222): avc: denied { execute_no_trans } for pid=16626 comm="syz.1.3411" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 174.892180][T16625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.914171][ T29] audit: type=1400 audit(1758917181.152:6223): avc: denied { bind } for pid=16640 comm="syz.6.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.948388][ T29] audit: type=1400 audit(1758917181.173:6224): avc: denied { listen } for pid=16640 comm="syz.6.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.968500][ T29] audit: type=1400 audit(1758917181.173:6225): avc: denied { accept } for pid=16640 comm="syz.6.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.999099][ T29] audit: type=1400 audit(1758917181.235:6226): avc: denied { write } for pid=16624 comm="syz.4.3410" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 175.025612][T14658] IPVS: starting estimator thread 0... [ 175.125968][T16650] IPVS: using max 2352 ests per chain, 117600 per kthread [ 175.142921][ T29] audit: type=1400 audit(1758917181.390:6227): avc: denied { cpu } for pid=16655 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 175.197078][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3418'. [ 175.356781][T15576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.375947][ T29] audit: type=1400 audit(1758917181.627:6228): avc: denied { read } for pid=16665 comm="syz.4.3420" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 175.421511][T16669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3430'. [ 175.422753][ T29] audit: type=1400 audit(1758917181.627:6229): avc: denied { open } for pid=16665 comm="syz.4.3420" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 175.453897][ T29] audit: type=1400 audit(1758917181.637:6230): avc: denied { ioctl } for pid=16665 comm="syz.4.3420" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 175.479965][T16669] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.499146][T14667] hid_parser_main: 33 callbacks suppressed [ 175.499257][T14667] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 175.509496][ T29] audit: type=1326 audit(1758917181.771:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.5.3430" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e95f3eec9 code=0x0 [ 175.512677][T14667] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 175.512702][T14667] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 175.512753][T14667] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 175.558711][T14667] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 175.566177][T14667] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 175.573772][T14667] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 175.581397][T14667] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 175.588904][T14667] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 175.596439][T14667] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 175.604861][T14667] hid-generic 0000:0000:0000.0006: hidraw0: HID v7.fd Device [syz0] on syz0 [ 175.605080][T16680] tipc: Enabling of bearer rejected, already enabled [ 175.774146][T16669] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.894787][T16669] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.021056][T16669] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.077543][T16706] loop6: detected capacity change from 0 to 1024 [ 176.130433][T16706] EXT4-fs: Ignoring removed bh option [ 176.171822][ T5803] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.200735][T16706] EXT4-fs: inline encryption not supported [ 176.242697][T16706] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.258223][T16706] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 176.285056][ T5803] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.286232][T16706] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.3428: lblock 2 mapped to illegal pblock 2 (length 1) [ 176.293615][ T5803] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.316052][ T5803] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.324665][T16706] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.3428: lblock 0 mapped to illegal pblock 48 (length 1) [ 176.350357][T16706] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.3428: Failed to acquire dquot type 0 [ 176.362577][T16706] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 176.372477][T16706] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.3428: mark_inode_dirty error [ 176.390135][T16706] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 176.402526][T16706] EXT4-fs (loop6): 1 orphan inode deleted [ 176.409784][T16706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.423010][ T5798] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 176.437814][ T5798] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:24: Failed to release dquot type 0 [ 176.457163][T16730] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 176.467855][T16706] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 176.631653][T16760] loop4: detected capacity change from 0 to 512 [ 176.643736][T16760] EXT4-fs: Ignoring removed nobh option [ 176.790571][T16789] loop1: detected capacity change from 0 to 512 [ 176.847996][T11626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.866338][T16789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.913219][T16789] ext4 filesystem being mounted at /631/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.002826][T16789] EXT4-fs error (device loop1): ext4_empty_dir:3080: inode #12: comm syz.1.3437: Directory hole found for htree leaf block 0 [ 177.027714][T16801] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3438'. [ 177.058987][T16789] EXT4-fs (loop1): Remounting filesystem read-only [ 177.241205][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.314658][ T5803] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 177.373115][T16816] siw: device registration error -23 [ 177.403763][T16820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3439'. [ 177.588945][T16834] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3449'. [ 177.633316][T16834] team0: entered promiscuous mode [ 177.638455][T16834] team_slave_0: entered promiscuous mode [ 177.644490][T16834] team_slave_1: entered promiscuous mode [ 177.653996][T16834] bond0: entered promiscuous mode [ 177.659090][T16834] bond_slave_0: entered promiscuous mode [ 177.664980][T16834] bond_slave_1: entered promiscuous mode [ 177.677713][T16842] loop1: detected capacity change from 0 to 1024 [ 177.686824][T16834] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 177.697365][T16839] tipc: Enabling of bearer rejected, failed to enable media [ 177.722883][T16842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.768827][T16842] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 177.805202][T16842] EXT4-fs (loop1): shut down requested (2) [ 177.837998][T16858] loop4: detected capacity change from 0 to 1024 [ 177.859608][T16858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.877252][T16861] netlink: 'syz.5.3457': attribute type 21 has an invalid length. [ 177.905480][T16858] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 177.969360][T15576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.999980][T16879] macsec1: entered promiscuous mode [ 178.009372][T16879] dummy0: entered promiscuous mode [ 178.014761][T16879] macsec1: entered allmulticast mode [ 178.020305][T16879] dummy0: entered allmulticast mode [ 178.026983][T16879] dummy0: left allmulticast mode [ 178.032025][T16879] dummy0: left promiscuous mode [ 178.366403][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.749820][T16922] loop1: detected capacity change from 0 to 512 [ 178.757178][T16922] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.780575][T16922] EXT4-fs error (device loop1): ext4_init_orphan_info:611: comm syz.1.3473: orphan file block 0: bad magic [ 178.799178][T16922] EXT4-fs (loop1): mount failed [ 179.132738][T16949] loop4: detected capacity change from 0 to 164 [ 179.168129][T16949] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 179.401225][T16964] __nla_validate_parse: 5 callbacks suppressed [ 179.401247][T16964] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3485'. [ 179.409196][T16966] tipc: Enabled bearer , priority 0 [ 179.425591][T16966] syzkaller0: entered promiscuous mode [ 179.431255][T16966] syzkaller0: entered allmulticast mode [ 179.448573][T16966] tipc: Resetting bearer [ 179.463690][T16969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3485'. [ 179.474052][T16965] tipc: Resetting bearer [ 179.491252][T16965] tipc: Disabling bearer [ 179.500695][T16973] futex_wake_op: syz.4.3487 tries to shift op by -1; fix this program [ 180.082680][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 180.082702][ T29] audit: type=1400 audit(1758917186.432:6727): avc: denied { accept } for pid=16985 comm="syz.6.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.489605][T17000] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3493'. [ 180.619901][T17006] $Hÿ: left promiscuous mode [ 180.751350][T17008] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3497'. [ 180.798021][T17014] tipc: Enabled bearer , priority 0 [ 180.805348][ T5803] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.836079][T17013] syzkaller0: entered promiscuous mode [ 180.841641][T17013] syzkaller0: entered allmulticast mode [ 180.888120][ T5803] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.907197][T17013] tipc: Resetting bearer [ 180.913681][T17011] tipc: Resetting bearer [ 180.933412][T17011] tipc: Disabling bearer [ 180.972585][ T5803] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.022925][ T5803] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.110985][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3501'. [ 181.207445][ T29] audit: type=1400 audit(1758917187.607:6728): avc: denied { write } for pid=17022 comm="syz.5.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.274890][T17044] loop6: detected capacity change from 0 to 1024 [ 181.288286][T17044] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 181.299421][T17044] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 181.310627][T14667] syz1: Port: 1 Link DOWN [ 181.328326][T17044] JBD2: no valid journal superblock found [ 181.334241][T17044] EXT4-fs (loop6): Could not load journal inode [ 181.343453][T17051] tipc: Enabled bearer , priority 0 [ 181.351639][T17051] syzkaller0: entered promiscuous mode [ 181.357408][T17051] syzkaller0: entered allmulticast mode [ 181.366253][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3505'. [ 181.377926][T17051] tipc: Resetting bearer [ 181.385685][T17050] tipc: Resetting bearer [ 181.398063][T17050] tipc: Disabling bearer [ 181.405790][T17060] loop1: detected capacity change from 0 to 512 [ 181.409396][T17044] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 181.413004][T17060] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.429671][T17060] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 181.449612][T17067] v: renamed from ip6_vti0 [ 181.455254][T17060] EXT4-fs (loop1): 1 truncate cleaned up [ 181.463267][T17060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.493480][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3505'. [ 181.649588][T17081] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3510'. [ 181.779804][T17090] tipc: Enabled bearer , priority 0 [ 181.803082][ T29] audit: type=1400 audit(1758917188.219:6729): avc: denied { write } for pid=17099 comm="syz.6.3512" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 181.875240][T17090] syzkaller0: entered promiscuous mode [ 181.880821][T17090] syzkaller0: entered allmulticast mode [ 181.886964][ T29] audit: type=1400 audit(1758917188.301:6730): avc: denied { bind } for pid=17107 comm="syz.6.3513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.932173][ T29] audit: type=1400 audit(1758917188.331:6731): avc: denied { write } for pid=17107 comm="syz.6.3513" path="socket:[35347]" dev="sockfs" ino=35347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.932262][T17090] tipc: Resetting bearer [ 181.985647][T17088] tipc: Resetting bearer [ 181.993793][T17088] tipc: Disabling bearer [ 182.051243][ T29] audit: type=1326 audit(1758917188.464:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.6.3514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6a870eec9 code=0x0 [ 182.204119][T17079] ================================================================== [ 182.212340][T17079] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 182.220445][T17079] [ 182.222866][T17079] write to 0xffff88810ca43be8 of 8 bytes by task 17060 on cpu 1: [ 182.230594][T17079] filemap_splice_read+0x4f4/0x740 [ 182.235731][T17079] ext4_file_splice_read+0x8f/0xb0 [ 182.240886][T17079] splice_direct_to_actor+0x26f/0x680 [ 182.246291][T17079] do_splice_direct+0xda/0x150 [ 182.251079][T17079] do_sendfile+0x380/0x650 [ 182.255626][T17079] __x64_sys_sendfile64+0x105/0x150 [ 182.260856][T17079] x64_sys_call+0x2bb0/0x2ff0 [ 182.265574][T17079] do_syscall_64+0xd2/0x200 [ 182.270129][T17079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.276057][T17079] [ 182.278401][T17079] write to 0xffff88810ca43be8 of 8 bytes by task 17079 on cpu 0: [ 182.286243][T17079] filemap_splice_read+0x4f4/0x740 [ 182.291391][T17079] ext4_file_splice_read+0x8f/0xb0 [ 182.296613][T17079] splice_direct_to_actor+0x26f/0x680 [ 182.302028][T17079] do_splice_direct+0xda/0x150 [ 182.307014][T17079] do_sendfile+0x380/0x650 [ 182.311500][T17079] __x64_sys_sendfile64+0x105/0x150 [ 182.316741][T17079] x64_sys_call+0x2bb0/0x2ff0 [ 182.321456][T17079] do_syscall_64+0xd2/0x200 [ 182.326006][T17079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.331930][T17079] [ 182.334270][T17079] value changed: 0x0000000000001adb -> 0x0000000000001ae6 [ 182.341418][T17079] [ 182.343761][T17079] Reported by Kernel Concurrency Sanitizer on: [ 182.349963][T17079] CPU: 0 UID: 0 PID: 17079 Comm: syz.1.3508 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.359827][T17079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.370110][T17079] ================================================================== [ 182.548320][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.