last executing test programs: 5m26.071155722s ago: executing program 32 (id=4889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 5m22.195810039s ago: executing program 3 (id=5004): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x20, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4048840) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) 5m22.17581629s ago: executing program 3 (id=5005): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x100804, 0x0, 0xa, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x7fff, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0xe}) 5m22.135989704s ago: executing program 3 (id=5008): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r1, 0x7f, 0x0, 0x4) 5m22.06133949s ago: executing program 3 (id=5012): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) 5m21.998726755s ago: executing program 3 (id=5018): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) 5m21.620011216s ago: executing program 3 (id=5033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 5m21.619924306s ago: executing program 33 (id=5033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 2m58.807922391s ago: executing program 0 (id=12098): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m58.757986605s ago: executing program 0 (id=12101): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m58.600797488s ago: executing program 0 (id=12104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x51, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000180)=""/106, 0x0, 0x6a, 0x0, 0x9}, 0x28) 2m58.548921072s ago: executing program 0 (id=12107): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 2m58.508794046s ago: executing program 0 (id=12110): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m58.352899048s ago: executing program 0 (id=12116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000020000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 2m58.352756609s ago: executing program 34 (id=12116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000020000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 45.824874351s ago: executing program 1 (id=18960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000010101020000040000000000f5ffff070c0019"], 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x84) 45.804413762s ago: executing program 1 (id=18961): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 45.766356076s ago: executing program 1 (id=18963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) 45.687714452s ago: executing program 1 (id=18966): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 45.636592836s ago: executing program 1 (id=18968): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 41.888477598s ago: executing program 1 (id=19130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 41.888341058s ago: executing program 35 (id=19130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 12.163182308s ago: executing program 7 (id=20174): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x36, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 12.120727631s ago: executing program 7 (id=20176): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) close(0xffffffffffffffff) close(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 12.097896554s ago: executing program 7 (id=20178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 12.068198316s ago: executing program 7 (id=20181): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x221) 12.039247268s ago: executing program 7 (id=20183): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffc7, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x80}, 0x48) 11.788379388s ago: executing program 7 (id=20196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0xe900) close(r2) 11.788321549s ago: executing program 36 (id=20196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0xe900) close(r2) 9.889669661s ago: executing program 6 (id=20250): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x401, @mcast2, 0x10}, 0x1c, 0x0}}], 0x1, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 9.836186336s ago: executing program 6 (id=20254): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) timerfd_gettime(0xffffffffffffffff, 0x0) 9.764017412s ago: executing program 6 (id=20258): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 9.677036059s ago: executing program 6 (id=20265): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0x9) 9.66171271s ago: executing program 6 (id=20277): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) 8.996279564s ago: executing program 6 (id=20300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000600)='0', 0x1, r2) 8.996077534s ago: executing program 37 (id=20300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000600)='0', 0x1, r2) 1.564391634s ago: executing program 2 (id=20584): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f0000000580)={[{@orlov}, {@norecovery}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.478812271s ago: executing program 8 (id=20589): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r3, 0x9}, 0x8) 833.109013ms ago: executing program 5 (id=20615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 789.468576ms ago: executing program 4 (id=20617): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = dup2(r1, r1) write$tun(r2, 0x0, 0x46) 645.930458ms ago: executing program 2 (id=20618): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 645.837338ms ago: executing program 4 (id=20619): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_gettime(r2, &(0x7f00000002c0)) 645.708118ms ago: executing program 5 (id=20620): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=l']) 643.800098ms ago: executing program 8 (id=20628): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c, 0x30, r1, 0xb4c55000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb000001c}) close(r0) 611.455151ms ago: executing program 4 (id=20621): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) syslog(0x4, 0xffffffffffffffff, 0x1a) 610.982551ms ago: executing program 5 (id=20622): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x18) inotify_rm_watch(0xffffffffffffffff, r1) 576.730433ms ago: executing program 4 (id=20624): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x118864, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 558.856315ms ago: executing program 5 (id=20625): r0 = memfd_secret(0x80000) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) close(r0) 552.501265ms ago: executing program 8 (id=20627): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 522.936408ms ago: executing program 5 (id=20630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 503.79661ms ago: executing program 5 (id=20631): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f0000000580)={[{@orlov}, {@norecovery}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 426.068146ms ago: executing program 8 (id=20632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 409.838517ms ago: executing program 9 (id=20633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 407.468417ms ago: executing program 4 (id=20634): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 341.130573ms ago: executing program 9 (id=20635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 279.733977ms ago: executing program 2 (id=20636): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0x8, 0xd}, 0x50) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff5f) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x10, "0062ba7d82e7ff00000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x20000) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) 265.324369ms ago: executing program 9 (id=20637): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074e214e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 202.324813ms ago: executing program 9 (id=20638): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c, 0x30, r1, 0xb4c55000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb000001c}) close(r0) 197.760004ms ago: executing program 2 (id=20639): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') stat(&(0x7f00000007c0)='./file0\x00', 0x0) 142.985969ms ago: executing program 2 (id=20640): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x7, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x4000002, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0xf, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0x4, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) 70.459064ms ago: executing program 2 (id=20641): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d3", 0x6) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 70.260384ms ago: executing program 9 (id=20642): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, r2, {0x0, 0x11}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 69.354914ms ago: executing program 4 (id=20643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 67.754375ms ago: executing program 8 (id=20644): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) dup2(r0, r1) 33.429907ms ago: executing program 9 (id=20645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 0s ago: executing program 8 (id=20646): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) kernel console output (not intermixed with test programs): 383][ T29] audit: type=1326 audit(2000000023.658:23517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11427 comm="syz.6.18182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992d1ebe9 code=0x7ffc0000 [ 397.275386][ T29] audit: type=1326 audit(2000000023.658:23518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11427 comm="syz.6.18182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc992d1ebe9 code=0x7ffc0000 [ 397.299349][ T29] audit: type=1326 audit(2000000023.658:23519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11427 comm="syz.6.18182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992d1ebe9 code=0x7ffc0000 [ 397.323196][ T29] audit: type=1326 audit(2000000023.658:23520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11427 comm="syz.6.18182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992d1ebe9 code=0x7ffc0000 [ 397.492002][T30462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.526623][T11457] SELinux: failed to load policy [ 397.629649][T11471] loop6: detected capacity change from 0 to 512 [ 397.647221][T11471] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 397.709007][T11471] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.18202: Failed to acquire dquot type 1 [ 397.723777][T11471] EXT4-fs (loop6): 1 truncate cleaned up [ 397.730576][T11471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.855761][T14836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.911926][T11502] batman_adv: batadv0: adding TT local entry 02:04:00:bf:05:00 to non-existent VLAN 2621 [ 398.137311][T11526] team_slave_0: entered promiscuous mode [ 398.143204][T11526] team_slave_1: entered promiscuous mode [ 398.148869][T11526] geneve1: entered promiscuous mode [ 398.154094][T11526] bond_slave_0: entered promiscuous mode [ 398.159780][T11526] bond_slave_1: entered promiscuous mode [ 398.169997][T11526] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 398.178267][T11526] team0: Device macvtap1 is already an upper device of the team interface [ 398.196162][T11526] team_slave_0: left promiscuous mode [ 398.201680][T11526] team_slave_1: left promiscuous mode [ 398.207104][T11526] geneve1: left promiscuous mode [ 398.212058][T11526] bond_slave_0: left promiscuous mode [ 398.217465][T11526] bond_slave_1: left promiscuous mode [ 398.240637][T11538] loop7: detected capacity change from 0 to 128 [ 398.250380][T11538] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback. [ 398.298011][T30462] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 398.378042][T11554] __nla_validate_parse: 1 callbacks suppressed [ 398.378060][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18240'. [ 398.446386][T12455] hid_parser_main: 6 callbacks suppressed [ 398.446407][T12455] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 398.459857][T12455] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 398.467391][T12455] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 398.475046][T12455] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 398.482575][T12455] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 398.490254][T12455] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 398.497720][T12455] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 398.505229][T12455] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 398.512691][T12455] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 398.520095][T12455] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 398.536231][T12455] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 398.599811][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18253'. [ 398.764461][T11596] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18252'. [ 399.154779][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18287'. [ 399.215241][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18289'. [ 399.286691][T11678] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 399.645878][T11735] batadv0: entered promiscuous mode [ 399.660295][T11735] macvtap1: entered promiscuous mode [ 399.672209][T11735] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 399.697253][T11735] batadv0: left promiscuous mode [ 400.131286][T12455] Process accounting resumed [ 400.191173][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18337'. [ 400.574755][T11797] 9pnet_fd: Insufficient options for proto=fd [ 400.724243][T11808] lo speed is unknown, defaulting to 1000 [ 400.733798][T11828] loop7: detected capacity change from 0 to 512 [ 400.754140][T11828] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 400.782372][T11828] EXT4-fs (loop7): 1 truncate cleaned up [ 400.791988][T11828] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.009710][T30462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.098497][T11865] loop6: detected capacity change from 0 to 128 [ 401.106713][T11868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18383'. [ 401.118451][T11865] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 401.139879][T11865] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 401.193999][T11879] loop6: detected capacity change from 0 to 512 [ 401.257820][T11879] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 401.270213][T11879] System zones: 0-2, 18-18, 34-35 [ 401.278351][T11895] 9pnet_fd: Insufficient options for proto=fd [ 401.301346][T11879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.314959][T11879] ext4 filesystem being mounted at /2584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.338057][T14836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.421413][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18404'. [ 401.585721][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18411'. [ 401.837327][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 401.837350][ T29] audit: type=1400 audit(2000000028.711:23738): avc: denied { ioctl } for pid=11950 comm="syz.5.18421" path="socket:[136321]" dev="sockfs" ino=136321 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 401.897049][T11953] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 401.907303][T11953] team0: Device macvtap1 is already an upper device of the team interface [ 401.919894][T11947] lo speed is unknown, defaulting to 1000 [ 401.928064][ T29] audit: type=1326 audit(2000000028.797:23739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.2.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 401.952376][ T29] audit: type=1326 audit(2000000028.808:23740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.2.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 401.976469][ T29] audit: type=1326 audit(2000000028.808:23741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.2.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 402.000305][ T29] audit: type=1326 audit(2000000028.808:23742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.2.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 402.024505][ T29] audit: type=1326 audit(2000000028.808:23743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.2.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 402.048336][ T29] audit: type=1326 audit(2000000028.808:23744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.2.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 402.072277][ T29] audit: type=1326 audit(2000000028.808:23745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.2.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 402.096320][ T29] audit: type=1326 audit(2000000028.808:23746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.2.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 402.120184][ T29] audit: type=1326 audit(2000000028.808:23747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.2.18422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 402.245070][T11965] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 402.361528][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18437'. [ 402.380924][T11987] chnl_net:caif_netlink_parms(): no params data found [ 402.603736][T12021] program syz.6.18455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.621713][T12021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 402.645790][T12024] 9pnet: Could not find request transport: 0xffffffffffffffff [ 402.746289][T12030] netlink: 'syz.2.18458': attribute type 3 has an invalid length. [ 402.809144][T12048] batadv0: entered promiscuous mode [ 402.814604][T12048] macvtap1: entered promiscuous mode [ 402.829203][T12048] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 402.833956][T12053] rdma_op ffff88810c139580 conn xmit_rdma 0000000000000000 [ 402.848064][T12048] batadv0: left promiscuous mode [ 403.051864][T12092] batadv0: entered promiscuous mode [ 403.065778][T12092] macvtap1: entered promiscuous mode [ 403.082713][T12099] loop6: detected capacity change from 0 to 512 [ 403.090220][T12092] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 403.100233][T12092] batadv0: left promiscuous mode [ 403.120025][T12099] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.18490: bg 0: block 248: padding at end of block bitmap is not set [ 403.137647][T12099] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.18490: Failed to acquire dquot type 1 [ 403.166331][T12099] EXT4-fs (loop6): 1 truncate cleaned up [ 403.172088][T12113] loop7: detected capacity change from 0 to 256 [ 403.188732][T12099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.209093][T12099] ext4 filesystem being mounted at /2600/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.234382][T14836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.353166][T12138] __nla_validate_parse: 1 callbacks suppressed [ 403.353186][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18507'. [ 403.392110][T12138] chnl_net:caif_netlink_parms(): no params data found [ 403.454441][T12144] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.18510'. [ 403.538200][T12147] macvtap1: entered promiscuous mode [ 403.543753][T12147] batadv0: entered promiscuous mode [ 403.550067][T12147] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 403.561076][T12147] batadv0: left promiscuous mode [ 403.578704][T12156] loop7: detected capacity change from 0 to 512 [ 403.586018][T12156] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 403.599395][T12156] EXT4-fs (loop7): 1 truncate cleaned up [ 403.605607][T12156] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.662840][T30462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.775611][T12172] lo speed is unknown, defaulting to 1000 [ 404.198154][T12214] netlink: 'syz.2.18533': attribute type 2 has an invalid length. [ 404.215693][T12215] batadv0: entered promiscuous mode [ 404.229711][T12215] macvtap1: entered promiscuous mode [ 404.239261][T12215] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 404.254091][T12215] batadv0: left promiscuous mode [ 404.311239][T12233] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18553'. [ 404.404348][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18561'. [ 404.597192][T12289] loop7: detected capacity change from 0 to 2048 [ 404.618319][T12289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.649366][T12296] bridge0: entered promiscuous mode [ 404.661558][T12296] macsec3: entered promiscuous mode [ 404.669622][T30462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.680539][T12296] bridge0: port 4(macsec3) entered blocking state [ 404.687464][T12296] bridge0: port 4(macsec3) entered disabled state [ 404.696945][T12296] macsec3: entered allmulticast mode [ 404.702528][T12296] bridge0: entered allmulticast mode [ 404.729856][T12296] macsec3: left allmulticast mode [ 404.734960][T12296] bridge0: left allmulticast mode [ 404.777463][T12296] bridge0: left promiscuous mode [ 404.881609][T12320] macvtap1: entered promiscuous mode [ 404.887093][T12320] batadv0: entered promiscuous mode [ 404.912542][T12320] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 404.951843][T12320] batadv0: left promiscuous mode [ 404.964873][T12323] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18596'. [ 405.112180][T12355] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18610'. [ 405.328542][T12375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18620'. [ 405.337815][T12375] netlink: 'syz.2.18620': attribute type 7 has an invalid length. [ 405.345788][T12375] netlink: 'syz.2.18620': attribute type 8 has an invalid length. [ 405.353813][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18620'. [ 405.605638][T12393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12393 comm=syz.2.18629 [ 405.649340][T12402] netlink: 'syz.7.18632': attribute type 6 has an invalid length. [ 405.709980][T12415] netlink: 'syz.2.18639': attribute type 10 has an invalid length. [ 405.718185][T12415] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18639'. [ 405.728039][T12415] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 405.789655][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18640'. [ 405.822607][T12423] netlink: 'syz.7.18643': attribute type 3 has an invalid length. [ 405.958731][T12448] 9pnet_fd: Insufficient options for proto=fd [ 406.082513][T12468] batadv0: entered promiscuous mode [ 406.088052][T12468] macvtap1: entered promiscuous mode [ 406.094612][T12468] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 406.106890][T12468] batadv0: left promiscuous mode [ 406.269615][T12491] loop7: detected capacity change from 0 to 512 [ 406.286787][T12491] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.299647][T12491] ext4 filesystem being mounted at /1258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.342148][T30462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.368209][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104c80600: rx timeout, send abort [ 406.418837][T12506] loop7: detected capacity change from 0 to 764 [ 406.427546][T12506] rock: directory entry would overflow storage [ 406.433862][T12506] rock: sig=0x5245, size=8, remaining=5 [ 406.469166][T12512] loop7: detected capacity change from 0 to 512 [ 406.478786][T12512] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 406.494599][T12512] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 406.506237][T12512] EXT4-fs (loop7): 1 truncate cleaned up [ 406.514328][T12512] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.540499][T30462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.842499][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104c80600: abort rx timeout. Force session deactivation [ 406.939115][T12544] netlink: 'syz.2.18694': attribute type 10 has an invalid length. [ 407.017283][T12546] loop6: detected capacity change from 0 to 164 [ 407.034056][T12546] rock: directory entry would overflow storage [ 407.040393][T12546] rock: sig=0x66, size=4, remaining=3 [ 407.066312][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 407.066330][ T29] audit: type=1400 audit(2000000034.323:23899): avc: denied { ioctl } for pid=12547 comm="syz.2.18697" path="socket:[137245]" dev="sockfs" ino=137245 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 407.234326][ T29] audit: type=1400 audit(2000000034.494:23900): avc: denied { mount } for pid=12563 comm="syz.7.18704" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 407.315163][ T29] audit: type=1400 audit(2000000034.548:23901): avc: denied { unmount } for pid=30462 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 407.356649][ T29] audit: type=1326 audit(2000000034.623:23902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.7.18710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 407.412381][ T29] audit: type=1326 audit(2000000034.634:23903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.7.18710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 407.436676][ T29] audit: type=1326 audit(2000000034.634:23904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.7.18710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 407.461109][ T29] audit: type=1326 audit(2000000034.634:23905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.7.18710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 407.485136][ T29] audit: type=1326 audit(2000000034.634:23906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.7.18710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 407.509402][ T29] audit: type=1326 audit(2000000034.634:23907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.7.18710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 407.533327][ T29] audit: type=1326 audit(2000000034.634:23908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.7.18710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 407.602872][T12600] loop6: detected capacity change from 0 to 512 [ 407.613429][T12600] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 407.656854][T12605] netlink: 'syz.6.18723': attribute type 10 has an invalid length. [ 407.671757][T12605] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.681250][T12605] bridge_slave_1: left allmulticast mode [ 407.687030][T12605] bridge_slave_1: left promiscuous mode [ 407.692735][T12605] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.705001][T12605] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 407.850372][T12620] lo speed is unknown, defaulting to 1000 [ 407.941736][T12630] netlink: 'syz.5.18735': attribute type 1 has an invalid length. [ 407.985692][T12630] 8021q: adding VLAN 0 to HW filter on device bond3 [ 407.994564][T12630] bond2: (slave bond3): making interface the new active one [ 408.010535][T12630] bond2: (slave bond3): Enslaving as an active interface with an up link [ 408.048429][T12634] SELinux: Context system_u:object_r:setrans_exec_t:s0 is not valid (left unmapped). [ 408.174051][T12650] __nla_validate_parse: 3 callbacks suppressed [ 408.174069][T12650] netlink: 32 bytes leftover after parsing attributes in process `syz.6.18743'. [ 408.301859][T12661] lo speed is unknown, defaulting to 1000 [ 408.312598][T12668] loop7: detected capacity change from 0 to 512 [ 408.328163][T12668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.358271][T12676] netlink: 268 bytes leftover after parsing attributes in process `+}[@'. [ 408.372523][T12668] ext4 filesystem being mounted at /1282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.458825][T30462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.554686][T12702] loop6: detected capacity change from 0 to 2048 [ 408.600530][T12702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.670139][T12722] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18773'. [ 408.679311][T12722] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18773'. [ 408.691435][T12702] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 408.706506][T12724] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18775'. [ 408.723073][T12702] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 408.735489][T12702] EXT4-fs (loop6): This should not happen!! Data will be lost [ 408.735489][T12702] [ 408.742840][T12730] loop7: detected capacity change from 0 to 128 [ 408.745202][T12702] EXT4-fs (loop6): Total free blocks count 0 [ 408.745291][T12702] EXT4-fs (loop6): Free/Dirty block details [ 408.763762][T12702] EXT4-fs (loop6): free_blocks=2415919104 [ 408.769676][T12702] EXT4-fs (loop6): dirty_blocks=48 [ 408.774815][T12702] EXT4-fs (loop6): Block reservation details [ 408.780981][T12702] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 408.834172][T14836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.898660][T12749] loop9: detected capacity change from 0 to 7 [ 408.905448][T12749] Buffer I/O error on dev loop9, logical block 0, async page read [ 408.940908][T12749] Buffer I/O error on dev loop9, logical block 0, async page read [ 408.948805][T12749] loop9: unable to read partition table [ 408.962425][T12749] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 408.962425][T12749] ) failed (rc=-5) [ 408.984057][T12757] netlink: 32 bytes leftover after parsing attributes in process `syz.7.18790'. [ 409.014094][T12755] wireguard0: entered promiscuous mode [ 409.019681][T12755] wireguard0: entered allmulticast mode [ 409.189686][T12785] loop6: detected capacity change from 0 to 512 [ 409.219216][T12785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.235288][T12787] loop7: detected capacity change from 0 to 512 [ 409.253578][T12787] EXT4-fs: Ignoring removed oldalloc option [ 409.269585][T12785] ext4 filesystem being mounted at /2655/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 409.302105][T12787] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.18804: Parent and EA inode have the same ino 15 [ 409.321138][T12785] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.18803: bg 0: block 145: padding at end of block bitmap is not set [ 409.342219][T12787] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.18804: Parent and EA inode have the same ino 15 [ 409.356950][T12785] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 409.368271][T12787] EXT4-fs (loop7): 1 orphan inode deleted [ 409.375986][T12787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.410670][T14836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.428076][T30462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.455075][T12809] wireguard0: entered promiscuous mode [ 409.460594][T12809] wireguard0: entered allmulticast mode [ 409.617439][T12822] loop7: detected capacity change from 0 to 2048 [ 409.635348][T12827] serio: Serial port ptm0 [ 409.635391][T12822] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.666922][T12822] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 409.683542][T12822] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 409.696156][T12822] EXT4-fs (loop7): This should not happen!! Data will be lost [ 409.696156][T12822] [ 409.705834][T12822] EXT4-fs (loop7): Total free blocks count 0 [ 409.711905][T12822] EXT4-fs (loop7): Free/Dirty block details [ 409.717834][T12822] EXT4-fs (loop7): free_blocks=2415919104 [ 409.723577][T12822] EXT4-fs (loop7): dirty_blocks=48 [ 409.728733][T12822] EXT4-fs (loop7): Block reservation details [ 409.734818][T12822] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 409.801970][T30462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.831237][T12841] netlink: 32 bytes leftover after parsing attributes in process `GPL'. [ 409.861866][T12842] 9pnet: Could not find request transport: 0xffffffffffffffff [ 409.870364][T12845] macvtap0: refused to change device tx_queue_len [ 409.989581][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18832'. [ 409.998776][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18832'. [ 410.231457][T12881] SELinux: ebitmap: truncated map [ 410.267129][T12881] SELinux: failed to load policy [ 410.274710][T12892] loop7: detected capacity change from 0 to 164 [ 410.281770][T12892] iso9660: Bad value for 'sbsector' [ 410.532167][T12922] loop7: detected capacity change from 0 to 128 [ 410.554095][T12922] syz.7.18862: attempt to access beyond end of device [ 410.554095][T12922] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 410.579278][T12920] syz.7.18862: attempt to access beyond end of device [ 410.579278][T12920] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 410.593009][T12920] Buffer I/O error on dev loop7, logical block 69, lost async page write [ 410.800960][T12941] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18871'. [ 410.947050][T12957] smc: net device bond0 applied user defined pnetid SYZ0 [ 410.972185][T12957] smc: net device bond0 erased user defined pnetid SYZ0 [ 411.110102][T12942] lo speed is unknown, defaulting to 1000 [ 411.360206][T13004] loop7: detected capacity change from 0 to 512 [ 411.381438][T13004] EXT4-fs: Ignoring removed bh option [ 411.451621][T13004] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 411.460912][T13004] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 411.491468][T13004] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 411.513219][T13004] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 411.552081][T13004] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.681097][T13021] lo speed is unknown, defaulting to 1000 [ 411.776230][T30462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.826481][T12436] hid_parser_main: 16 callbacks suppressed [ 411.826502][T12436] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 411.840626][T12436] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 411.848488][T12436] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 411.856545][T12436] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 411.864869][T12436] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 411.872957][T12436] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 411.881205][T12436] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 411.889138][T12436] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 411.897038][T12436] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 411.904819][T12436] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 411.916372][T12436] hid-generic 0008:0006:80000007.000A: hidraw0: HID v0.0b Device [syz1] on syz1 [ 411.953533][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 411.953551][ T29] audit: type=1400 audit(2000000039.570:24096): avc: denied { create } for pid=13049 comm="syz.6.18921" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 412.009846][T13056] netlink: 'syz.1.18924': attribute type 1 has an invalid length. [ 412.183753][ T29] audit: type=1400 audit(2000000039.806:24097): avc: denied { setopt } for pid=13071 comm="syz.1.18932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 412.365618][T13080] loop6: detected capacity change from 0 to 2048 [ 412.402733][T13080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.425852][ T29] audit: type=1400 audit(2000000040.063:24098): avc: denied { link } for pid=13079 comm="syz.6.18935" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 412.615201][T14836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.714372][T13086] lo speed is unknown, defaulting to 1000 [ 412.991358][T13106] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.001505][T13106] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.059699][T13106] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.069685][T13106] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.085610][ T29] audit: type=1400 audit(2000000040.782:24099): avc: denied { connect } for pid=13116 comm="syz.2.18949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 413.126794][T13106] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.137220][T13106] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.183338][T13106] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.193697][T13106] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.244724][ T1022] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.253087][ T1022] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.280899][ T1022] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.289353][ T1022] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.319983][ T1022] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.320564][ T29] audit: type=1326 audit(2000000041.029:24100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.1.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecb07ebe9 code=0x7ffc0000 [ 413.328318][ T1022] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.360821][ T1022] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.369167][ T1022] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.379596][ T29] audit: type=1326 audit(2000000041.072:24101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.1.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecb07ebe9 code=0x7ffc0000 [ 413.403539][ T29] audit: type=1326 audit(2000000041.072:24102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.1.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ecb07ebe9 code=0x7ffc0000 [ 413.427596][ T29] audit: type=1326 audit(2000000041.072:24103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.1.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecb07ebe9 code=0x7ffc0000 [ 413.451939][ T29] audit: type=1326 audit(2000000041.072:24104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.1.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecb07ebe9 code=0x7ffc0000 [ 413.475823][ T29] audit: type=1326 audit(2000000041.072:24105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.1.18955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ecb07ebe9 code=0x7ffc0000 [ 413.575533][T13137] __nla_validate_parse: 5 callbacks suppressed [ 413.575550][T13137] netlink: 204 bytes leftover after parsing attributes in process `syz.6.18958'. [ 413.615984][T12436] hid-generic 0000:0000:0000.000B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 413.654069][T13144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.676479][T13144] team0: Port device bond1 added [ 413.835938][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18970'. [ 413.978538][T13175] loop7: detected capacity change from 0 to 512 [ 413.987955][T13175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 413.997494][T13175] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 414.005734][T13175] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 414.019188][T13175] EXT4-fs (loop7): orphan cleanup on readonly fs [ 414.043965][T13175] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 414.058712][T13175] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 414.136827][T13175] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.18977: bg 0: block 40: padding at end of block bitmap is not set [ 414.155455][T11322] bond0: (slave syz_tun): Releasing backup interface [ 414.164593][T13175] EXT4-fs (loop7): Remounting filesystem read-only [ 414.171740][T13175] EXT4-fs (loop7): 1 truncate cleaned up [ 414.177958][T13175] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 414.190781][T13193] ref_ctr_offset mismatch. inode: 0x3b89 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 414.195261][T13175] EXT4-fs (loop7): shut down requested (2) [ 414.212479][T13175] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 414.222336][T13175] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 414.243886][T30462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.478842][T13211] loop7: detected capacity change from 0 to 128 [ 414.488302][T13211] syz.7.18993: attempt to access beyond end of device [ 414.488302][T13211] loop7: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 414.788612][T13226] loop7: detected capacity change from 0 to 4096 [ 414.796591][T13226] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 414.809060][T13226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.832437][T13226] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.894025][T13235] futex_wake_op: syz.7.19003 tries to shift op by -1; fix this program [ 414.916442][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19004'. [ 414.925571][T13237] bridge_slave_1: left allmulticast mode [ 414.931201][T13237] bridge_slave_1: left promiscuous mode [ 414.937162][T13237] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.945271][T13237] bridge_slave_0: left allmulticast mode [ 414.950937][T13237] bridge_slave_0: left promiscuous mode [ 414.956902][T13237] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.032358][T30013] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 415.447830][T13273] netlink: 'syz.2.19018': attribute type 4 has an invalid length. [ 415.459538][T13273] netlink: 'syz.2.19018': attribute type 4 has an invalid length. [ 415.826346][T13299] loop6: detected capacity change from 0 to 128 [ 416.254978][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19057'. [ 416.310377][T13369] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 416.379019][T13383] 9pnet: Could not find request transport: Z( [ 416.480845][T13407] netlink: 52 bytes leftover after parsing attributes in process `syz.6.19079'. [ 416.561474][T13418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19084'. [ 416.570846][T13418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19084'. [ 416.596970][T13420] 9pnet_fd: Insufficient options for proto=fd [ 416.626592][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 416.626611][ T29] audit: type=1326 audit(2000000044.580:24263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.7.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 416.658007][ T29] audit: type=1326 audit(2000000044.580:24264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.7.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 416.682188][ T29] audit: type=1326 audit(2000000044.580:24265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.7.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 416.706104][ T29] audit: type=1326 audit(2000000044.580:24266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.7.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 416.730289][ T29] audit: type=1326 audit(2000000044.580:24267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.7.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 416.754822][ T29] audit: type=1326 audit(2000000044.580:24268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.7.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 416.778737][ T29] audit: type=1326 audit(2000000044.580:24269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.7.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 416.802733][ T29] audit: type=1326 audit(2000000044.580:24270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.7.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 416.826410][ T29] audit: type=1326 audit(2000000044.612:24271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.7.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 416.850646][ T29] audit: type=1326 audit(2000000044.612:24272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.7.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 416.936085][T13441] loop6: detected capacity change from 0 to 1024 [ 416.943034][T13441] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 416.943034][T13441] [ 416.953809][T13441] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 417.138198][T13457] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 417.138198][T13457] Q&|xùXºX HID v8.00 Device [syz0] on syz0 [ 420.225507][T12444] hid-generic 0008:0006:80000007.000D: hidraw0: HID v0.0b Device [syz1] on syz1 [ 420.235995][T13803] lo speed is unknown, defaulting to 1000 [ 420.336959][T13815] syzkaller0: entered promiscuous mode [ 420.339136][T13821] loop6: detected capacity change from 0 to 1024 [ 420.342559][T13815] syzkaller0: entered allmulticast mode [ 420.361451][T13821] EXT4-fs: Ignoring removed orlov option [ 420.377911][T13821] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.465773][T14836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.505812][T13842] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19257'. [ 420.643107][T13844] lo speed is unknown, defaulting to 1000 [ 420.859409][T13882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19276'. [ 420.882310][T13884] loop6: detected capacity change from 0 to 512 [ 420.889709][T13884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.897678][T13884] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 420.905856][T13884] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 420.922044][T13884] EXT4-fs (loop6): orphan cleanup on readonly fs [ 420.930318][T13884] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 420.945011][T13884] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 420.963595][T13884] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.19277: bg 0: block 40: padding at end of block bitmap is not set [ 421.052690][T13884] EXT4-fs (loop6): Remounting filesystem read-only [ 421.074280][T13884] EXT4-fs (loop6): 1 truncate cleaned up [ 421.110874][T13884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 421.187809][T13884] EXT4-fs (loop6): shut down requested (2) [ 421.206396][T13884] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 421.230506][T13884] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 421.283967][T14836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.318045][T13900] ref_ctr_offset mismatch. inode: 0x1c55 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 421.359590][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 421.359609][ T29] audit: type=1326 audit(2000000049.655:24615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.6.19285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992d1ebe9 code=0x7ffc0000 [ 421.400515][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19286'. [ 421.422368][T13904] batadv1: left allmulticast mode [ 421.427452][T13904] batadv1: left promiscuous mode [ 421.432663][T13904] bridge0: port 3(batadv1) entered disabled state [ 421.440664][ T29] audit: type=1326 audit(2000000049.655:24616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.6.19285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992d1ebe9 code=0x7ffc0000 [ 421.464562][ T29] audit: type=1326 audit(2000000049.655:24617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.6.19285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fc992d1ebe9 code=0x7ffc0000 [ 421.488422][ T29] audit: type=1326 audit(2000000049.655:24618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.6.19285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992d1ebe9 code=0x7ffc0000 [ 421.512156][ T29] audit: type=1326 audit(2000000049.666:24619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13905 comm="syz.6.19285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992d1ebe9 code=0x7ffc0000 [ 421.539242][T13904] bridge_slave_1: left promiscuous mode [ 421.545079][T13904] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.569842][ T29] audit: type=1400 audit(2000000049.891:24620): avc: denied { create } for pid=13914 comm="syz.7.19290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 421.591168][T13904] bridge_slave_0: left allmulticast mode [ 421.596843][T13904] bridge_slave_0: left promiscuous mode [ 421.602692][T13904] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.623141][T13917] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 421.629702][T13917] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 421.637407][T13917] vhci_hcd vhci_hcd.0: Device attached [ 421.643170][T13920] loop8: detected capacity change from 0 to 512 [ 421.648252][T13922] netlink: 197276 bytes leftover after parsing attributes in process `syz.5.19292'. [ 421.682117][T13920] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6). [ 421.693474][T13920] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 421.708694][T13920] EXT4-fs (loop8): mount failed [ 421.723893][T13918] vhci_hcd: connection closed [ 421.724839][T29995] vhci_hcd: stop threads [ 421.734077][T29995] vhci_hcd: release socket [ 421.738680][T29995] vhci_hcd: disconnect device [ 421.810278][ T29] audit: type=1326 audit(2000000050.138:24621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.7.19297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 421.834375][ T29] audit: type=1326 audit(2000000050.138:24622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.7.19297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 421.858128][ T29] audit: type=1326 audit(2000000050.138:24623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13934 comm="syz.7.19297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 421.925766][T13944] loop7: detected capacity change from 0 to 512 [ 421.939946][T13947] loop6: detected capacity change from 0 to 1024 [ 421.957968][T13944] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.974724][T13944] ext4 filesystem being mounted at /1412/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 421.987241][T13947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.018872][T30462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.039669][T13947] netlink: 'syz.6.19301': attribute type 10 has an invalid length. [ 422.063390][T13947] ipvlan0: entered allmulticast mode [ 422.068785][T13947] veth0_vlan: entered allmulticast mode [ 422.083921][T13947] team0: Device ipvlan0 failed to register rx_handler [ 422.118923][T14836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.136230][T13950] lo speed is unknown, defaulting to 1000 [ 422.524113][T13990] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 422.530333][T13987] syzkaller0: entered promiscuous mode [ 422.530675][T13990] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 422.536142][T13987] syzkaller0: entered allmulticast mode [ 422.543900][T13990] vhci_hcd vhci_hcd.0: Device attached [ 422.593201][T13990] loop7: detected capacity change from 0 to 512 [ 422.615514][T13990] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 422.632194][T13990] EXT4-fs (loop7): mount failed [ 422.642145][T13991] vhci_hcd: connection closed [ 422.642335][T29995] vhci_hcd: stop threads [ 422.651642][T29995] vhci_hcd: release socket [ 422.656179][T29995] vhci_hcd: disconnect device [ 423.049709][T14015] loop6: detected capacity change from 0 to 512 [ 423.059567][T14015] EXT4-fs (loop6): orphan cleanup on readonly fs [ 423.066874][T14015] EXT4-fs error (device loop6): ext4_quota_enable:7128: comm syz.6.19327: inode #218103808: comm syz.6.19327: iget: illegal inode # [ 423.082820][T14015] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.19327: Bad quota inode: 218103808, type: 2 [ 423.094734][T14015] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 423.113189][T14015] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 423.132592][T14015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 423.167284][T14015] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 423.187461][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19330'. [ 423.196630][T14022] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19330'. [ 423.206179][T14015] EXT4-fs error (device loop6): ext4_quota_enable:7128: comm syz.6.19327: inode #218103808: comm syz.6.19327: iget: illegal inode # [ 423.223535][T14015] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.19327: Bad quota inode: 218103808, type: 2 [ 423.238567][T14015] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 423.262371][T14024] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.19327: iget: bad i_size value: 360287970189639690 [ 423.289488][T14836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.308844][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19342'. [ 423.318148][T14027] netlink: 'syz.7.19342': attribute type 18 has an invalid length. [ 423.686743][T14060] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.19347'. [ 423.858459][T14075] netlink: 'syz.5.19355': attribute type 10 has an invalid length. [ 423.868265][T14075] ipvlan0: entered allmulticast mode [ 423.873629][T14075] veth0_vlan: entered allmulticast mode [ 423.880360][T14075] team0: Device ipvlan0 failed to register rx_handler [ 424.026973][T14087] netlink: 12 bytes leftover after parsing attributes in process `gtp'. [ 424.055535][T14094] netlink: 'syz.7.19362': attribute type 4 has an invalid length. [ 424.082504][T14094] netlink: 'syz.7.19362': attribute type 4 has an invalid length. [ 424.146793][T14109] loop8: detected capacity change from 0 to 1024 [ 424.181406][T14109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.230831][T14109] netlink: 'syz.8.19370': attribute type 10 has an invalid length. [ 424.258971][T14109] ipvlan0: entered allmulticast mode [ 424.264403][T14109] veth0_vlan: entered allmulticast mode [ 424.302251][T14109] team0: Device ipvlan0 failed to register rx_handler [ 424.371765][T13527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.426999][T14133] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 424.502023][T14141] loop7: detected capacity change from 0 to 2048 [ 424.549003][T29995] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 424.563461][T14141] loop7: p1 < > p4 [ 424.569922][T14141] loop7: p4 size 8388608 extends beyond EOD, truncated [ 424.667294][T30006] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.721743][T30006] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.776771][T30006] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.834905][T30006] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.927699][T30006] bridge_slave_1: left allmulticast mode [ 424.933635][T30006] bridge_slave_1: left promiscuous mode [ 424.939358][T30006] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.974273][T30006] bridge_slave_0: left allmulticast mode [ 424.980004][T30006] bridge_slave_0: left promiscuous mode [ 424.985969][T30006] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.125286][T30006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.137361][T30006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.155880][T30006] bond0 (unregistering): Released all slaves [ 425.243542][T30006] hsr_slave_0: left promiscuous mode [ 425.252681][T30006] hsr_slave_1: left promiscuous mode [ 425.274397][T30006] veth1_macvtap: left promiscuous mode [ 425.280122][T30006] veth0_macvtap: left promiscuous mode [ 425.285919][T30006] veth1_vlan: left promiscuous mode [ 425.291464][T30006] ªªªªª»: left promiscuous mode [ 425.419407][T30006] team0 (unregistering): Port device team_slave_1 removed [ 425.440230][T30006] team0 (unregistering): Port device team_slave_0 removed [ 425.546615][T14202] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.578035][T14202] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 425.703207][T30006] ------------[ cut here ]------------ [ 425.708790][T30006] WARNING: CPU: 0 PID: 30006 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x179/0x1f0 [ 425.718719][T30006] Modules linked in: [ 425.722726][T30006] CPU: 0 UID: 0 PID: 30006 Comm: kworker/u8:35 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 425.734820][T30006] Tainted: [W]=WARN [ 425.738788][T30006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.749115][T30006] Workqueue: netns cleanup_net [ 425.754239][T30006] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 425.759866][T30006] Code: 48 8d bb 30 0e 00 00 e8 e5 db bc fc 48 8b bb 30 0e 00 00 e8 d9 5b c9 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 58 1e a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 4a 1e a2 fc 90 0f 0b 90 4c 89 f7 e8 ae [ 425.779715][T30006] RSP: 0018:ffffc90001b6bc60 EFLAGS: 00010293 [ 425.785932][T30006] RAX: ffffffff84b5db78 RBX: ffff888118d597c0 RCX: ffff8881101d0000 [ 425.794380][T30006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888118d5a5c0 [ 425.802524][T30006] RBP: ffffffff86c8b840 R08: 0001ffff86847f7f R09: 0000000000000000 [ 425.810937][T30006] R10: ffffc90001b6bbe8 R11: 0001c90001b6bbe8 R12: ffffffff86c8b860 [ 425.818988][T30006] R13: ffff888118d597e8 R14: ffff888118d5a5c0 R15: ffff888118d597c0 [ 425.827279][T30006] FS: 0000000000000000(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000 [ 425.836401][T30006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.843061][T30006] CR2: 00007f615c566440 CR3: 000000018b398000 CR4: 00000000003506f0 [ 425.851140][T30006] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000200000000300 [ 425.859180][T30006] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 425.867304][T30006] Call Trace: [ 425.870600][T30006] [ 425.873544][T30006] xfrm_net_exit+0x2d/0x60 [ 425.878086][T30006] ops_undo_list+0x278/0x410 [ 425.882904][T30006] cleanup_net+0x2de/0x4d0 [ 425.887403][T30006] process_scheduled_works+0x4ce/0x9d0 [ 425.893089][T30006] worker_thread+0x582/0x770 [ 425.897809][T30006] kthread+0x486/0x510 [ 425.901989][T30006] ? __pfx_worker_thread+0x10/0x10 [ 425.907184][T30006] ? __pfx_kthread+0x10/0x10 [ 425.911792][T30006] ret_from_fork+0xda/0x150 [ 425.916376][T30006] ? __pfx_kthread+0x10/0x10 [ 425.921082][T30006] ret_from_fork_asm+0x1a/0x30 [ 425.925958][T30006] [ 425.929175][T30006] ---[ end trace 0000000000000000 ]--- [ 426.086922][T14239] netlink: 'syz.5.19415': attribute type 4 has an invalid length. [ 426.110268][T14239] netlink: 'syz.5.19415': attribute type 4 has an invalid length. [ 426.132907][ T3383] lo speed is unknown, defaulting to 1000 [ 426.139018][ T3383] syz0: Port: 1 Link ACTIVE [ 426.357439][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 426.357454][ T29] audit: type=1400 audit(2000000055.020:24678): avc: denied { write } for pid=14276 comm="syz.6.19428" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 426.474364][T14291] loop8: detected capacity change from 0 to 512 [ 426.492433][T14291] EXT4-fs (loop8): orphan cleanup on readonly fs [ 426.542040][T14291] EXT4-fs error (device loop8): ext4_quota_enable:7128: comm syz.8.19433: inode #218103808: comm syz.8.19433: iget: illegal inode # [ 426.602168][T14291] EXT4-fs error (device loop8): ext4_quota_enable:7131: comm syz.8.19433: Bad quota inode: 218103808, type: 2 [ 426.704679][T14291] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 426.727773][T14291] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 426.742564][T14291] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 426.764487][ T29] audit: type=1326 audit(2000000055.460:24679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14308 comm="syz.5.19437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 426.788471][ T29] audit: type=1326 audit(2000000055.460:24680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14308 comm="syz.5.19437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 426.812231][ T29] audit: type=1326 audit(2000000055.460:24681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14308 comm="syz.5.19437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 426.836027][ T29] audit: type=1326 audit(2000000055.460:24682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14308 comm="syz.5.19437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 426.859844][ T29] audit: type=1326 audit(2000000055.460:24683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14308 comm="syz.5.19437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 426.913983][T14291] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 426.938817][T14291] EXT4-fs error (device loop8): ext4_quota_enable:7128: comm syz.8.19433: inode #218103808: comm syz.8.19433: iget: illegal inode # [ 426.954673][T14291] EXT4-fs error (device loop8): ext4_quota_enable:7131: comm syz.8.19433: Bad quota inode: 218103808, type: 2 [ 426.970881][T14315] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm syz.8.19433: iget: bad i_size value: 360287970189639690 [ 426.986060][T14291] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 427.040631][T13527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.190011][ T29] audit: type=1326 audit(2000000055.911:24684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.2.19448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 427.214142][ T29] audit: type=1326 audit(2000000055.911:24685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.2.19448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 427.237907][ T29] audit: type=1326 audit(2000000055.911:24686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.2.19448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 427.272453][T14365] __nla_validate_parse: 3 callbacks suppressed [ 427.272472][T14365] netlink: 7 bytes leftover after parsing attributes in process `syz.2.19451'. [ 427.306043][T14363] loop8: detected capacity change from 0 to 8192 [ 427.332461][ T29] audit: type=1326 audit(2000000056.050:24687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14362 comm="syz.8.19450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefef6febe9 code=0x7ffc0000 [ 427.374076][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19449'. [ 427.428352][T14379] loop8: detected capacity change from 0 to 128 [ 428.299853][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19461'. [ 428.309735][T14441] batadv1: left allmulticast mode [ 428.314936][T14441] batadv1: left promiscuous mode [ 428.320259][T14441] bridge0: port 3(batadv1) entered disabled state [ 428.328444][T14441] bridge_slave_1: left allmulticast mode [ 428.334159][T14441] bridge_slave_1: left promiscuous mode [ 428.340103][T14441] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.355968][T14441] bridge_slave_0: left allmulticast mode [ 428.361766][T14441] bridge_slave_0: left promiscuous mode [ 428.367732][T14441] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.547811][T14484] netlink: 180 bytes leftover after parsing attributes in process `syz.2.19477'. [ 429.392711][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19510'. [ 429.444951][T14563] batadv1: left allmulticast mode [ 429.450417][T14563] batadv1: left promiscuous mode [ 429.455666][T14563] bridge0: port 3(batadv1) entered disabled state [ 429.487215][T14563] bridge_slave_0: left allmulticast mode [ 429.493128][T14563] bridge_slave_0: left promiscuous mode [ 429.498882][T14563] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.675812][T14577] netlink: 'syz.6.19517': attribute type 6 has an invalid length. [ 430.353848][T14624] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19534'. [ 430.363007][T14624] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19534'. [ 430.387205][T14624] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19534'. [ 430.445540][T14624] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19534'. [ 430.454743][T14624] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19534'. [ 431.100577][T14676] netlink: 'syz.2.19555': attribute type 6 has an invalid length. [ 431.174751][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 431.174768][ T29] audit: type=1326 audit(2000000060.192:24788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.2.19559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 431.236092][ T29] audit: type=1326 audit(2000000060.224:24789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.2.19559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 431.260000][ T29] audit: type=1326 audit(2000000060.224:24790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.2.19559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 431.283876][ T29] audit: type=1326 audit(2000000060.224:24791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.2.19559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 431.307816][ T29] audit: type=1326 audit(2000000060.235:24792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.2.19559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 431.332030][ T29] audit: type=1326 audit(2000000060.235:24793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.2.19559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 431.504989][ T29] audit: type=1326 audit(2000000060.460:24794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.5.19564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 431.528982][ T29] audit: type=1326 audit(2000000060.460:24795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.5.19564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 431.552949][ T29] audit: type=1326 audit(2000000060.460:24796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.5.19564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 431.638191][T14702] random: crng reseeded on system resumption [ 431.757156][ T29] audit: type=1400 audit(2000000060.685:24797): avc: denied { write } for pid=14701 comm="syz.6.19567" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 431.886537][T14716] loop8: detected capacity change from 0 to 512 [ 431.909841][T14716] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 431.953116][T14716] EXT4-fs (loop8): 1 truncate cleaned up [ 431.969213][T14716] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.986114][T14726] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 432.047500][T13527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.192173][T14751] loop6: detected capacity change from 0 to 128 [ 432.223578][T14751] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 432.237918][T14751] ext4 filesystem being mounted at /2835/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 432.249647][T14756] __nla_validate_parse: 5 callbacks suppressed [ 432.249664][T14756] netlink: 16 bytes leftover after parsing attributes in process `syz.7.19589'. [ 432.350347][T14762] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.409891][T14762] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.454646][T14836] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 432.477836][T14762] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.528337][T14762] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.567278][T14791] netlink: 'syz.5.19606': attribute type 9 has an invalid length. [ 432.575260][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19606'. [ 432.584738][T14791] netlink: 'syz.5.19606': attribute type 9 has an invalid length. [ 432.592594][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19606'. [ 432.630691][T30017] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.679062][T29986] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.687759][T29986] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.816927][T29986] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.969976][T14812] lo speed is unknown, defaulting to 1000 [ 432.970562][T14818] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19615'. [ 433.352843][T14837] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.362799][T14837] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.407861][T14837] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.417854][T14837] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.446198][T14812] netlink: 'syz.7.19614': attribute type 13 has an invalid length. [ 433.470477][T14812] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 433.491785][T14837] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.501711][T14837] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.556572][T14837] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.566545][T14837] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.652632][T29986] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.661167][T29986] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.672789][T29986] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.681340][T29986] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.693063][T29986] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.701339][T29986] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.723283][T29995] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.731515][T29995] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.826803][T14871] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 434.480557][T14904] loop6: detected capacity change from 0 to 128 [ 434.496381][T14905] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.565011][T14905] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.619805][T14919] 9pnet_fd: Insufficient options for proto=fd [ 434.632488][T14905] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.695247][T14905] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.759786][T29995] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.815932][T14934] loop6: detected capacity change from 0 to 128 [ 434.835197][T29995] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.874915][T29995] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.914332][T29995] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.049171][T12455] kernel write not supported for file bpf-prog (pid: 12455 comm: kworker/1:12) [ 435.514486][T15003] loop8: detected capacity change from 0 to 1024 [ 435.530457][T15003] EXT4-fs: Ignoring removed orlov option [ 435.536274][T15003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 435.574032][T15003] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.651592][T13527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.723738][T15020] loop7: detected capacity change from 0 to 512 [ 435.792843][T15020] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 435.817457][T15020] EXT4-fs (loop7): mount failed [ 435.904080][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19695'. [ 436.095489][T15032] lo speed is unknown, defaulting to 1000 [ 436.276591][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 436.276609][ T29] audit: type=1400 audit(2000000065.664:24913): avc: denied { unmount } for pid=15042 comm="syz.7.19702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 436.306125][ T3398] Process accounting resumed [ 436.388685][ T29] audit: type=1400 audit(2000000065.782:24914): avc: denied { associate } for pid=15052 comm="syz.8.19707" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 436.461097][ T29] audit: type=1400 audit(2000000065.825:24915): avc: denied { unmount } for pid=13527 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 436.512057][T15061] loop7: detected capacity change from 0 to 512 [ 436.538134][T15032] netlink: 'syz.6.19698': attribute type 13 has an invalid length. [ 436.546897][T15061] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 436.560382][T15032] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 436.589802][T15061] EXT4-fs (loop7): 1 orphan inode deleted [ 436.595738][T15061] EXT4-fs (loop7): 1 truncate cleaned up [ 436.612639][T15061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.661780][T15068] macvtap0: refused to change device tx_queue_len [ 436.679847][T15061] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.19711: iget: bad extra_isize 46 (inode size 256) [ 436.745654][T15061] EXT4-fs (loop7): Remounting filesystem read-only [ 436.826946][T30462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.861909][T15082] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 436.883663][ T29] audit: type=1326 audit(2000000066.297:24916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.7.19717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 436.907557][ T29] audit: type=1326 audit(2000000066.297:24917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.7.19717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 436.931502][ T29] audit: type=1326 audit(2000000066.297:24918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.7.19717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 436.955379][ T29] audit: type=1326 audit(2000000066.297:24919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.7.19717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 436.979323][ T29] audit: type=1326 audit(2000000066.297:24920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.7.19717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 437.003103][ T29] audit: type=1326 audit(2000000066.297:24921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.7.19717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 437.026864][ T29] audit: type=1326 audit(2000000066.297:24922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.7.19717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f020de2ebe9 code=0x7ffc0000 [ 437.085581][T15095] loop8: detected capacity change from 0 to 128 [ 437.131245][T15095] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 437.148169][T15095] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 437.298600][T13527] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 437.558952][T15149] openvswitch: netlink: Message has 6 unknown bytes. [ 437.572575][T15152] loop8: detected capacity change from 0 to 164 [ 437.580796][T15152] rock: directory entry would overflow storage [ 437.587038][T15152] rock: sig=0x4543, size=28, remaining=18 [ 437.836328][T15194] random: crng reseeded on system resumption [ 438.195953][T15220] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 438.312913][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19783'. [ 438.488948][T15261] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 438.558822][T15275] loop7: detected capacity change from 0 to 128 [ 438.567334][T15275] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 438.580740][T15275] ext4 filesystem being mounted at /1496/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 438.633556][T15285] loop6: detected capacity change from 0 to 128 [ 438.689416][T15285] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 438.699153][T15285] FAT-fs (loop6): Filesystem has been set read-only [ 438.708792][T30462] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 438.712432][T15285] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 438.754620][T15285] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 439.105495][T15339] loop7: detected capacity change from 0 to 32768 [ 439.611168][T15383] loop8: detected capacity change from 0 to 4096 [ 439.625467][T15383] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.652984][T15387] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.688692][T13527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.883882][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19862'. [ 439.974145][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19870'. [ 440.010657][T15426] loop6: detected capacity change from 0 to 1764 [ 440.045393][T15427] netlink: 'syz.8.19872': attribute type 298 has an invalid length. [ 440.447166][T15431] loop6: detected capacity change from 0 to 32768 [ 440.636073][T15471] netlink: 14 bytes leftover after parsing attributes in process `syz.5.19891'. [ 440.645509][T15467] loop8: detected capacity change from 0 to 8192 [ 440.665055][T15471] hsr_slave_0: left promiscuous mode [ 440.682520][T15471] hsr_slave_1: left promiscuous mode [ 440.747738][T15477] loop8: detected capacity change from 0 to 1024 [ 440.757614][T15477] EXT4-fs: Ignoring removed orlov option [ 440.770598][T15477] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.971341][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 440.971360][ T29] audit: type=1326 audit(2000000070.696:25077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15502 comm="syz.5.19904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 441.023019][T15513] program syz.7.19908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 441.058504][T15515] IPv4: Oversized IP packet from 127.202.26.0 [ 441.098357][ T29] audit: type=1326 audit(2000000070.739:25078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15502 comm="syz.5.19904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 441.122340][ T29] audit: type=1326 audit(2000000070.739:25079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15502 comm="syz.5.19904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 441.146386][ T29] audit: type=1326 audit(2000000070.739:25080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15502 comm="syz.5.19904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 441.149275][T15517] loop7: detected capacity change from 0 to 4096 [ 441.230971][T15517] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 441.248751][ T29] audit: type=1326 audit(2000000070.921:25081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.19914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 441.272885][ T29] audit: type=1326 audit(2000000070.921:25082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.19914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 441.296725][ T29] audit: type=1326 audit(2000000070.921:25083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.19914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 441.320519][ T29] audit: type=1326 audit(2000000070.921:25084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.19914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68ee8ebe9 code=0x7ffc0000 [ 441.344280][ T29] audit: type=1400 audit(2000000070.943:25085): avc: denied { create } for pid=15525 comm="syz.2.19915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 441.349208][T15517] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.364538][ T29] audit: type=1400 audit(2000000070.954:25086): avc: denied { write } for pid=15525 comm="syz.2.19915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 441.422656][T13527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.535046][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19930'. [ 441.550840][T30462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.558174][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19930'. [ 441.602357][T15561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15561 comm=syz.5.19933 [ 441.608043][T15569] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 441.636726][T15567] netlink: 'syz.7.19932': attribute type 3 has an invalid length. [ 441.809597][T15603] tipc: Started in network mode [ 441.814592][T15603] tipc: Node identity ac14140f, cluster identity 4711 [ 441.821481][T15603] tipc: New replicast peer: 255.255.255.83 [ 441.827641][T15603] tipc: Enabled bearer , priority 10 [ 441.884509][T15609] openvswitch: netlink: Message has 6 unknown bytes. [ 441.885842][T15611] netlink: 24 bytes leftover after parsing attributes in process `syz.7.19957'. [ 441.930045][T15617] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000005 [ 442.074637][T15640] netlink: 24 bytes leftover after parsing attributes in process `syz.8.19971'. [ 442.366089][T15653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.376318][T15653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.413507][T15674] netlink: 51 bytes leftover after parsing attributes in process `syz.7.19988'. [ 442.651093][T15707] netlink: 'syz.7.19996': attribute type 1 has an invalid length. [ 442.865496][T12436] tipc: Node number set to 2886997007 [ 442.932191][T15744] loop7: detected capacity change from 0 to 128 [ 442.973643][T15744] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 443.006848][T15744] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 443.064560][T30006] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 443.885635][T15865] loop8: detected capacity change from 0 to 4096 [ 443.909979][T15865] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 443.949743][T15865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.026687][T13527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.139538][T15920] netlink: 340 bytes leftover after parsing attributes in process `syz.7.20045'. [ 444.149358][T15920] netlink: 48 bytes leftover after parsing attributes in process `syz.7.20045'. [ 444.189279][T15928] netlink: 24 bytes leftover after parsing attributes in process `syz.8.20049'. [ 444.198711][T15928] netlink: 'syz.8.20049': attribute type 1 has an invalid length. [ 444.206804][T15928] netlink: 'syz.8.20049': attribute type 2 has an invalid length. [ 444.214661][T15928] netlink: 16 bytes leftover after parsing attributes in process `syz.8.20049'. [ 444.321518][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20066'. [ 444.812377][T15995] netlink: 'syz.8.20077': attribute type 10 has an invalid length. [ 444.855911][T15995] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 445.525543][T16098] netlink: 24 bytes leftover after parsing attributes in process `syz.8.20100'. [ 445.871685][T16153] loop6: detected capacity change from 0 to 1024 [ 445.879246][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 445.879264][ T29] audit: type=1400 audit(2000000075.964:25303): avc: denied { ioctl } for pid=16154 comm="syz.8.20111" path="socket:[148760]" dev="sockfs" ino=148760 ioctlcmd=0x48e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 445.916031][T16153] EXT4-fs: Ignoring removed orlov option [ 445.924178][T16153] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.946329][ T29] audit: type=1400 audit(2000000076.039:25304): avc: denied { read open } for pid=16152 comm="syz.6.20110" path="/2917/bus/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 445.974874][ T29] audit: type=1400 audit(2000000076.072:25305): avc: denied { write } for pid=16152 comm="syz.6.20110" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 446.243113][T14836] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.350545][ T29] audit: type=1404 audit(2000000076.469:25306): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 446.372940][ T29] audit: type=1400 audit(2000000076.479:25307): avc: denied { read write } for pid=30462 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 446.397474][ T29] audit: type=1400 audit(2000000076.490:25308): avc: denied { map_create } for pid=16226 comm="syz.7.20120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 446.417220][ T29] audit: type=1400 audit(2000000076.490:25309): avc: denied { prog_load } for pid=16220 comm="syz.8.20118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 446.436727][ T29] audit: type=1404 audit(2000000076.490:25310): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 446.451843][ T29] audit: type=1400 audit(2000000076.490:25311): avc: denied { map_create } for pid=16221 comm="syz.2.20119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 446.471221][ T29] audit: type=1400 audit(2000000076.490:25312): avc: denied { bpf } for pid=16221 comm="syz.2.20119" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 446.493159][T16229] netlink: 'syz.6.20121': attribute type 10 has an invalid length. [ 446.513626][T16229] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 446.943260][T16296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20155'. [ 447.007312][T16303] vhci_hcd: invalid port number 236 [ 447.013730][T16303] vhci_hcd: default hub control req: 2317 v7fff i00ec l0 [ 447.014619][T16306] IPVS: Scheduler module ip_vs_ not found [ 447.156732][T16324] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 447.164296][T16324] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 447.182092][T16328] loop7: detected capacity change from 0 to 128 [ 447.352694][T16350] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 447.362197][T16354] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16354 comm=+}[@ [ 447.374472][T16354] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16354 comm=+}[@ [ 447.520441][T16376] batadv_slave_1: left allmulticast mode [ 447.774421][T16389] lo speed is unknown, defaulting to 1000 [ 447.834835][T16389] chnl_net:caif_netlink_parms(): no params data found [ 447.872366][T16389] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.879502][T16389] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.886955][T16389] bridge_slave_0: entered allmulticast mode [ 447.893572][T16389] bridge_slave_0: entered promiscuous mode [ 447.900692][T16389] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.907945][T16389] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.915295][T16389] bridge_slave_1: entered allmulticast mode [ 447.922323][T16389] bridge_slave_1: entered promiscuous mode [ 447.942225][T16389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.953218][T16389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.978033][T16389] team0: Port device team_slave_0 added [ 447.985135][T16389] team0: Port device team_slave_1 added [ 448.001727][T16389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.008867][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.035061][T16389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.049352][T16389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.056442][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.082880][T16389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.110495][T16389] hsr_slave_0: entered promiscuous mode [ 448.116714][T16389] hsr_slave_1: entered promiscuous mode [ 448.185699][T16389] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 448.194808][T16389] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 448.203834][T16389] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 448.213164][T16389] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 448.255292][T16389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.272857][T16389] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.283465][T30006] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.290570][T30006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.311263][T29986] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.318698][T29986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.538950][T16389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.718767][T16442] wg2: entered promiscuous mode [ 448.723692][T16442] wg2: entered allmulticast mode [ 448.812223][T16453] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 448.855392][T16389] veth0_vlan: entered promiscuous mode [ 448.893477][T16389] veth1_vlan: entered promiscuous mode [ 448.948397][T16389] veth0_macvtap: entered promiscuous mode [ 448.972652][T16389] veth1_macvtap: entered promiscuous mode [ 449.005130][T16389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.019977][T16389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.041651][T30017] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.053868][T30017] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.092930][T16478] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16478 comm=syz.8.20222 [ 449.106140][T16478] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16478 comm=syz.8.20222 [ 449.136388][T30017] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.150083][T30017] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.657889][T16564] netlink: 36 bytes leftover after parsing attributes in process `syz.8.20259'. [ 449.771679][T16579] wg2: entered promiscuous mode [ 449.776860][T16579] wg2: entered allmulticast mode [ 450.049615][T16612] IPv6: Can't replace route, no match found [ 450.100962][T16616] vlan2: entered promiscuous mode [ 450.106120][T16616] bridge0: entered promiscuous mode [ 450.341344][T29986] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.351411][T29986] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.371104][T16644] sctp: [Deprecated]: syz.8.20297 (pid 16644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.371104][T16644] Use struct sctp_sack_info instead [ 450.400563][T16643] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 450.427303][T29986] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.437248][T29986] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.568652][T29986] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.578612][T29986] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.596198][T16669] loop9: detected capacity change from 0 to 512 [ 450.617543][T16669] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 450.640339][T29986] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.650198][T29986] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.670854][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 450.670873][ T29] audit: type=1400 audit(2000000081.104:25560): avc: denied { bind } for pid=16675 comm="syz.5.20311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 450.698756][T16678] netlink: 'syz.5.20311': attribute type 10 has an invalid length. [ 450.709831][T16669] EXT4-fs (loop9): 1 truncate cleaned up [ 450.716189][T16669] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.735657][ T29] audit: type=1400 audit(2000000081.179:25561): avc: denied { add_name } for pid=16668 comm="syz.9.20309" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 450.736593][T16678] team0: Port device dummy0 added [ 450.756914][ T29] audit: type=1400 audit(2000000081.179:25562): avc: denied { create } for pid=16668 comm="syz.9.20309" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 450.826001][T16681] netlink: 'syz.5.20311': attribute type 10 has an invalid length. [ 450.855786][ T29] audit: type=1400 audit(2000000081.211:25563): avc: denied { read open } for pid=16668 comm="syz.9.20309" path="/11/bus/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 450.878901][ T29] audit: type=1400 audit(2000000081.211:25564): avc: denied { write } for pid=16668 comm="syz.9.20309" name="bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 451.051091][T16681] team0: Port device dummy0 removed [ 451.105973][T16650] lo speed is unknown, defaulting to 1000 [ 451.168671][ T29] audit: type=1400 audit(2000000081.640:25565): avc: denied { unlink } for pid=13527 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=1204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 451.238753][ T29] audit: type=1326 audit(2000000081.705:25566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.5.20316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 451.262840][ T29] audit: type=1326 audit(2000000081.705:25567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.5.20316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 451.287062][ T29] audit: type=1326 audit(2000000081.705:25568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.5.20316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 451.311092][ T29] audit: type=1326 audit(2000000081.705:25569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.5.20316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 451.412557][T29986] team0: Port device geneve1 removed [ 451.459374][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20321'. [ 451.487581][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20321'. [ 451.547005][T29986] team0: Port device bond0 removed [ 451.583755][T29986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.597072][T16707] loop8: detected capacity change from 0 to 736 [ 451.604720][T16389] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.615335][T29986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.635073][T29986] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 451.661321][T29986] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 451.688163][T29986] bond0 (unregistering): Released all slaves [ 451.695591][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20329'. [ 451.718059][T29986] team0: Port device bond1 removed [ 451.727761][T29986] bond1 (unregistering): Released all slaves [ 451.745527][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20329'. [ 451.799260][T29986] tipc: Disabling bearer [ 451.804521][T29986] tipc: Left network mode [ 451.826035][T29986] IPVS: stopping backup sync thread 6608 ... [ 451.882601][T29986] hsr_slave_0: left promiscuous mode [ 451.897142][T29986] hsr_slave_1: left promiscuous mode [ 451.903275][T29986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.910718][T29986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.936585][T29986] veth1_macvtap: left promiscuous mode [ 451.952234][T29986] veth0_macvtap: left promiscuous mode [ 451.958018][T29986] veth1_vlan: left promiscuous mode [ 451.971154][T29986] veth0_vlan: left promiscuous mode [ 452.098121][T29986] team0 (unregistering): Port device team_slave_1 removed [ 452.204904][T29986] team0 (unregistering): Port device team_slave_0 removed [ 452.285409][T16650] chnl_net:caif_netlink_parms(): no params data found [ 452.358849][T16650] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.366452][T16650] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.374364][T16650] bridge_slave_0: entered allmulticast mode [ 452.393768][T16650] bridge_slave_0: entered promiscuous mode [ 452.406924][T16650] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.414100][T16650] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.433821][T16650] bridge_slave_1: entered allmulticast mode [ 452.443067][T16650] bridge_slave_1: entered promiscuous mode [ 452.488007][T16650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.507775][T16650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.551674][T16650] team0: Port device team_slave_0 added [ 452.562187][T16650] team0: Port device team_slave_1 added [ 452.588162][T29986] IPVS: stop unused estimator thread 0... [ 452.595457][T16650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.602668][T16650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.629094][T16650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.641227][T16650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.648458][T16650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.674650][T16650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.695700][T16792] syz_tun: left promiscuous mode [ 452.710418][T16792] wg2: left promiscuous mode [ 452.722967][T12435] lo speed is unknown, defaulting to 1000 [ 452.728850][T12435] syz0: Port: 1 Link DOWN [ 452.735950][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20361'. [ 452.755747][T16650] hsr_slave_0: entered promiscuous mode [ 452.761883][T16650] hsr_slave_1: entered promiscuous mode [ 452.782922][T16650] debugfs: 'hsr0' already exists in 'hsr' [ 452.788778][T16650] Cannot create hsr debugfs directory [ 452.912873][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20374'. [ 452.923175][T16828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.944351][T16828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.163015][T16650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 453.200870][T16865] wireguard0: entered promiscuous mode [ 453.206428][T16865] wireguard0: entered allmulticast mode [ 453.218412][T16650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 453.246273][T16650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 453.264964][T16650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 453.328772][T16888] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 453.348124][T16888] FAT-fs (loop5): unable to read boot sector [ 453.371998][T16650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.388992][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20394'. [ 453.393096][T16650] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.398165][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20394'. [ 453.424223][T30006] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.431495][T30006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.446856][T30006] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.454089][T30006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.476146][T16650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 453.486762][T16650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.516930][T16902] team0: Port device bond0 removed [ 453.542300][T16902] bond0: (slave bond_slave_0): Releasing backup interface [ 453.558295][T16902] bond0: (slave bond_slave_1): Releasing backup interface [ 453.578729][T16902] team0: Port device team_slave_0 removed [ 453.588075][T16902] team0: Port device team_slave_1 removed [ 453.596034][T16902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.603474][T16902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.619099][T16902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.626730][T16902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.655742][T16902] team0: Port device geneve1 removed [ 453.681772][T16902] bond0: (slave bond1): Releasing backup interface [ 453.701128][T29995] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.710192][T29995] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.736254][T29995] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.758906][T29995] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.819877][T16650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.111442][T16650] veth0_vlan: entered promiscuous mode [ 454.142847][T16650] veth1_vlan: entered promiscuous mode [ 454.197393][T16650] veth0_macvtap: entered promiscuous mode [ 454.217791][T16650] veth1_macvtap: entered promiscuous mode [ 454.243857][T16650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.271096][T16650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.280042][T16996] netlink: 'syz.5.20407': attribute type 21 has an invalid length. [ 454.288151][T16996] netlink: 128 bytes leftover after parsing attributes in process `syz.5.20407'. [ 454.292021][T30006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.309487][T16996] netlink: 'syz.5.20407': attribute type 5 has an invalid length. [ 454.317499][T16996] netlink: 'syz.5.20407': attribute type 6 has an invalid length. [ 454.325467][T16996] netlink: 3 bytes leftover after parsing attributes in process `syz.5.20407'. [ 454.360300][T30006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.389598][T30006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.413869][T17004] bond4: entered promiscuous mode [ 454.418981][T17004] bond4: entered allmulticast mode [ 454.430969][T17004] 8021q: adding VLAN 0 to HW filter on device bond4 [ 454.447239][T17004] bond4 (unregistering): Released all slaves [ 454.465327][T30006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.734250][T17061] netlink: 'syz.5.20427': attribute type 10 has an invalid length. [ 454.742272][T17061] netlink: 40 bytes leftover after parsing attributes in process `syz.5.20427'. [ 454.756083][T17061] dummy0: entered promiscuous mode [ 454.762957][T17061] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 454.908793][T17092] netlink: 96 bytes leftover after parsing attributes in process `syz.4.20437'. [ 454.963717][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20441'. [ 454.972968][T17101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20441'. [ 455.146883][T17143] program syz.9.20454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.343033][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 455.343050][ T29] audit: type=1326 audit(2000000086.114:25778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17165 comm="syz.5.20461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 455.394108][ T29] audit: type=1326 audit(2000000086.157:25779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17165 comm="syz.5.20461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 455.418015][ T29] audit: type=1326 audit(2000000086.157:25780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17165 comm="syz.5.20461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 455.442129][ T29] audit: type=1326 audit(2000000086.157:25781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17165 comm="syz.5.20461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 455.466396][ T29] audit: type=1326 audit(2000000086.168:25782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17165 comm="syz.5.20461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 455.490902][ T29] audit: type=1326 audit(2000000086.168:25783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17165 comm="syz.5.20461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 455.515006][ T29] audit: type=1326 audit(2000000086.168:25784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17165 comm="syz.5.20461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f708ebe9 code=0x7ffc0000 [ 455.626563][T17181] wireguard0: entered promiscuous mode [ 455.632133][T17181] wireguard0: entered allmulticast mode [ 455.709589][ T29] audit: type=1400 audit(2000000086.522:25785): avc: denied { create } for pid=17194 comm="syz.9.20474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 455.737777][ T29] audit: type=1400 audit(2000000086.533:25786): avc: denied { setopt } for pid=17194 comm="syz.9.20474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 455.790073][T17200] netlink: 48 bytes leftover after parsing attributes in process `syz.9.20475'. [ 455.812317][ T29] audit: type=1400 audit(2000000086.629:25787): avc: denied { read write } for pid=17203 comm="syz.4.20477" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 455.897353][T17206] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.904573][T17206] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.987979][T17206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.998281][T17206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.030861][T17206] vlan2: left promiscuous mode [ 456.035875][T17206] bridge0: left promiscuous mode [ 456.042123][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.8.20486'. [ 456.051494][T17222] netlink: 28 bytes leftover after parsing attributes in process `syz.8.20486'. [ 456.060907][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.8.20486'. [ 456.070777][T17222] netlink: 28 bytes leftover after parsing attributes in process `syz.8.20486'. [ 456.080139][T17222] netlink: 'syz.8.20486': attribute type 6 has an invalid length. [ 456.088898][T29995] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.106487][T29995] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.141997][T29995] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.173218][T29995] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.275118][T17256] SELinux: failed to load policy [ 456.378173][T17261] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.385423][T17261] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.442411][T17276] loop4: detected capacity change from 0 to 1024 [ 456.478693][T17276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.479903][T17261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.534373][T17276] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 456.581886][T17267] team0: Port device team_slave_0 removed [ 456.595339][T16650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.610254][T17267] team0: Port device team_slave_1 removed [ 456.623450][T17267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.643085][T17267] team0: Port device geneve1 removed [ 456.652443][T17267] bond2: (slave bond3): Releasing backup interface [ 456.668498][ T1022] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.685766][ T1022] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.711760][ T1022] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.725226][ T1022] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.740779][T17291] atomic_op ffff8881042f1528 conn xmit_atomic 0000000000000000 [ 456.926670][T17321] loop8: detected capacity change from 0 to 128 [ 456.940379][T17321] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 456.960042][T17321] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 457.017161][T17321] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 63: comm syz.8.20526: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 457.042512][T17321] EXT4-fs error (device loop8) in do_split:2029: Corrupt filesystem [ 457.053129][T17321] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 63: comm syz.8.20526: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 457.074201][T17321] EXT4-fs error (device loop8) in do_split:2029: Corrupt filesystem [ 457.094460][T13527] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 457.219796][T17346] loop4: detected capacity change from 0 to 1024 [ 457.226680][T17346] EXT4-fs: Ignoring removed orlov option [ 457.234698][T17346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.480446][T17385] netlink: 'syz.9.20555': attribute type 10 has an invalid length. [ 457.491307][T17385] team0: Port device dummy0 added [ 457.499192][T17385] netlink: 'syz.9.20555': attribute type 10 has an invalid length. [ 457.509818][T17385] team0: Port device dummy0 removed [ 457.541687][T17385] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 457.634146][T17397] team0 (unregistering): Port device team_slave_0 removed [ 457.650978][T17397] team0 (unregistering): Port device team_slave_1 removed [ 457.694343][T16650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.863903][T17445] vlan0: entered promiscuous mode [ 457.868995][T17445] bridge0: entered promiscuous mode [ 458.003951][T17461] SELinux: failed to load policy [ 458.164144][T17476] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.171535][T17476] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.227196][T17476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.244379][T17476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.290289][T17485] netlink: 'syz.9.20603': attribute type 6 has an invalid length. [ 458.299398][ T1022] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.309540][ T1022] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.327698][ T1022] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.339724][T17487] loop9: detected capacity change from 0 to 512 [ 458.346801][ T1022] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.366780][T17487] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.386049][T17487] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.417734][T17487] syz.9.20604 (17487) used greatest stack depth: 8960 bytes left [ 458.427087][T16389] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.782110][T17521] tmpfs: Bad value for 'mpol' [ 458.790882][T17523] sit0: left promiscuous mode [ 458.864446][T17535] sd 0:0:1:0: device reset [ 458.909600][T17523] vlan2: left promiscuous mode [ 458.916429][T17523] dummy0: left promiscuous mode [ 458.923777][T17532] netlink: 'syz.4.20624': attribute type 3 has an invalid length. [ 458.932633][T17532] netlink: 'syz.4.20624': attribute type 3 has an invalid length. [ 458.945614][T29995] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.962781][T29995] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.980623][T29995] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.014833][T17550] wireguard0: entered promiscuous mode [ 459.020802][T17550] wireguard0: entered allmulticast mode [ 459.024348][T17553] __nla_validate_parse: 12 callbacks suppressed [ 459.024444][T17553] netlink: 9 bytes leftover after parsing attributes in process `syz.4.20634'. [ 459.084732][T29995] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.105324][T17553] 0·: renamed from hsr0 [ 459.158949][T17553] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 459.169287][T17553] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.243492][T17553] 0·: entered allmulticast mode [ 459.248408][T17553] hsr_slave_0: entered allmulticast mode [ 459.254454][T17553] hsr_slave_1: entered allmulticast mode [ 459.283004][T17553] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 459.400844][T17578] vhci_hcd: invalid port number 96 [ 459.406031][T17578] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 459.429622][T17570] ================================================================== [ 459.437771][T17570] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 459.446479][T17570] [ 459.448827][T17570] write to 0xffff88812013aa68 of 8 bytes by task 17585 on cpu 1: [ 459.456555][T17570] shmem_file_splice_read+0x470/0x600 [ 459.461960][T17570] splice_direct_to_actor+0x26f/0x680 [ 459.467352][T17570] do_splice_direct+0xda/0x150 [ 459.472142][T17570] do_sendfile+0x380/0x650 [ 459.476700][T17570] __x64_sys_sendfile64+0x105/0x150 [ 459.481933][T17570] x64_sys_call+0x2bb0/0x2ff0 [ 459.486633][T17570] do_syscall_64+0xd2/0x200 [ 459.491167][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.497082][T17570] [ 459.499419][T17570] write to 0xffff88812013aa68 of 8 bytes by task 17570 on cpu 0: [ 459.507233][T17570] shmem_file_splice_read+0x470/0x600 [ 459.513145][T17570] splice_direct_to_actor+0x26f/0x680 [ 459.518532][T17570] do_splice_direct+0xda/0x150 [ 459.523299][T17570] do_sendfile+0x380/0x650 [ 459.527758][T17570] __x64_sys_sendfile64+0x105/0x150 [ 459.532983][T17570] x64_sys_call+0x2bb0/0x2ff0 [ 459.537684][T17570] do_syscall_64+0xd2/0x200 [ 459.542213][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.548129][T17570] [ 459.550463][T17570] value changed: 0x000000000000284a -> 0x0000000000002850 [ 459.557798][T17570] [ 459.560127][T17570] Reported by Kernel Concurrency Sanitizer on: [ 459.566373][T17570] CPU: 0 UID: 0 PID: 17570 Comm: syz.2.20641 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 459.577932][T17570] Tainted: [W]=WARN [ 459.581830][T17570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.591886][T17570] ==================================================================